Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32aa9462-ee52-3ab1-8278-9b90bd53ff29.roa
File: 32aa9462-ee52-3ab1-8278-9b90bd53ff29.roa (raw, json)
Hash identifier: UFMmPQDvcDmLiQcWmudc0Sn5ZzkHMC4BIPXjGm9bEew=
Subject key identifier: 53:6E:7F:16:E0:5E:25:75:28:90:E7:BF:55:A9:8F:C0:5F:D5:5C:A9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEC443CD78A1247D732A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32aa9462-ee52-3ab1-8278-9b90bd53ff29.roa
Signing time: Thu 01 May 2025 16:23:59 +0000
ROA not before: Thu 01 May 2025 16:23:59 +0000
ROA not after: Wed 30 Jul 2025 16:23:59 +0000
asID: 22773
IP address blocks: 70.172.112.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:c4:43:cd:78:a1:24:7d:73:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:59 2025 GMT
Not After : Jul 30 16:23:59 2025 GMT
Subject: CN=5f83fd5d-43d9-433f-ad02-5164a5446956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:af:35:62:c8:f5:03:8f:1f:44:94:00:26:
13:ec:48:6a:08:31:14:ab:01:f0:95:aa:64:ad:a4:
7f:b9:8b:81:b1:59:87:98:6b:9e:12:4f:37:f5:59:
f2:b0:f5:c4:66:07:4d:ea:84:98:30:0a:89:6b:03:
b0:7c:5e:bb:27:d4:e4:10:db:40:e7:59:50:50:bb:
00:00:1f:07:36:96:e6:eb:8d:5d:7f:f1:4d:39:9d:
7f:67:15:a6:36:47:cf:da:ac:f5:3c:aa:df:4c:8d:
b4:d9:b2:b2:fd:40:6c:e4:64:e3:87:2f:cb:89:ea:
e1:de:3b:9c:05:ac:cf:3b:b8:0e:7c:e8:bd:21:95:
51:e2:0b:5f:f3:84:7b:18:70:4d:bc:d2:7e:98:71:
01:eb:0a:e3:a0:78:64:2f:4c:e2:50:1e:b4:6b:9e:
0b:b0:02:78:e2:16:15:3c:7b:d9:95:f8:32:f1:3c:
22:b4:70:40:84:2a:3a:91:72:8f:3d:88:eb:47:c7:
e5:f6:f8:24:d8:ba:4b:f9:bb:12:d2:ff:5a:61:a8:
99:04:1f:b0:a2:f9:74:7f:a7:b1:79:3d:70:4b:ce:
70:09:69:db:d8:a7:4b:8e:2a:69:c3:5a:b4:3c:90:
90:0c:43:bd:c6:a4:5f:b4:1a:1a:4e:96:f3:36:68:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:7F:16:E0:5E:25:75:28:90:E7:BF:55:A9:8F:C0:5F:D5:5C:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32aa9462-ee52-3ab1-8278-9b90bd53ff29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:18:89:75:18:bd:1d:a1:e2:e8:4c:3c:83:e2:8c:09:58:f8:
b2:dc:d6:14:e5:46:cf:b5:10:bc:ef:bf:92:3d:49:d4:56:fa:
5a:0c:eb:68:01:01:3b:68:fb:f0:1d:f0:98:60:3a:b9:e7:ab:
19:d1:94:86:46:ff:6e:ad:7d:87:b8:b9:3e:51:d5:d4:58:f1:
c7:ac:1e:34:df:5b:e4:fd:7d:d0:3a:d8:12:eb:ee:8b:33:73:
23:8b:96:11:9b:cc:a6:d9:3b:4b:50:24:bc:68:d4:16:30:d8:
f3:35:ac:56:c0:9f:77:34:0d:26:ff:11:50:bd:80:0e:9e:41:
a7:c5:a8:2f:1b:7d:63:f3:99:40:83:0b:8d:fd:7c:18:5f:9d:
fa:e5:e5:fa:bd:1f:05:c3:5b:1d:ca:ac:28:07:3f:92:eb:fc:
7f:3a:db:f8:c1:55:50:93:db:96:04:2c:48:64:6d:44:6d:e3:
fa:cf:6d:48:cd:a3:f7:2a:e7:4b:f3:66:9b:bb:09:d1:c2:5b:
3b:93:cc:6c:65:24:cc:37:0a:c7:a6:19:76:76:8f:23:ba:0a:
c9:f8:e1:e9:c0:2c:b5:db:28:c3:da:b1:40:b6:82:28:c3:b6:
9a:1d:6e:a3:bd:95:78:61:7c:c2:12:37:43:c3:d1:89:8f:cf:
0f:04:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:59:23 2025 by rpki-client