Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a6a8665-bf4a-35db-aea7-a76048cdbeb0.roa
File: 2a6a8665-bf4a-35db-aea7-a76048cdbeb0.roa (raw, json)
Hash identifier: dnPZhylGZTlJIai95aImypwE8iI5KQPbE5mvlvzsDZ4=
Subject key identifier: C9:D0:52:71:50:CB:76:7B:85:F4:88:B2:F5:B5:66:09:69:38:7E:F5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0E2C1ECC30BDD6C754AA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a6a8665-bf4a-35db-aea7-a76048cdbeb0.roa
Signing time: Thu 01 May 2025 16:28:15 +0000
ROA not before: Thu 01 May 2025 16:28:15 +0000
ROA not after: Wed 30 Jul 2025 16:28:15 +0000
asID: 22773
IP address blocks: 72.223.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:e2:c1:ec:c3:0b:dd:6c:75:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:15 2025 GMT
Not After : Jul 30 16:28:15 2025 GMT
Subject: CN=614bf212-b5db-4bee-99b5-c3a6b1e74149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:97:56:ec:9a:c2:3b:ae:13:ae:5f:74:c2:
13:6c:ac:5c:40:fd:e9:c3:b6:59:43:39:ce:4a:ec:
f4:f6:d7:f4:0a:ef:fc:eb:a0:80:33:df:1d:44:1a:
97:2a:91:97:b5:fa:5a:40:bb:8c:3b:48:b3:e0:b7:
52:31:d5:28:8c:a4:55:6b:f1:ea:cf:42:34:7b:15:
02:fe:37:7d:6c:bd:97:cc:ab:e6:fd:28:c1:98:e2:
6a:73:e3:3f:67:f1:c2:65:2a:a8:ca:7f:4d:ee:5d:
b2:06:35:dc:2c:40:ba:b3:e8:06:75:7e:00:94:fb:
0b:ca:ba:62:03:48:2f:14:18:09:9e:d3:d6:bf:e7:
9d:a9:77:31:0e:12:1c:eb:df:9b:55:3b:2c:5f:13:
2c:0d:f7:e7:75:fc:ee:3b:3e:b7:f1:69:1c:d4:14:
6e:21:58:22:ca:6a:49:13:77:5f:73:2c:43:d0:5b:
41:38:d2:f5:0b:59:0c:16:aa:14:b6:f1:24:f9:23:
cf:64:7b:ed:0f:95:ab:3e:32:64:fc:e9:b1:45:38:
3c:ff:dd:55:0a:61:dc:79:4c:ea:21:4b:be:3f:be:
c7:e3:66:35:3e:aa:b3:e9:dd:2a:50:37:79:9f:f4:
91:a9:e1:3e:2b:0a:62:01:d7:c0:cf:04:5a:c6:a0:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:52:71:50:CB:76:7B:85:F4:88:B2:F5:B5:66:09:69:38:7E:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a6a8665-bf4a-35db-aea7-a76048cdbeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d8:9c:9a:9d:2e:38:52:55:75:35:c4:b9:6a:f6:52:04:4f:
6b:ff:90:fe:ab:2b:59:c3:55:16:80:b4:76:9e:38:ea:16:42:
2f:70:7d:98:6d:b2:d7:35:2f:83:bb:6f:08:1b:6c:91:10:5d:
3d:84:5c:54:36:cd:99:84:91:6f:88:17:ff:72:76:0f:fe:19:
be:1d:10:2f:b5:ae:bd:34:d5:38:77:97:12:a4:0a:f4:11:5e:
35:8c:05:b7:93:dd:e5:f5:1e:09:42:da:37:d3:bf:c1:22:63:
ce:d5:1d:86:a3:6b:82:64:04:74:7f:a9:d9:ed:01:97:3a:cc:
de:3b:bf:cf:32:b5:4a:3a:fa:93:2b:13:6f:33:09:06:ff:ab:
5d:ad:cd:32:8f:42:a2:3e:4e:3e:e5:ee:50:bc:48:57:b6:06:
2d:70:11:52:08:32:d5:ff:35:33:92:b8:7a:cb:9c:db:c2:d6:
42:05:1e:bd:c9:a7:97:aa:11:18:a5:c6:ad:39:7b:8f:52:f4:
da:93:21:87:fa:85:6b:93:f2:8f:04:96:32:bf:dd:6a:3e:28:
d4:9d:f2:3e:0b:e8:17:d2:d4:63:29:9e:a4:ba:2a:a7:c7:49:
46:44:7c:49:cd:12:d3:d4:12:df:16:9c:6c:34:e2:eb:1c:c0:
8f:19:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:06:35 2025 by rpki-client