Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa3efbc-7797-3ef0-96d5-f53c95faff79.roa
File: 0fa3efbc-7797-3ef0-96d5-f53c95faff79.roa (raw, json)
Hash identifier: 8JnPez/czywnl0YxAYRZNx2fsteVwHwuqs4gtbanraw=
Subject key identifier: CC:81:38:52:2E:01:6E:0A:14:3E:B9:48:53:32:4B:4E:6E:F8:11:58
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA709825CD952E4B6E9280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa3efbc-7797-3ef0-96d5-f53c95faff79.roa
Signing time: Thu 01 May 2025 17:19:44 +0000
ROA not before: Thu 01 May 2025 17:19:44 +0000
ROA not after: Wed 30 Jul 2025 17:19:44 +0000
asID: 22773
IP address blocks: 70.173.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:70:98:25:cd:95:2e:4b:6e:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:44 2025 GMT
Not After : Jul 30 17:19:44 2025 GMT
Subject: CN=bc883e55-10f4-4112-b99f-2bda9b0d0a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:5a:8b:7b:9b:5c:48:4e:23:3c:c0:f3:ec:
75:6c:32:c2:4a:2e:05:e2:a1:14:cc:87:20:2d:99:
c7:f9:c9:be:71:01:e0:69:c5:f5:df:91:01:40:6e:
4e:57:8e:b4:3b:14:fb:8c:53:de:98:66:e9:0f:e6:
b8:c0:45:1c:87:fb:7d:15:08:cb:ea:6c:e9:09:9d:
86:4b:7d:a3:4d:42:25:ba:29:8d:44:4b:89:5e:88:
1e:57:a2:f5:00:80:d2:f7:11:97:b1:30:89:47:7a:
2e:8e:63:16:08:f6:2a:b8:b0:24:e0:96:2a:a9:e5:
0f:50:8c:e4:5a:cf:35:d7:ed:9d:83:fd:65:26:30:
e9:ea:21:13:e6:d9:5c:98:45:0d:05:32:23:b5:f1:
67:11:34:91:65:ca:25:1f:c5:ee:e7:f5:47:d2:34:
4d:cc:6c:2a:1f:cf:33:4b:82:1a:29:17:17:33:e4:
39:ab:0d:17:de:1a:72:29:15:74:ad:46:19:97:41:
e1:52:6a:99:5e:b2:03:f2:63:4d:39:05:c2:07:1f:
74:92:10:96:54:e3:35:7b:40:6c:9a:a7:93:e5:50:
f5:36:a3:7a:19:ae:7e:c4:24:e8:11:b8:bf:27:68:
91:34:c0:9d:a3:e5:ff:b2:08:a9:10:56:20:8e:73:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:38:52:2E:01:6E:0A:14:3E:B9:48:53:32:4B:4E:6E:F8:11:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa3efbc-7797-3ef0-96d5-f53c95faff79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:3c:a5:3e:8c:fd:17:b3:79:98:60:bf:53:90:e9:ac:76:45:
0a:ab:15:c2:f8:89:78:cd:69:96:65:20:bf:25:be:30:fc:74:
34:ca:7e:04:a9:d7:a3:9b:85:63:19:10:b5:57:cc:73:d4:f8:
4d:41:ba:8c:db:c5:38:77:77:5e:0a:e9:21:36:e1:fd:28:ae:
89:14:47:48:e4:d7:60:de:c0:c5:c8:10:0b:41:76:8c:68:8c:
4e:02:27:0f:87:5d:9c:0d:1d:2b:a8:da:16:0a:64:73:78:d4:
3c:8e:96:97:21:ee:9f:71:81:4e:2a:fe:f4:85:a4:d2:73:b4:
02:12:5a:76:7e:32:f1:66:1c:63:25:15:a0:e2:18:cb:b8:cf:
a2:c7:b3:04:cf:3c:ba:c2:72:f0:40:99:11:35:c0:db:d4:58:
82:3d:dd:ae:51:7a:d4:79:29:f0:b9:45:c3:99:ce:51:07:b0:
5f:ac:d8:56:05:de:25:b2:68:ce:4c:f5:ea:a8:a3:3c:82:56:
a6:42:ba:98:31:73:07:f2:6c:44:49:48:8f:68:89:0a:40:9f:
60:67:64:7c:3f:27:a6:f5:47:17:58:e4:da:fe:e8:64:b0:5f:
ec:a4:e6:0c:ff:82:b0:62:21:9f:d3:98:e7:08:73:6f:03:a0:
52:de:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:32:21 2025 by rpki-client