Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef3f986-7ef8-3c90-872e-f084d4855027.roa
File: 1ef3f986-7ef8-3c90-872e-f084d4855027.roa (raw, json)
Hash identifier: JWgzdMtYbWwzrRhu6wLR/sw5MhiNmcZcsbF0vIF9AlA=
Subject key identifier: 14:FE:65:99:03:AF:81:B7:B1:F2:D5:B0:2A:53:F6:77:52:BD:9E:86
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E16153564C456910A9BB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef3f986-7ef8-3c90-872e-f084d4855027.roa
Signing time: Thu 01 May 2025 16:29:15 +0000
ROA not before: Thu 01 May 2025 16:29:15 +0000
ROA not after: Wed 30 Jul 2025 16:29:15 +0000
asID: 22773
IP address blocks: 98.171.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:61:53:56:4c:45:69:10:a9:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:15 2025 GMT
Not After : Jul 30 16:29:15 2025 GMT
Subject: CN=7d6176f0-e1ba-415f-9f67-7350d76a8b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:44:e3:dc:ff:b9:b0:84:01:93:e3:1b:d1:
8b:7e:bb:f7:18:e9:16:2d:db:d5:81:5b:c1:1b:ad:
e4:a8:03:de:c1:29:fe:b1:7d:4d:38:f6:7e:bc:40:
6b:4b:44:e6:47:c8:1a:3a:a5:f4:87:4a:24:de:b2:
2b:84:94:e3:45:95:8a:b3:5a:7a:1c:28:4d:84:62:
67:91:f7:4d:25:f8:7d:42:ca:7f:d8:85:af:49:1e:
dc:fb:b9:00:e2:92:56:9b:24:af:2c:87:3f:44:88:
8c:ca:ba:ed:1c:9e:ca:82:47:07:6d:3e:49:6b:4d:
86:a9:48:f9:c0:0c:9f:37:48:27:a4:39:e4:c8:08:
cb:ef:96:8f:60:79:ce:70:10:18:36:5e:33:b6:51:
44:fb:86:9d:12:ee:72:96:0e:64:13:b0:9f:c7:08:
2e:f5:f2:15:18:30:df:c3:05:20:ab:9d:24:de:09:
1b:6f:76:dd:b2:82:c3:55:3f:66:db:34:35:14:98:
9b:a3:a8:d6:31:3f:18:b9:a3:06:d8:0b:08:c3:29:
77:cf:bf:f8:a2:de:64:12:b9:b2:0f:28:13:4d:db:
74:e5:96:ba:a1:79:8e:ff:eb:8f:64:61:0a:15:52:
85:17:fc:be:99:02:b1:d3:8f:07:7f:ed:c8:50:68:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:65:99:03:AF:81:B7:B1:F2:D5:B0:2A:53:F6:77:52:BD:9E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef3f986-7ef8-3c90-872e-f084d4855027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.171.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e2:4c:28:0b:2d:27:4e:b6:df:49:aa:94:73:cf:b6:0b:59:
a2:4c:0c:b4:03:2e:2e:b0:b7:27:ba:46:37:06:14:7f:71:85:
90:8c:63:da:f9:21:69:14:6f:00:84:7d:21:9a:80:f7:9f:2f:
32:83:5e:bd:4b:28:6c:cb:aa:7e:9c:d3:e3:1c:36:a5:c6:76:
8d:12:0c:0f:6b:59:29:a5:88:92:a8:4e:b7:19:18:aa:3e:db:
6b:c8:06:79:78:85:f0:9c:7a:f6:59:2c:23:92:9e:70:46:34:
d7:01:b9:23:94:a5:da:df:23:e1:83:59:39:8c:f5:8a:55:13:
50:5b:f6:68:38:34:5e:c7:72:ae:31:27:2a:55:25:da:19:b5:
68:86:47:cf:51:b0:1c:01:0d:89:de:05:cb:15:a4:de:ce:d7:
25:27:be:13:b6:4b:06:76:0a:0c:ab:22:44:ee:e1:04:df:88:
e6:48:24:9d:6f:2f:c1:e7:28:ff:dd:44:6e:b5:9a:da:c0:8d:
48:df:ca:a6:50:8b:f9:d2:15:48:0d:bb:22:88:3a:fc:ea:ba:
5f:bf:b4:07:2e:7f:83:3a:b7:02:1a:cd:b6:c3:c8:ac:2e:fa:
9e:db:93:99:5e:be:bc:66:f2:b6:ec:ed:b6:0a:da:3f:1a:4b:
aa:49:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:32:21 2025 by rpki-client