Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0120f4a8-f069-339b-adce-b88085639d9f.roa
File: 0120f4a8-f069-339b-adce-b88085639d9f.roa (raw, json)
Hash identifier: Rn5cwgXrRWg2I2M56tf0HI6zldtkIivQbTDDSPaAZUs=
Subject key identifier: 87:22:CD:75:67:3F:20:33:CD:2D:0F:1D:89:CB:16:55:C1:77:EE:29
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E025BF14A97379B27E1480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0120f4a8-f069-339b-adce-b88085639d9f.roa
Signing time: Thu 01 May 2025 16:26:46 +0000
ROA not before: Thu 01 May 2025 16:26:46 +0000
ROA not after: Wed 30 Jul 2025 16:26:46 +0000
asID: 22773
IP address blocks: 72.208.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:25:bf:14:a9:73:79:b2:7e:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:46 2025 GMT
Not After : Jul 30 16:26:46 2025 GMT
Subject: CN=7bfe5443-66c5-4093-bbc1-3400584f53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:d2:c7:e4:49:39:29:f0:ff:19:ae:4f:cf:
dd:51:ea:54:55:3e:e4:80:12:26:43:c0:7a:1d:cb:
b3:d0:2b:61:12:b0:17:3a:70:80:f2:03:e8:34:62:
b9:95:70:56:0f:4b:ab:fe:75:45:c8:e8:02:d4:f5:
2c:45:30:ca:f1:88:5a:f3:dd:6e:f6:22:2f:6d:89:
7a:78:04:74:1b:6a:e4:cc:43:1d:47:af:1d:d8:6b:
74:df:d7:7c:c6:20:80:e5:9c:6b:c1:29:ad:c8:b1:
77:82:6c:64:6b:65:b0:c2:ec:cf:57:04:79:9e:a0:
c6:d9:64:13:e3:0c:58:f2:e0:7a:9e:80:bc:e1:f4:
d2:48:bd:48:bb:a5:3c:c4:9a:be:58:4d:3f:70:fa:
72:00:1c:40:67:9c:69:e2:a5:41:5e:2a:de:ad:be:
6a:b9:d0:0e:3d:a4:94:1c:ec:ae:05:ef:1d:3f:de:
87:1a:5c:7a:97:36:cd:c8:72:63:f5:51:13:63:0c:
1a:d5:55:9a:32:5c:e2:ff:7c:ca:95:5a:18:09:19:
42:5a:82:1d:c5:c5:c4:d1:62:e6:f7:3b:27:3a:6a:
2f:47:e7:68:f6:14:56:0f:02:a9:7d:de:f6:ce:fa:
51:a5:f8:c2:df:99:1c:a3:e0:55:e9:f2:91:f4:f2:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:22:CD:75:67:3F:20:33:CD:2D:0F:1D:89:CB:16:55:C1:77:EE:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0120f4a8-f069-339b-adce-b88085639d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:d8:eb:df:fd:4c:7b:51:d4:3a:22:1c:16:16:3a:d2:04:dc:
ce:63:2b:b6:f3:65:9d:84:e1:ef:47:92:a6:dc:e1:79:f1:ac:
62:8a:8a:2d:0c:a4:5e:9d:ae:53:d7:ef:59:a0:60:33:36:f8:
51:8b:50:6b:a6:18:c1:af:d2:3d:ce:d7:31:45:79:4d:d2:dc:
b8:e1:63:74:12:74:7a:53:61:da:24:8d:54:de:f7:6c:db:92:
a3:c6:d3:a0:3e:27:41:7b:77:e3:fe:66:4c:da:25:65:44:0a:
fe:89:5a:f3:54:5f:b2:d0:28:e3:aa:6d:21:b9:e8:49:22:ed:
8b:d1:fd:c3:05:97:fb:46:df:da:35:29:4e:d1:1b:60:bd:a1:
02:b5:c4:8a:09:72:89:51:3f:68:f2:5b:2f:39:a7:ed:44:b6:
ab:fe:88:0a:5d:1e:13:09:3e:75:41:d7:f5:21:c3:31:24:b8:
8e:c3:2a:e6:2c:60:b3:27:bc:ec:7c:e4:43:1d:37:df:f2:c7:
4b:ec:bf:3f:3d:51:c7:d1:5f:d7:3b:fa:86:93:89:dd:9a:19:
36:d6:89:e3:42:55:16:ab:6b:9c:d9:60:0d:08:3e:35:3d:67:
e7:7f:d8:e3:c3:0b:44:61:9b:a2:57:d9:7e:24:20:8a:e4:ce:
7b:ef:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:12:37 2025 by rpki-client