Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19114f92-35c8-3be0-bcb6-de7bab5a5a39.roa
File: 19114f92-35c8-3be0-bcb6-de7bab5a5a39.roa (raw, json)
Hash identifier: ZcDEz2Z0syn3aV2auiMOTiuO7FQNEe4L7XLuvvQhh+4=
Subject key identifier: 19:B6:86:9C:AC:52:EB:B4:04:67:F6:A8:7B:09:F1:A1:B3:F7:9B:0C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCBBFB32DB44CDCFBA5D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19114f92-35c8-3be0-bcb6-de7bab5a5a39.roa
Signing time: Thu 01 May 2025 16:19:53 +0000
ROA not before: Thu 01 May 2025 16:19:53 +0000
ROA not after: Wed 30 Jul 2025 16:19:53 +0000
asID: 22773
IP address blocks: 24.251.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:bb:fb:32:db:44:cd:cf:ba:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:19:53 2025 GMT
Not After : Jul 30 16:19:53 2025 GMT
Subject: CN=41c3107f-6a91-413d-a946-05aa8aea1b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:ca:9e:47:d1:fd:52:c1:e1:df:48:a9:4b:
1d:35:93:a5:41:33:6f:2c:4d:14:43:38:ea:c2:47:
8b:16:ec:c4:71:49:81:04:13:19:2e:60:94:1a:9a:
8a:e4:dd:9a:c0:59:fa:ce:9d:c9:c8:22:85:52:3f:
7d:0c:f9:1e:b8:e7:5d:59:05:c6:2c:1f:c9:66:48:
5e:e4:fe:7b:19:62:6e:ac:2d:70:c6:d8:d8:ea:18:
80:18:60:af:04:00:aa:8b:a2:46:fe:cf:34:f2:cc:
44:22:71:fd:a5:a6:ec:c6:f8:3a:ab:72:b4:8f:f5:
de:4f:0b:fb:f5:87:08:87:b1:ff:7d:b9:a6:ef:09:
98:b7:dc:11:ed:c4:f6:47:68:5f:66:d8:46:e5:14:
8f:e0:1d:74:9c:c9:43:2a:22:3b:88:13:5f:35:8a:
43:47:d3:ba:e9:8a:7d:14:7f:6f:43:01:2e:e3:8c:
3e:fa:14:d0:6a:02:89:b2:34:95:13:6e:1e:7f:8f:
42:f3:19:8c:7a:4b:42:ed:37:a3:d6:8e:1c:4f:f1:
ce:f2:7d:2d:4b:31:85:8b:ad:8a:a4:47:da:cf:35:
ea:13:62:e2:bc:32:6f:4e:76:fc:d9:70:20:38:a4:
dd:ec:45:19:5a:f7:37:fc:e7:48:83:c1:c6:2d:0e:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:86:9C:AC:52:EB:B4:04:67:F6:A8:7B:09:F1:A1:B3:F7:9B:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19114f92-35c8-3be0-bcb6-de7bab5a5a39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:21:1e:f6:df:4c:e3:58:d9:b3:40:d6:18:e8:2c:3b:9d:a2:
e1:77:5e:3f:4c:32:40:28:a6:ca:8f:9f:62:9c:f6:d5:f0:6d:
0d:07:88:8a:69:bd:3b:87:f9:0a:5b:af:45:ac:0f:87:d7:af:
aa:1d:7a:46:e1:7c:d5:32:a4:65:cc:05:87:48:32:01:7e:02:
bf:0f:c0:6a:68:49:6b:4c:db:54:60:f8:4a:97:bd:21:aa:88:
9a:71:00:c5:ed:4e:ee:9c:bb:22:c8:ae:f8:48:2d:79:e4:2d:
fb:cd:7e:46:cc:27:a2:4c:c1:3c:aa:87:d6:30:5e:56:42:20:
8d:08:0e:1e:93:ce:9d:b2:58:ab:c1:d0:d8:be:4f:53:af:56:
df:d5:83:b8:05:21:01:93:7b:ba:62:a7:c7:85:9c:37:3c:23:
47:46:f3:e3:5d:4c:41:0d:32:24:81:87:11:ef:ec:84:24:f8:
82:87:3b:9f:13:2b:10:3d:ea:88:c9:21:88:07:66:b9:03:f7:
12:d5:8b:16:c5:e6:6f:bf:5c:7f:5b:55:7f:24:ac:10:00:b7:
c3:66:1b:6a:fb:f4:ad:48:d7:c6:b8:bd:39:a4:61:7b:9d:2f:
a0:d7:29:7d:b2:37:43:d2:65:2a:10:9d:c0:66:5f:9a:4b:de:
7a:1d:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:29:16 2025 by rpki-client