Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ce043b03-3d23-31e3-9c3e-d490e270d9e6.roa
File: ce043b03-3d23-31e3-9c3e-d490e270d9e6.roa (raw, json)
Hash identifier: t4iJApsXswIIP0Rn8IWpZezxpSuHKDEjy/AcsycUJjo=
Subject key identifier: 8A:7F:12:2C:5F:5E:9A:6F:55:9E:0D:25:D5:BB:88:13:5C:DC:54:48
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849264439610FAA2235061CB180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ce043b03-3d23-31e3-9c3e-d490e270d9e6.roa
Signing time: Tue 11 Mar 2025 05:52:00 +0000
ROA not before: Tue 11 Mar 2025 05:52:00 +0000
ROA not after: Mon 09 Jun 2025 05:52:00 +0000
asID: 329007
IP address blocks: 172.111.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 05:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:44:39:61:0f:aa:22:35:06:1c:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 11 05:52:00 2025 GMT
Not After : Jun 9 05:52:00 2025 GMT
Subject: CN=987559f9-f2a3-40b0-b434-59b54cf2f8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:8a:b1:9d:7f:91:68:9a:97:bb:d0:a0:37:
c6:d1:72:62:61:24:0b:9a:22:05:04:fd:f9:00:4d:
9d:b8:d4:e1:05:b7:ba:8b:89:df:64:ae:18:2e:77:
f8:1d:68:05:8f:1b:4f:ba:aa:d6:56:2c:69:6a:56:
0c:2d:3a:1f:78:5f:70:cb:d6:16:27:43:7c:68:0e:
03:af:e0:f7:9c:fc:52:2d:49:5b:ba:04:2f:3d:8d:
80:a3:11:7b:a6:20:53:86:83:a0:1c:87:65:7b:10:
b1:ea:e8:bd:97:09:36:03:c1:30:bd:f6:7d:c4:df:
71:49:3d:c6:95:09:31:6f:06:c9:9b:74:6d:fc:b4:
27:84:d4:2d:39:a7:e0:6e:0b:e6:2e:ca:12:11:2d:
91:40:7c:fc:80:0d:00:64:a1:f6:54:da:e7:3c:c4:
64:cc:6c:76:6b:8b:95:44:ec:6e:ac:03:ba:ad:3d:
8d:44:da:28:f6:e4:77:89:be:5c:72:7a:d6:44:7e:
2e:e8:76:f2:03:a3:a6:4e:63:ef:27:7d:ba:bb:8e:
70:47:52:31:00:b4:44:49:ca:c8:01:ba:4f:b8:c5:
5f:64:6a:fe:21:ee:d5:fa:83:34:41:c2:28:5a:50:
f0:33:a2:1a:9d:88:e3:da:bd:1f:a0:84:97:38:24:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:12:2C:5F:5E:9A:6F:55:9E:0D:25:D5:BB:88:13:5C:DC:54:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ce043b03-3d23-31e3-9c3e-d490e270d9e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:94:b2:51:3c:73:32:15:32:1e:c4:3c:e3:92:5a:81:21:71:
ba:13:9a:37:0e:ad:08:88:71:f1:39:bb:bc:ab:5c:2b:6e:db:
16:07:62:74:eb:f1:37:3e:4b:79:38:4e:16:c1:29:8e:61:cc:
53:56:9d:04:ee:17:92:8b:79:a6:ad:b4:c4:d3:a3:3f:1b:4b:
63:a8:37:ff:e8:9c:47:55:ed:8e:64:29:fc:89:33:ed:92:5f:
ff:87:40:90:ef:76:8e:fe:2b:71:69:1f:ae:aa:72:81:b8:ab:
76:e8:a7:9c:7d:1a:e7:d5:15:55:34:9e:04:5d:66:2c:09:b0:
30:47:b2:41:e2:30:3f:8d:dd:c8:34:6d:73:94:38:1a:67:11:
4c:4b:12:b5:dc:e9:39:95:de:d0:99:78:e9:f7:e7:f1:81:18:
de:6e:ca:32:7f:61:d5:cd:0e:dd:9e:4c:a1:ae:1d:cc:bb:6d:
08:cc:20:c5:7c:2f:20:ff:90:7b:96:e0:02:8c:c4:d3:1d:9e:
99:c7:78:e0:5f:23:d4:f1:28:73:69:3e:04:df:59:32:65:4e:
91:98:ea:5d:4a:4c:a7:00:65:88:42:26:03:9c:94:d2:07:2f:
05:75:15:56:3f:96:fc:3f:82:ac:24:dd:19:27:d6:5c:69:3a:
c5:fe:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:02:35 2025 by rpki-client