Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18b4eea1-7210-3f39-8e57-eb516673593c.roa
File: 18b4eea1-7210-3f39-8e57-eb516673593c.roa (raw, json)
Hash identifier: pEixRgamsDP4lam/ZHsVEocmmxez9VsxIFUu4fPJ8TE=
Subject key identifier: 86:34:DF:2E:06:D7:1F:AF:E3:B5:39:63:B0:FB:64:51:CD:95:78:64
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E041FE28834E0CDEBB45C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18b4eea1-7210-3f39-8e57-eb516673593c.roa
Signing time: Thu 01 May 2025 16:26:59 +0000
ROA not before: Thu 01 May 2025 16:26:59 +0000
ROA not after: Wed 30 Jul 2025 16:26:59 +0000
asID: 22773
IP address blocks: 72.210.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:41:fe:28:83:4e:0c:de:bb:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:59 2025 GMT
Not After : Jul 30 16:26:59 2025 GMT
Subject: CN=507063aa-cdae-4614-8b66-be6b1c0ed28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:bb:cf:fb:0c:cd:85:dd:0c:ef:cd:2c:61:
de:6f:57:b2:50:25:1f:7b:83:fa:23:ed:be:62:e0:
1a:d2:54:73:15:53:2c:c3:74:2a:8e:6a:04:bf:eb:
5a:95:1e:26:8e:97:d7:e7:08:cc:ea:35:11:88:5c:
7e:51:ea:9b:51:f3:30:e0:22:33:86:51:e1:5c:5b:
08:8d:73:8f:31:1b:2d:d9:17:9f:ea:c9:47:ef:57:
6b:6d:f0:bb:60:e6:39:b6:8f:36:01:9c:7d:c7:f9:
b6:1e:17:58:39:44:55:15:4e:47:6a:7b:64:54:c2:
1f:9a:f9:81:c7:aa:01:9e:e4:27:34:24:7b:56:97:
e9:86:dd:2f:a0:4e:96:df:75:7e:5c:07:4e:86:d8:
cb:f0:5d:40:c2:0b:90:2f:66:f3:89:bf:93:77:5f:
b3:85:21:17:78:22:58:7f:b7:89:60:24:54:98:84:
ec:dd:0f:78:c6:50:66:5c:85:32:92:e8:3c:ff:d1:
30:29:e0:32:97:8f:ca:61:5a:07:f4:57:f6:c1:97:
ff:2e:f5:07:05:f2:f0:2e:0e:c3:00:1e:c8:f4:93:
37:0c:da:f5:91:16:6a:d7:76:38:89:6c:d2:b4:66:
dd:29:04:4d:db:b1:83:e3:15:11:16:e6:91:88:58:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:DF:2E:06:D7:1F:AF:E3:B5:39:63:B0:FB:64:51:CD:95:78:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18b4eea1-7210-3f39-8e57-eb516673593c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.210.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:69:67:b6:28:f1:a6:ad:fa:a2:c5:97:33:d2:1f:4e:80:db:
c2:72:c4:1e:36:84:3d:7b:63:f1:e2:0f:fe:0e:e8:6e:dc:81:
1e:f0:fa:fc:e0:45:46:46:4b:e5:99:d9:bb:c9:fd:44:05:46:
85:0f:0f:18:47:2e:a8:d3:90:7d:c6:40:88:f8:4a:d6:5e:8c:
73:a5:1e:44:e2:21:4b:0f:91:ce:53:6b:f7:16:b1:bf:5d:6d:
53:1d:7b:f4:80:de:32:eb:29:83:54:81:ee:f4:49:5a:8b:42:
95:fb:57:1d:cd:c1:88:14:f1:9d:e0:a9:83:de:89:92:70:e1:
2f:71:90:5e:e7:d0:d3:2b:1a:a5:fa:db:86:42:55:8d:fd:c2:
40:fe:f4:80:4a:95:1a:44:2d:40:d0:3d:e6:15:e8:7e:91:54:
63:f8:28:7a:56:60:cd:e4:d6:a4:d7:45:72:d1:d2:81:03:59:
48:36:70:fc:3d:d6:94:b6:2b:7b:bc:9c:28:53:c1:6b:29:cf:
e3:5a:e2:ee:26:05:a6:9b:26:cb:5c:00:c4:10:ef:85:62:1c:
f6:90:e2:38:cb:36:52:f7:e2:10:94:fb:61:45:5d:b8:6d:e1:
dc:ef:29:26:34:65:14:ab:85:92:6f:ea:86:b9:61:d9:22:a4:
bc:f2:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:19:02 2025 by rpki-client