Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20d33eaf-0200-3c81-9474-288485ee79b4.roa
File: 20d33eaf-0200-3c81-9474-288485ee79b4.roa (raw, json)
Hash identifier: pAtbzHnQZJ9X6P6dLGml5bTA1HZmCVux4SbRt9wUB5U=
Subject key identifier: 7F:71:E0:72:5A:69:C7:35:A5:07:FE:CB:86:21:6E:8C:44:74:D4:B9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E02E788E9276DA37CE9080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20d33eaf-0200-3c81-9474-288485ee79b4.roa
Signing time: Thu 01 May 2025 16:26:50 +0000
ROA not before: Thu 01 May 2025 16:26:50 +0000
ROA not after: Wed 30 Jul 2025 16:26:50 +0000
asID: 22773
IP address blocks: 72.208.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:2e:78:8e:92:76:da:37:ce:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:50 2025 GMT
Not After : Jul 30 16:26:50 2025 GMT
Subject: CN=3b5f1d11-4b64-4644-94d0-afa715bf5279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:45:8c:ed:be:2b:e3:2d:68:f9:76:86:34:7c:
03:5b:8d:f3:2a:55:5c:4d:32:d8:d1:7c:f1:50:29:
0d:fa:50:2a:65:99:68:d8:c8:4f:36:a7:8c:43:66:
1a:d2:cf:18:02:b3:3f:7f:ca:34:34:bf:fb:85:03:
ab:df:ab:14:3b:4f:43:ce:06:29:5b:57:3c:7b:73:
42:17:87:94:24:d5:b0:a0:85:33:62:29:e2:ee:43:
ec:9e:ec:60:8c:5c:f3:11:8e:77:44:a5:a6:d4:99:
af:40:0b:2f:c0:7d:29:9f:fd:ba:8d:04:f1:d2:74:
fd:ba:8e:e5:fd:7e:6d:64:fd:34:9f:ca:e6:72:89:
22:7d:68:03:f2:c7:c3:b0:47:14:f8:eb:57:24:a4:
2e:85:a5:81:e2:eb:13:d3:96:e8:c5:08:6b:48:96:
22:85:6a:66:7d:81:7e:37:03:22:70:ff:a2:8c:5a:
ef:71:78:95:28:a8:5e:c5:51:dc:48:51:20:30:6c:
16:32:5b:3f:40:b3:92:78:9b:d5:b9:13:bf:6c:78:
2e:48:3d:0b:73:91:b2:2f:be:56:8a:d6:b7:3e:e7:
98:06:8c:bb:52:90:24:24:eb:06:83:31:88:42:0d:
a0:fd:dd:96:0a:41:ce:c1:5b:1f:69:52:b3:26:8f:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:71:E0:72:5A:69:C7:35:A5:07:FE:CB:86:21:6E:8C:44:74:D4:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20d33eaf-0200-3c81-9474-288485ee79b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a9:11:8c:3a:70:b6:f5:7e:84:bb:53:15:ab:9a:eb:20:2f:
1b:6d:c2:3d:8e:03:c2:3d:b3:c7:d9:88:dc:de:fb:0b:b6:94:
69:3e:db:52:07:56:0a:69:4b:f9:9d:45:59:f1:ac:2e:4a:f8:
0b:9c:8a:1a:a7:17:4c:00:5b:ba:ef:6a:7e:92:45:11:66:73:
cd:60:a8:eb:cf:79:d4:3c:0d:8e:aa:85:41:b1:9b:88:c1:4e:
2c:a6:98:af:ea:75:d7:ca:dc:de:15:eb:01:ec:42:5f:a2:46:
94:ac:1c:cc:a3:e0:46:63:8c:37:98:13:bc:0c:8e:3e:ba:9c:
53:d7:a7:d3:e9:ae:17:fd:40:eb:21:75:f9:f0:46:13:d7:57:
99:57:04:fb:25:44:25:da:71:c8:08:a4:5e:a3:d1:43:f8:b3:
38:4c:23:95:d3:18:77:fa:69:f5:a0:77:10:b7:e4:5e:7f:de:
de:91:bd:97:8e:6b:c0:54:cb:28:09:cc:b5:64:d3:b4:e2:16:
6d:03:0b:06:ab:d6:ee:f4:1b:08:f4:97:d1:8b:6e:8b:4e:c9:
1c:42:cd:b0:78:04:ac:29:c9:7a:b6:7b:15:2a:89:11:f1:8a:
a2:a2:5e:74:42:e6:e1:60:13:10:80:94:75:d8:a5:da:a9:70:
8f:b0:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:35:47 2025 by rpki-client