Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b7e4192-918a-3a38-8c04-31b80be84895.roa
File: 1b7e4192-918a-3a38-8c04-31b80be84895.roa (raw, json)
Hash identifier: 3X7L6mmPM6eJjxtLXTtzSLomp7x2fppvBgG8uBo29Wk=
Subject key identifier: 5E:68:EA:79:15:3B:4C:12:DD:46:B7:A2:99:DF:F4:12:43:C6:DD:E6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E046FA4D0B4616D25AB000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b7e4192-918a-3a38-8c04-31b80be84895.roa
Signing time: Thu 01 May 2025 16:27:02 +0000
ROA not before: Thu 01 May 2025 16:27:02 +0000
ROA not after: Wed 30 Jul 2025 16:27:02 +0000
asID: 22773
IP address blocks: 72.211.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:46:fa:4d:0b:46:16:d2:5a:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:02 2025 GMT
Not After : Jul 30 16:27:02 2025 GMT
Subject: CN=64f2c65e-0b82-4c00-9a1a-78e775f3b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:2b:98:39:68:a4:9b:23:dc:26:61:cf:49:
6d:13:59:bb:08:71:9d:9c:19:0c:92:df:34:6e:02:
20:98:ad:58:ff:60:08:a9:0f:2f:3e:df:74:3e:b0:
a7:b8:a8:08:76:c0:ce:b1:7f:63:20:31:7c:58:00:
a0:8e:29:0c:07:f7:0f:f5:61:9a:56:69:f9:15:d1:
77:6e:0e:fc:69:cf:5a:ed:66:e3:65:e3:42:53:4e:
50:28:14:c3:39:70:d6:26:7d:ad:bc:60:aa:b2:9b:
96:15:f0:97:70:d1:1b:9d:c5:0b:2b:f5:9c:d1:3f:
90:ff:f5:9a:8c:4e:05:06:d0:85:46:27:d9:72:8a:
f3:e9:a2:bc:01:65:63:89:6a:e0:55:17:e5:42:92:
43:14:08:2e:3c:76:40:26:73:aa:90:3d:66:2f:85:
97:57:a3:9b:58:60:62:e9:51:d4:6c:e7:d2:58:a8:
0b:99:af:0f:20:0b:e0:a4:ce:c5:cc:a3:6b:92:b5:
e1:3e:23:42:01:4e:fa:da:6b:9d:d6:4f:c4:99:6d:
02:d5:70:4e:b1:0b:00:e4:9d:3d:89:93:7f:e1:da:
c2:94:66:a9:c0:f8:d9:49:68:0d:29:69:fa:22:99:
2c:c4:29:72:bf:39:c8:5a:15:e5:8e:7f:e9:2f:d8:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:EA:79:15:3B:4C:12:DD:46:B7:A2:99:DF:F4:12:43:C6:DD:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b7e4192-918a-3a38-8c04-31b80be84895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.211.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:cc:f1:b5:46:c3:ef:4f:8a:90:37:8e:57:0e:17:e1:fe:fc:
9c:23:7e:12:ac:fc:9f:1e:03:6e:b8:91:83:57:2c:18:17:a8:
96:a8:f3:4f:72:7e:05:de:45:b2:7c:77:e3:ae:4e:b8:c4:13:
f2:2d:f8:87:15:4d:a1:4c:2c:d6:c0:e4:b0:c9:a3:24:7f:e1:
69:42:99:bc:64:ae:de:0f:f8:0f:8f:12:b0:76:3c:83:11:68:
aa:44:69:ca:ac:4e:81:eb:a7:fc:77:5c:85:61:4a:1c:18:6e:
b0:82:80:8e:81:73:85:ee:22:16:d8:f1:ce:6a:d3:68:93:41:
27:b3:32:73:da:d0:15:a0:bd:3c:f8:19:44:70:e9:e0:37:0f:
f3:18:0c:33:1a:71:27:99:4a:84:ed:5f:f1:06:e1:0c:e3:30:
3d:8a:b3:e1:dc:22:97:32:1e:72:9f:2b:3d:9f:6b:1a:1b:56:
e7:c3:d4:ee:3d:8d:49:06:44:65:72:e4:c0:b2:56:38:d4:53:
c2:30:a9:3e:85:03:05:20:d6:61:45:44:61:74:55:3a:94:68:
e5:42:51:e8:b4:38:9e:bb:86:54:ab:6a:ad:b8:ea:77:62:37:
84:b1:1b:ad:46:48:0c:12:4e:fd:9f:ad:d1:a0:7c:91:74:73:
ae:b6:ba:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:23:18 2025 by rpki-client