Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d7b3b8e6-215b-3dd2-b358-708c756ff525.roa
File: d7b3b8e6-215b-3dd2-b358-708c756ff525.roa (raw, json)
Hash identifier: za/xKrHTXD9HoQYZgaO+NVrH7RawTNhk+Ch9kn2kluM=
Subject key identifier: 50:91:D2:A1:15:0D:4E:DD:BF:DA:B4:6F:7D:8C:5A:89:FD:43:54:66
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584999559CBBF1B7EFC82663ED60
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d7b3b8e6-215b-3dd2-b358-708c756ff525.roa
Signing time: Mon 21 Apr 2025 11:05:00 +0000
ROA not before: Mon 21 Apr 2025 11:05:00 +0000
ROA not after: Sun 20 Jul 2025 11:05:00 +0000
asID: 213990
IP address blocks: 172.94.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 08:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:99:55:9c:bb:f1:b7:ef:c8:26:63:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 21 11:05:00 2025 GMT
Not After : Jul 20 11:05:00 2025 GMT
Subject: CN=2df74fb8-7c3a-41e7-845f-050b4cff4c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:71:5f:3e:73:66:74:5a:da:bb:67:29:f3:
00:a5:98:f5:ba:20:ce:ca:7a:a7:fe:bb:4a:af:20:
38:c4:df:8f:7d:62:1e:4a:37:6a:79:ad:e2:7e:0a:
3d:0b:bf:dc:c0:33:6f:c7:9e:51:3c:2a:4e:1c:6f:
cb:15:fa:d0:f5:ce:c4:99:0b:99:32:4e:38:36:d4:
58:c5:c8:93:35:06:f4:83:fc:b7:e4:67:5b:dd:0a:
26:03:16:fa:7b:41:a6:bd:13:ea:5f:46:01:fa:fa:
9d:ed:6b:13:b6:73:62:af:9d:fd:79:79:0f:4b:76:
0b:d3:f1:bb:0f:e1:93:dd:9b:5f:4d:8b:a3:da:e1:
51:ce:75:b9:94:8e:0a:b4:0a:b6:e1:bf:30:78:01:
12:bc:ce:d5:a4:90:ae:8a:99:ae:66:5d:86:11:ed:
4f:6a:0b:5b:a1:f0:ca:7e:cc:5a:ec:b6:5e:e0:2d:
49:52:bf:cc:d7:c7:ac:37:a1:c1:a2:d6:e1:59:a6:
10:4d:9b:00:a2:c5:98:be:2f:fd:f7:e2:57:fc:3c:
5c:34:ff:d6:ea:47:52:7d:b8:1e:d6:a5:2a:1f:07:
c9:c1:ac:6e:8a:1d:8d:1a:92:d9:7d:02:37:2f:db:
ac:a6:ed:dc:e9:61:0f:ad:1f:4f:36:7e:53:fa:39:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:D2:A1:15:0D:4E:DD:BF:DA:B4:6F:7D:8C:5A:89:FD:43:54:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d7b3b8e6-215b-3dd2-b358-708c756ff525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:43:d8:5b:1f:62:1e:8c:2c:b2:38:ff:e6:e8:c0:eb:f7:0a:
5c:3a:4c:17:52:31:58:1e:c0:f9:42:25:3a:4d:c4:10:08:63:
a4:3a:de:b5:c7:0f:92:56:58:80:d2:a3:64:f1:a3:8e:48:98:
93:0d:0e:d8:20:59:46:8b:da:2b:50:e8:f1:91:fb:01:8a:5b:
30:fb:5f:93:70:21:c7:d9:c0:46:49:26:4b:04:3a:ee:98:df:
04:56:cf:ef:9b:bc:90:ca:9c:a5:28:c2:93:66:a6:7b:65:10:
ea:ed:b5:e1:16:41:c2:bd:89:a5:bf:de:d0:c8:b0:a1:68:92:
a4:5b:25:ad:e5:90:7c:2d:68:01:b4:9a:12:74:f5:2e:c1:95:
0a:a4:d5:7d:91:7e:a6:d2:9f:79:94:a3:6f:ad:0f:7b:a0:5c:
ca:eb:31:23:69:69:ab:06:a1:1f:3b:00:cb:49:c2:40:f9:eb:
fe:27:68:c1:cf:81:bc:27:b7:20:f9:31:d7:5a:ff:ee:4c:a8:
e7:2e:82:cb:1f:96:9c:4f:87:05:4c:0b:9e:68:72:85:f1:0f:
3a:32:97:49:72:dd:31:5a:e3:9c:8c:40:b7:26:1f:a8:f4:b4:
54:3f:78:c7:61:55:78:71:8a:07:ba:68:72:a8:58:55:71:a5:
6a:14:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:51 2025 by rpki-client