Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d7a9299-cab8-3959-a852-95a2e822371b.roa
File: 9d7a9299-cab8-3959-a852-95a2e822371b.roa (raw, json)
Hash identifier: iBJ5c8TWGLDz5NHv/F5llcTQ90eBIPKxb0vAuCEn8ig=
Subject key identifier: 5E:02:A9:DF:AC:37:B4:3F:4D:A0:B2:21:8B:A1:CB:12:5B:C2:0C:A1
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858498B80627F8397BF4E01622780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d7a9299-cab8-3959-a852-95a2e822371b.roa
Signing time: Wed 16 Apr 2025 12:09:52 +0000
ROA not before: Wed 16 Apr 2025 12:09:52 +0000
ROA not after: Tue 15 Jul 2025 12:09:52 +0000
asID: 329007
IP address blocks: 172.94.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 06:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8b:80:62:7f:83:97:bf:4e:01:62:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 16 12:09:52 2025 GMT
Not After : Jul 15 12:09:52 2025 GMT
Subject: CN=3f1c96b1-c854-4de7-9d45-ba24a3465a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:bf:d8:68:d7:cf:47:05:15:a2:c3:ff:53:
1a:3d:67:93:b6:9e:d0:84:b5:9f:25:48:98:54:2e:
9d:5a:fc:dd:d1:ad:fa:63:a2:50:de:02:f7:e5:25:
5e:c8:8f:07:56:86:59:d6:40:b1:30:06:8c:58:a8:
34:dd:df:28:2b:f0:b7:1e:d4:51:f4:cf:cc:67:a4:
c1:42:d4:6d:9f:12:aa:22:87:e4:ec:fc:75:47:ee:
b1:d9:ab:78:57:dc:aa:52:d9:9e:f3:9a:d7:a5:1e:
ab:79:f8:d6:ce:6a:02:f3:47:1d:71:d7:dc:da:5c:
b3:41:59:2d:58:d1:fe:5e:81:9b:0b:13:4c:3a:3b:
34:a3:19:79:d9:c9:81:c3:6b:ad:70:82:21:59:46:
c9:38:2b:ff:ed:6b:f2:2b:f9:94:ed:d3:9e:7e:64:
3c:b5:fc:02:42:17:2d:68:e4:5a:7c:8e:27:ac:0a:
49:e0:9f:48:89:71:47:04:c8:c8:03:d9:19:b5:a9:
05:9e:48:b4:80:90:68:19:87:ec:01:d2:49:a2:a6:
6f:b1:80:99:e9:02:bd:23:5c:14:59:a0:22:ac:4b:
48:ec:15:8f:58:c3:02:9f:3c:4e:6b:7a:14:e6:6f:
fc:43:88:5b:a1:59:5c:0b:d0:65:8c:a9:49:bd:d3:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:A9:DF:AC:37:B4:3F:4D:A0:B2:21:8B:A1:CB:12:5B:C2:0C:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d7a9299-cab8-3959-a852-95a2e822371b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:df:20:03:3b:db:49:fa:9a:00:a8:a1:a3:99:7a:84:0a:19:
54:68:f6:ce:b0:32:b1:7c:d7:7f:ff:9c:7e:d5:af:9b:17:c1:
c9:40:a6:36:eb:78:79:fe:55:72:e9:11:61:c1:71:a2:80:48:
2a:ea:47:78:3e:14:6e:ac:34:c7:ca:24:40:2a:c8:ab:b0:86:
02:38:9e:36:57:91:49:0b:48:4c:ff:d2:fa:8a:6a:fe:8c:ec:
9e:b1:24:d1:ea:a6:cb:1a:43:1e:ba:77:a2:44:4d:95:86:e8:
4a:0a:b2:b4:12:cd:e4:5d:13:b9:95:cc:25:8b:d0:32:78:47:
6e:c2:c7:3c:a1:97:22:b3:fa:0a:1e:af:c6:be:47:a8:5d:6f:
e5:2c:66:3c:69:49:9b:73:ae:77:48:76:72:48:3b:6f:ee:c5:
ab:66:14:78:a1:50:cb:1b:62:90:68:4b:16:35:5e:1c:5b:67:
30:e9:80:5b:b9:35:03:e1:79:c8:ea:67:ca:da:2b:fb:51:ad:
b1:42:be:20:f0:0e:9c:a9:84:60:95:6a:1f:c7:12:e2:66:17:
52:78:25:80:36:b9:ba:cb:85:9a:fe:12:d4:9c:62:f2:50:a8:
25:7b:be:62:78:3d:5d:77:00:25:34:f3:0c:90:d1:72:01:42:
8d:53:62:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLgGJ/g5e/TgFiJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQxNjEyMDk1MloXDTI1MDcxNTEyMDk1MlowLzEtMCsGA1UEAxMk
M2YxYzk2YjEtYzg1NC00ZGU3LTlkNDUtYmEyNGEzNDY1YTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO6/2GjXz0cFFaLD/1MaPWeTtp7QhLWfJUiY
VC6dWvzd0a36Y6JQ3gL35SVeyI8HVoZZ1kCxMAaMWKg03d8oK/C3HtRR9M/MZ6TB
QtRtnxKqIofk7Px1R+6x2at4V9yqUtme85rXpR6refjWzmoC80cdcdfc2lyzQVkt
WNH+XoGbCxNMOjs0oxl52cmBw2utcIIhWUbJOCv/7WvyK/mU7dOefmQ8tfwCQhct
aORafI4nrApJ4J9IiXFHBMjIA9kZtakFnki0gJBoGYfsAdJJoqZvsYCZ6QK9I1wU
WaAirEtI7BWPWMMCnzxOa3oU5m/8Q4hboVlcC9BljKlJvdPzowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4Cqd+sN7Q/TaCyIYuhyxJbwgyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ3YTkyOTktY2FiOC0z
OTU5LWE4NTItOTVhMmU4MjIzNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTfIAM720n6mgCooaOZeoQKGVRo9s6wMrF813//nH7Vr5sXwclApjbr
eHn+VXLpEWHBcaKASCrqR3g+FG6sNMfKJEAqyKuwhgI4njZXkUkLSEz/0vqKav6M
7J6xJNHqpssaQx66d6JETZWG6EoKsrQSzeRdE7mVzCWL0DJ4R27CxzyhlyKz+goe
r8a+R6hdb+UsZjxpSZtzrndIdnJIO2/uxatmFHihUMsbYpBoSxY1XhxbZzDpgFu5
NQPhecjqZ8raK/tRrbFCviDwDpyphGCVah/HEuJmF1J4JYA2ubrLhZr+EtScYvJQ
qCV7vmJ4PV13ACU08wyQ0XIBQo1TYmo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:41 2025 by rpki-client