Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa28b110-0be9-328a-9e3e-7d353243ed2c.roa
File: aa28b110-0be9-328a-9e3e-7d353243ed2c.roa (raw, json)
Hash identifier: Hemqaj1enRcklMoP8CEYNsu0j+fFmuj/tx64YvXbwi8=
Subject key identifier: AE:75:B9:6B:04:EA:61:02:E7:22:37:C8:5B:65:52:92:73:FC:97:A2
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584ABDF3E20F6E57CFCDE1B4F080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa28b110-0be9-328a-9e3e-7d353243ed2c.roa
Signing time: Mon 04 Aug 2025 06:39:56 +0000
ROA not before: Mon 04 Aug 2025 06:39:56 +0000
ROA not after: Sun 02 Nov 2025 07:39:56 +0000
asID: 9009
IP address blocks: 172.94.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 12:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:bd:f3:e2:0f:6e:57:cf:cd:e1:b4:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 4 06:39:56 2025 GMT
Not After : Nov 2 07:39:56 2025 GMT
Subject: CN=d6fe1126-8464-4c05-893c-d4f28227bbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:82:22:2b:ad:8d:fa:e4:87:cf:a6:84:e0:
46:38:3a:29:58:1a:b9:4f:e6:37:18:92:f6:e7:4a:
8e:8c:58:05:04:62:80:b6:51:61:fc:51:d5:b2:31:
47:3b:ef:92:22:3a:62:05:bb:59:f2:1b:76:2f:f4:
9e:4f:16:cb:44:b5:62:d2:41:74:db:6d:47:d9:c3:
65:4e:b3:4f:ee:41:59:f3:9b:42:89:cb:d3:e8:9e:
05:07:ff:17:d6:e5:e7:a4:9e:40:ce:92:51:3a:53:
00:85:19:7b:31:d6:8f:64:e7:01:0f:70:57:0b:1e:
49:f2:2f:4a:11:81:94:76:7c:71:ce:a0:f1:39:7e:
31:22:32:1c:1e:3a:ca:79:80:f3:eb:59:ba:dc:a5:
82:72:36:63:70:92:1f:84:d7:71:da:63:ba:c7:d6:
b2:06:72:fc:b8:4c:26:b8:d9:1b:ad:fe:dd:f1:17:
90:f8:a5:94:e9:4c:29:3e:4e:87:6e:2c:4c:55:d1:
44:c4:44:94:9d:e8:58:37:8f:3f:3c:6f:df:b9:d8:
80:b6:7a:23:c7:d3:62:54:5f:ac:fd:f9:4c:41:04:
3f:7d:79:37:1f:57:a2:ef:6b:96:a4:8f:31:40:0d:
dd:9e:e1:49:da:10:38:dc:20:29:c9:71:1a:74:8b:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:B9:6B:04:EA:61:02:E7:22:37:C8:5B:65:52:92:73:FC:97:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa28b110-0be9-328a-9e3e-7d353243ed2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:4f:72:4c:98:6c:58:73:b1:88:16:2c:55:63:57:3d:a7:85:
82:0b:75:e3:cb:9f:15:d4:98:4a:ba:3b:b1:73:0a:e9:57:91:
08:d0:26:d6:31:c1:f6:ee:be:b5:da:3e:f6:eb:43:c1:0d:f8:
21:96:c7:65:a2:3b:f3:06:5d:8f:af:0e:ef:37:d5:a0:59:ac:
d5:fe:85:13:40:f4:af:cb:07:2e:12:25:15:f2:ec:e5:81:eb:
5f:81:e5:ec:b2:6f:f2:e8:50:1a:2b:d8:ec:fb:d8:84:6a:4d:
9d:f7:c8:ff:58:fd:32:91:ba:2b:a8:7f:8c:ca:20:73:44:51:
be:49:37:3b:68:58:6c:41:51:ce:06:46:a3:64:b6:89:e7:aa:
d3:7e:7a:90:7e:7c:ef:1f:18:88:4b:47:0c:da:d9:8a:5b:20:
a5:49:2a:5a:65:b6:1c:3a:b0:f4:5f:ff:be:d1:0a:ed:b9:84:
21:f4:ec:37:10:ee:f4:31:0c:1e:fa:12:f6:38:41:f6:76:32:
fd:4f:94:b1:5d:4d:20:70:bf:b8:63:ba:0e:da:0e:d7:4e:e2:
32:bb:af:65:49:38:49:12:b7:c5:af:7f:d3:0b:b9:b7:aa:01:
e9:2e:25:0a:42:92:d1:cc:0d:c4:0e:c9:71:ad:83:81:3b:f7:
40:5f:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:44 2025 by rpki-client