Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/266bf9a9-1693-3161-87fa-990d8f199421.roa
File: 266bf9a9-1693-3161-87fa-990d8f199421.roa (raw, json)
Hash identifier: KK3Gq+ND+Gg1JPMPZL2wx0V9strgER32k/Lc6vT+lGo=
Subject key identifier: D8:56:45:BD:59:72:CC:F1:A5:6D:D7:85:7B:BA:C0:06:65:37:BE:09
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0DA88F3FC7FCD2461D920
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/266bf9a9-1693-3161-87fa-990d8f199421.roa
Signing time: Thu 01 May 2025 16:28:11 +0000
ROA not before: Thu 01 May 2025 16:28:11 +0000
ROA not after: Wed 30 Jul 2025 16:28:11 +0000
asID: 22773
IP address blocks: 72.223.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:da:88:f3:fc:7f:cd:24:61:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:11 2025 GMT
Not After : Jul 30 16:28:11 2025 GMT
Subject: CN=87fc1640-3cd2-48f0-b1d3-ed3e7fcef131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:62:46:de:f2:f5:9a:ce:f5:47:56:90:a9:
72:f6:ff:ad:01:7b:d3:54:ff:09:cf:38:27:85:aa:
a3:0a:4e:09:a7:20:5e:e5:70:07:71:f4:2a:e3:bc:
ad:26:1e:ad:27:4c:88:ab:70:f3:d3:e0:59:fc:76:
2c:9c:6b:9f:eb:df:a6:c7:98:6a:d7:fd:89:33:02:
fc:c4:10:f6:09:c0:b5:a8:7b:91:b5:88:a3:7d:2c:
a8:ff:c5:93:5a:5f:9a:f1:08:b3:bd:60:28:05:f0:
99:e7:e8:3e:03:98:b3:1c:ac:b4:c7:84:18:12:39:
f9:42:0f:75:87:46:1f:5d:e7:2c:a3:68:ce:d5:f2:
e3:c7:72:52:59:e0:07:60:d5:62:6e:b6:c0:72:b7:
30:68:33:a6:db:31:e3:00:58:b3:b5:f6:71:03:75:
f3:e9:83:c1:17:95:dc:71:27:8c:47:b7:c4:f7:5d:
fb:22:be:71:7e:96:65:74:a1:d8:13:47:2e:12:df:
57:06:78:d5:6a:03:96:e0:aa:fe:15:55:fd:fd:85:
61:db:42:dd:fe:bd:b9:93:53:9e:1a:2d:09:40:7e:
94:ac:82:80:58:de:aa:cd:ce:02:0f:7f:02:2b:a5:
9d:0b:9f:0f:4a:0c:41:e3:21:73:32:a2:ce:dc:ac:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:45:BD:59:72:CC:F1:A5:6D:D7:85:7B:BA:C0:06:65:37:BE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/266bf9a9-1693-3161-87fa-990d8f199421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:79:c6:0d:41:05:ac:90:20:00:2f:03:54:5f:e4:e7:75:4f:
12:e9:79:95:e8:f4:66:8f:26:8f:b5:d4:f7:aa:7f:3e:b6:ef:
5b:4e:06:f8:dd:8e:a2:16:40:69:d0:ac:e0:cd:5b:01:33:54:
d1:d1:20:52:6d:64:30:c8:50:46:01:83:70:25:ac:a5:52:70:
10:6c:af:cc:b9:ae:cf:66:0e:8e:1d:9f:97:98:02:6f:9e:d6:
be:50:63:83:51:c4:09:a6:89:d6:c0:ff:07:53:28:29:ea:be:
9c:76:40:08:e5:2d:3c:6c:8d:2b:4d:ea:ad:94:b3:17:94:9e:
f9:6c:ba:aa:b8:73:44:f0:33:99:00:cb:3b:1b:a8:98:4f:ff:
64:83:34:ca:d7:1b:0b:4b:c4:eb:94:b9:87:bc:be:cc:20:b6:
63:a8:72:93:44:7f:13:85:b3:7e:d8:63:4b:c4:01:07:4c:15:
33:19:e4:17:31:04:d7:d3:a8:88:30:14:af:7d:7e:c4:9d:15:
13:1f:58:e5:8f:df:db:aa:05:be:7e:2a:ce:b3:5e:d4:5b:a9:
d3:d8:34:0b:35:76:4f:6b:5f:1d:8a:7e:33:e6:01:cc:11:93:
37:0a:29:04:cf:23:2a:d2:8f:82:0e:a0:31:7b:4f:24:84:5d:
2a:a5:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:56:23 2025 by rpki-client