Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e4edf1e1-e923-3eaf-86e3-7fe8972aa914.roa
File: e4edf1e1-e923-3eaf-86e3-7fe8972aa914.roa (raw, json)
Hash identifier: 2KCSUdFzht51ED6deqPb0yGpYUaMPyy+YUuUH5BQJhI=
Subject key identifier: 15:56:3B:91:1C:21:B1:77:48:1C:F8:19:41:D4:28:F8:3A:81:E0:E5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A9FE64D12CE962F620443D580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e4edf1e1-e923-3eaf-86e3-7fe8972aa914.roa
Signing time: Thu 24 Jul 2025 12:18:19 +0000
ROA not before: Thu 24 Jul 2025 12:18:19 +0000
ROA not after: Wed 22 Oct 2025 12:18:19 +0000
asID: 9009
IP address blocks: 45.74.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 12:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9f:e6:4d:12:ce:96:2f:62:04:43:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 24 12:18:19 2025 GMT
Not After : Oct 22 12:18:19 2025 GMT
Subject: CN=b68b8614-4d09-4eec-84bc-0d03277675d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:ab:e7:e8:fa:4d:94:a9:18:d8:de:61:d4:
4d:2f:69:18:1a:d3:29:14:1e:e6:c4:7a:e8:e6:f8:
74:55:b0:80:56:aa:2b:d5:ba:5d:46:b4:57:b2:74:
c1:14:0a:a6:8a:3b:24:57:72:5d:e6:39:b3:19:ac:
98:35:dc:e5:ef:07:ec:0c:1b:ca:71:30:8b:61:b4:
57:ab:19:c7:68:26:1e:40:dd:a6:7f:3b:b6:28:69:
06:ab:eb:98:65:13:41:5e:37:c7:7e:1d:10:56:f5:
d9:b1:e1:4c:3c:08:6e:53:31:b5:e4:e8:59:b8:1b:
ec:5c:d0:67:7c:f0:86:2e:12:05:6f:76:96:33:2f:
ec:b0:9c:8e:03:cf:9a:5f:c4:92:00:59:2d:2a:a4:
8f:40:c8:05:81:1e:04:c5:3e:81:25:73:a0:a9:5a:
23:56:0c:ed:f4:54:81:48:3d:c4:6d:3c:a6:ec:af:
e5:c0:e2:3a:e1:ba:13:1d:99:90:d4:28:8c:0c:2f:
eb:70:da:89:dc:80:5f:15:b5:40:ea:34:b7:3e:d7:
ed:17:54:c2:6a:fb:8f:ef:3c:cf:8e:5b:fd:5d:39:
27:e3:29:3b:d5:e7:67:2d:79:f5:d3:5f:cf:47:54:
df:ee:ac:bd:49:16:08:c1:8a:3f:a1:05:f3:b7:41:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:3B:91:1C:21:B1:77:48:1C:F8:19:41:D4:28:F8:3A:81:E0:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e4edf1e1-e923-3eaf-86e3-7fe8972aa914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e3:6e:61:ad:4d:4d:78:3a:20:27:b3:87:05:b3:e9:83:11:
1b:44:8b:2d:16:ad:47:7b:2a:0f:2b:4e:19:67:6c:83:7c:5e:
d2:69:f0:d1:1b:76:1b:da:57:0a:fe:d4:5c:1a:aa:89:44:54:
a9:a6:14:fd:8b:c5:33:77:1c:57:f8:a1:ad:44:ee:9f:ac:92:
08:da:3c:c9:4e:a1:60:89:49:8e:35:e2:39:59:80:a5:7e:d2:
d2:c9:c3:f3:d5:42:ca:7e:ac:e3:53:e2:90:01:28:fa:bc:15:
b4:b4:84:88:46:67:87:e8:c6:e6:e7:7b:6a:9a:83:09:6a:9e:
30:3a:cb:1a:08:dd:33:c2:88:88:f9:ba:19:ad:a0:ed:e6:c9:
2c:d9:33:28:f2:c8:c0:7d:16:9a:6a:03:0e:20:0e:db:44:1e:
78:b0:52:68:f6:e0:1b:2d:c3:9a:d5:a7:74:49:46:10:56:0d:
85:76:f9:01:1f:6c:d1:30:60:a2:5a:fb:68:b2:59:ca:37:23:
88:bc:bf:26:57:ef:5b:b8:c9:56:b4:9f:f2:1b:e0:61:30:d0:
78:09:68:5a:91:1a:52:48:3f:0d:21:62:9f:39:bb:51:af:3d:
e3:62:9b:3d:0b:86:02:6c:d8:4a:65:c1:fe:b3:24:ba:3f:de:
2b:3a:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:21 2025 by rpki-client