Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f499fed-9ced-377c-ac5b-24c61b7e3e05.roa
File: 0f499fed-9ced-377c-ac5b-24c61b7e3e05.roa (raw, json)
Hash identifier: NyOlRK/4BQdyXQNFugaaSTeK+GYc6hsC2TDapRVjgIA=
Subject key identifier: CF:F5:18:4F:D0:90:04:6F:D6:59:15:32:9B:1C:21:A7:8D:3B:9F:A5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DF9BFE5B7DB4BCFD6A7900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f499fed-9ced-377c-ac5b-24c61b7e3e05.roa
Signing time: Thu 01 May 2025 16:25:41 +0000
ROA not before: Thu 01 May 2025 16:25:41 +0000
ROA not after: Wed 30 Jul 2025 16:25:41 +0000
asID: 22773
IP address blocks: 72.200.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:9b:fe:5b:7d:b4:bc:fd:6a:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:25:41 2025 GMT
Not After : Jul 30 16:25:41 2025 GMT
Subject: CN=2a202ed0-c713-469e-93bc-555f2ee93fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:b0:9e:8b:dd:be:f8:8a:a0:60:81:18:22:
2f:2e:27:26:d8:0c:6c:40:da:04:01:f1:72:82:12:
5e:6f:31:42:fe:a7:ed:0d:b5:a0:37:3f:02:d0:20:
2c:fc:1c:63:29:26:98:d7:3e:ec:c2:0c:af:8e:7d:
91:7b:15:d1:ec:9d:32:6d:f0:79:37:8f:22:f0:f9:
9a:5c:9d:76:cf:2b:f9:f8:1d:e9:d1:ec:60:60:a0:
2d:d4:94:89:6b:21:3f:70:a8:b8:a8:1f:82:d2:99:
38:d3:92:a8:60:ca:28:89:bd:4e:75:2e:3b:d1:28:
67:f6:9e:b6:2b:76:8f:51:1e:99:13:09:c6:29:97:
72:01:b0:5b:1f:de:23:16:64:93:9b:02:97:3e:21:
c4:d3:90:b9:dc:41:66:df:76:47:71:ba:6f:18:d3:
8f:46:d3:e0:a5:e0:87:5d:a1:b1:21:5e:3b:5b:9e:
6a:aa:54:7b:e7:e1:76:60:cf:5b:ac:fe:35:54:50:
d7:75:5a:31:9b:0e:43:87:9a:ed:40:06:3c:c4:9c:
53:69:0f:54:5c:60:a3:8a:44:84:d4:16:b6:b7:01:
8c:d5:4e:e0:d9:6c:d7:ae:0b:97:0b:4d:1a:38:f5:
6d:f3:63:94:d4:0f:76:a0:b6:52:00:27:5c:57:f5:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:18:4F:D0:90:04:6F:D6:59:15:32:9B:1C:21:A7:8D:3B:9F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f499fed-9ced-377c-ac5b-24c61b7e3e05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.200.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:c0:54:de:8d:90:ba:2c:76:ef:7a:ca:d3:eb:5c:d8:a2:a5:
52:ce:fc:7e:aa:24:74:6b:f7:97:ce:35:9e:58:9a:9a:84:fa:
d3:97:e2:b3:32:1b:e4:9c:90:79:15:bc:27:1e:56:9a:ea:e0:
6d:ef:36:d9:0b:d9:7b:07:4f:ad:46:a8:ea:1e:7c:b9:77:1f:
7c:40:6c:ec:94:b6:20:10:d8:40:db:d7:29:04:23:5b:e0:87:
42:ed:f6:32:40:72:cb:67:c9:ae:42:38:7c:4a:8d:fb:2c:df:
c3:ca:90:63:66:a3:fa:ce:37:f6:fa:32:6c:fc:52:85:c9:e7:
1f:09:78:1b:46:5c:05:00:57:44:0b:08:f4:57:5a:92:1c:62:
ad:03:09:ea:c5:40:45:a5:c4:f8:34:8f:91:94:a7:f6:ef:32:
89:e2:b1:a5:a6:05:85:7f:53:d8:3f:fb:50:55:4a:f7:ab:a3:
33:32:cd:3c:f5:93:8c:d5:4f:03:84:22:c9:f7:2e:ea:58:64:
b0:3c:06:bb:b5:75:5b:86:75:85:78:65:70:90:89:be:39:4d:
f1:b9:22:b7:c1:68:76:95:8d:5f:f5:d7:a3:1a:3e:67:63:0d:
53:b4:42:c7:fc:6e:ee:57:13:94:28:f5:4f:71:fb:8a:5a:d7:
76:ad:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:54:18 2025 by rpki-client