Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23cf64ac-1052-37be-9719-9760123b3d9a.roa
File: 23cf64ac-1052-37be-9719-9760123b3d9a.roa (raw, json)
Hash identifier: LNgNx6q5MB6tPVEBfkipSEquRfyxKew94gIo0kEUAjQ=
Subject key identifier: C5:11:0B:8F:40:CB:E0:1A:1E:A2:3B:E1:AD:82:50:14:BF:1B:D1:30
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E04086831AE94D398B8280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23cf64ac-1052-37be-9719-9760123b3d9a.roa
Signing time: Thu 01 May 2025 16:26:59 +0000
ROA not before: Thu 01 May 2025 16:26:59 +0000
ROA not after: Wed 30 Jul 2025 16:26:59 +0000
asID: 22773
IP address blocks: 72.210.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:40:86:83:1a:e9:4d:39:8b:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:59 2025 GMT
Not After : Jul 30 16:26:59 2025 GMT
Subject: CN=7f30d6e5-4abe-4ca5-b2a6-41f5cf6c7255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:84:29:78:2d:10:04:e1:b2:0d:b0:6f:fa:
69:79:0f:de:f9:bd:1f:a2:b7:01:5b:f1:5d:a5:3f:
04:55:57:44:fb:19:50:d6:ae:f9:99:92:85:28:a3:
92:6a:3f:23:07:f9:f8:f0:5f:a7:cd:a6:47:13:d9:
f1:e6:6c:c4:da:72:42:03:2e:8e:98:46:25:de:e6:
23:c7:e9:a2:12:7c:77:ab:3d:c2:87:83:fe:d9:6a:
4f:5c:4f:69:cd:e8:a8:dd:00:a1:1a:b0:e8:9d:75:
8e:02:db:79:b4:c5:69:fa:22:c2:b1:e7:76:b0:52:
28:a3:2b:ce:e2:17:6e:6e:1a:ca:1e:bd:b5:8d:58:
5c:44:39:61:af:11:55:a6:df:9e:88:50:10:2a:15:
dd:2e:68:95:3e:fa:05:fb:9f:1b:7a:ff:b8:8a:ee:
44:33:24:c0:78:00:00:9b:4d:ba:1d:7f:80:44:4b:
2b:04:da:4d:0a:fb:02:b5:ca:67:74:75:a9:03:8b:
8b:24:2b:79:ff:bb:9c:fe:d0:e2:70:f6:63:3a:a9:
9b:04:6e:e7:7c:58:15:6b:38:a2:ff:d8:ea:ea:39:
00:22:76:e7:5c:5d:11:79:82:5e:99:cd:dd:44:85:
81:bd:86:93:52:10:14:f7:3a:3e:79:86:07:16:58:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:0B:8F:40:CB:E0:1A:1E:A2:3B:E1:AD:82:50:14:BF:1B:D1:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23cf64ac-1052-37be-9719-9760123b3d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.210.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:ce:e2:14:e4:32:d1:8c:98:2d:47:28:a8:47:35:1a:a6:d7:
9e:d3:58:cc:ee:d9:90:84:b5:0d:df:b1:6e:69:72:45:d1:98:
4b:2c:9d:e8:eb:b4:47:18:cb:b0:65:97:92:3e:85:18:2d:05:
5c:6a:55:56:28:f0:ce:43:ae:3e:e5:a1:39:18:4f:f9:39:a8:
41:f1:7e:5a:63:53:cc:47:70:a9:bf:60:8a:68:b7:d0:dd:cf:
48:10:4a:b5:5e:c2:47:29:d9:52:c6:60:00:47:8d:1b:37:9d:
73:4c:e7:02:54:ab:f2:59:64:e5:34:3d:49:7e:0b:54:18:46:
dd:74:49:3f:ed:da:b5:cc:15:ea:b7:86:fc:e4:68:21:38:c8:
d9:bf:00:b5:59:6b:d5:10:8c:55:19:ba:f6:c7:ed:41:ea:50:
ac:1e:33:91:53:9c:82:48:78:2c:41:6f:ed:19:15:61:5d:cb:
7f:5d:3f:0f:28:56:ff:bb:fe:65:99:2b:04:82:b2:1a:d4:01:
29:7b:c3:e2:2d:10:14:93:55:d4:1b:a3:d3:d0:2e:ec:cb:f6:
4d:ee:38:7a:09:1d:65:c6:2a:00:5c:15:61:71:1a:af:d7:f6:
76:91:42:af:97:b9:e1:08:a3:48:73:76:03:fc:75:2d:01:4d:
f1:2e:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:50:28 2025 by rpki-client