Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c923ce-43a6-3f4a-b241-cf6650b14574.roa
File: 28c923ce-43a6-3f4a-b241-cf6650b14574.roa (raw, json)
Hash identifier: 0xhy3MtIbHGWOpw8NqJZgkxgmmaVtXJ7OMVMIWTRr1s=
Subject key identifier: 88:93:9A:BC:56:C7:73:C2:45:AC:56:52:4E:8C:C1:4C:21:CC:C9:64
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0DC13131B2641D06C2E40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c923ce-43a6-3f4a-b241-cf6650b14574.roa
Signing time: Thu 01 May 2025 16:28:12 +0000
ROA not before: Thu 01 May 2025 16:28:12 +0000
ROA not after: Wed 30 Jul 2025 16:28:12 +0000
asID: 22773
IP address blocks: 72.223.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:dc:13:13:1b:26:41:d0:6c:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:12 2025 GMT
Not After : Jul 30 16:28:12 2025 GMT
Subject: CN=af928b8c-2b1f-4593-9ff2-afe734616bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:ae:8d:03:53:96:5f:f5:e8:f2:9b:19:37:
a0:9e:76:15:13:db:55:31:05:f4:9a:8f:3d:c6:0a:
e1:32:21:f3:1d:32:f3:29:58:d4:f6:02:ca:7c:12:
4f:f2:91:3a:41:c0:31:a8:78:61:51:80:31:af:a5:
ed:a8:e0:54:fc:5b:38:2d:91:5b:57:42:e0:85:8f:
4f:f8:54:a1:ac:41:27:ec:c6:47:0f:a8:fa:2a:41:
f2:bc:e7:c3:f9:8b:80:96:98:d1:5b:5a:04:c3:c4:
0c:34:25:29:f8:ee:df:1d:7e:8a:a6:f4:c4:f6:dd:
d4:e8:46:b7:31:41:e8:f0:74:6d:5c:72:19:98:8b:
20:ed:3a:2d:df:82:d7:ab:fb:63:7e:9b:41:b4:cd:
be:f3:88:c9:54:04:f4:d7:b6:5c:65:07:6b:b5:3f:
5b:5b:14:54:20:9e:56:29:6d:dd:76:d1:78:66:77:
9b:76:3f:75:00:95:5f:3b:9e:04:75:94:b1:09:75:
21:90:3d:68:1b:c4:9e:e4:59:50:d9:62:3a:c7:01:
70:c8:e9:a3:7c:9d:f2:4e:7e:c8:5d:ff:7b:6b:16:
75:02:c1:81:af:4f:2e:68:4f:9a:47:fa:70:ee:84:
29:4b:36:6b:4b:d7:cb:a4:c9:ff:e3:79:f7:94:69:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:9A:BC:56:C7:73:C2:45:AC:56:52:4E:8C:C1:4C:21:CC:C9:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c923ce-43a6-3f4a-b241-cf6650b14574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:69:82:85:57:5d:86:da:e5:33:e9:18:9d:7b:0d:f2:c9:63:
95:bd:d4:30:63:69:2f:6f:76:74:27:55:ee:54:97:30:d9:b0:
24:82:d6:12:62:9b:ac:75:53:53:63:c3:77:85:88:c3:a3:5e:
5c:a7:79:68:ac:33:28:dc:1b:b2:86:4e:ba:5f:50:f6:51:17:
7e:f4:b7:13:50:40:c3:81:c7:f0:91:e7:63:4e:cc:1f:67:be:
5f:eb:0a:33:0d:8d:fe:c0:fd:e8:4f:a0:01:84:db:dc:3b:3a:
95:91:66:81:79:fe:d4:0e:fc:a4:c0:a7:56:9e:c4:af:4d:9d:
44:da:b6:57:cd:74:72:41:ac:7f:c4:02:9a:b3:ac:16:3e:57:
3e:f6:e5:6a:22:aa:5e:a3:2c:e2:38:4a:56:82:53:00:ac:1b:
09:b8:cd:ed:f3:73:1d:4b:a6:32:f0:b9:cd:2c:99:50:ec:c7:
56:36:de:53:89:88:f2:93:87:4b:6d:72:d0:3f:c4:97:1f:fe:
14:d6:47:1d:a5:d5:bc:21:9a:48:e7:8a:56:fa:c0:8c:6d:2f:
b6:18:36:6f:35:ca:e1:13:4a:50:42:d4:36:78:86:df:2f:57:
fa:57:b5:3e:e7:99:c0:38:c0:99:c6:0e:32:46:5c:13:94:0c:
49:bb:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:58:11 2025 by rpki-client