Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bb72d38-d292-3b48-9774-66e1138fb2ad.roa
File: 3bb72d38-d292-3b48-9774-66e1138fb2ad.roa (raw, json)
Hash identifier: XMASw57Mtrj1py1Q9qCvVw2YQf6md1n5/EcGgw5Bd/c=
Subject key identifier: E5:84:1E:EE:E2:D1:DC:0D:7B:E9:0C:6F:24:EF:01:9C:AB:C6:25:AF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E36E651712F42249F6FEC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bb72d38-d292-3b48-9774-66e1138fb2ad.roa
Signing time: Thu 01 May 2025 16:33:23 +0000
ROA not before: Thu 01 May 2025 16:33:23 +0000
ROA not after: Wed 30 Jul 2025 16:33:23 +0000
asID: 22773
IP address blocks: 2600:8800:86ac::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e3:6e:65:17:12:f4:22:49:f6:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:33:23 2025 GMT
Not After : Jul 30 16:33:23 2025 GMT
Subject: CN=b212905d-89e5-47af-b836-057f156ab7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:28:59:c0:9d:17:e9:35:d3:4a:b6:ed:fd:
06:4e:01:8a:0b:b4:c8:28:4a:a9:8b:e9:ea:53:92:
5d:1d:c7:86:ae:94:55:63:7e:1d:68:0f:70:47:3f:
7e:07:22:68:04:88:dc:6f:f2:4b:e5:33:55:5b:aa:
a5:6f:35:4e:06:f5:18:8a:b0:6f:92:3a:c5:e3:9b:
57:7a:e5:1e:f1:81:d2:35:4f:9a:6c:3d:1b:8e:47:
ec:78:7d:d4:af:45:87:de:74:27:9e:ce:a3:25:84:
2c:ab:e5:74:7a:50:08:46:c9:8a:fb:f4:e8:29:07:
07:da:80:c7:5f:fd:0b:28:7d:76:74:d7:f3:0d:8f:
a5:6c:b4:50:4f:98:62:c4:28:56:35:36:a4:6c:2c:
21:53:a3:4c:c8:49:25:51:cd:ca:dd:5c:92:4d:60:
d7:2f:9f:f3:ac:d7:b0:ac:c0:06:ce:f2:df:0b:5c:
41:e5:9d:07:cb:14:8e:86:73:e3:04:da:5e:42:6b:
1b:04:02:58:8f:60:1a:52:9c:ed:18:d2:2b:63:7f:
60:22:d7:80:36:13:f4:0a:cb:66:64:3e:dc:c9:92:
f8:6e:29:96:cd:ff:35:d9:13:78:4f:6b:46:ee:c4:
47:e9:7f:6b:fc:a2:30:e8:95:3a:4f:90:ce:d6:ff:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:1E:EE:E2:D1:DC:0D:7B:E9:0C:6F:24:EF:01:9C:AB:C6:25:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bb72d38-d292-3b48-9774-66e1138fb2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:86ac::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:35:c1:d5:8a:a8:5e:96:34:78:d1:b2:1f:cb:62:c5:16:4f:
65:72:dc:2b:6b:fc:74:f5:97:6b:81:e9:9e:01:9e:6b:70:cc:
5a:b0:b2:4a:65:6d:7b:c5:37:bd:16:44:c5:dc:ca:92:ab:62:
a4:6d:2d:ce:12:5a:63:f1:b0:56:fc:8a:89:ff:f7:86:72:5a:
c7:04:0f:69:ef:cc:a2:cc:7a:6f:46:f9:25:0c:40:78:93:40:
74:5a:ac:40:46:a6:8c:47:66:5a:af:f7:46:e8:63:59:66:53:
16:3c:6b:f6:bc:83:fe:03:b7:91:29:5e:b3:82:3d:02:7e:d4:
e3:a8:72:69:f7:98:d0:b5:d5:94:cb:82:43:6e:4e:8b:b5:28:
78:09:de:88:46:b1:d5:a3:ac:70:a5:05:e3:36:27:e8:c5:70:
0a:f2:05:c6:04:c6:99:d7:a7:5b:78:ce:bc:37:32:6d:f5:42:
67:e7:b0:7e:82:e1:c3:b1:43:57:ee:63:27:a7:52:ae:96:79:
0b:a9:01:bb:8c:32:ff:97:41:61:24:d2:97:19:29:25:23:e4:
9a:ca:47:02:43:7f:c3:0d:f1:df:e0:7b:15:c1:cd:de:cc:eb:
ae:6a:b6:af:09:80:a1:bd:92:a2:bf:3f:a7:f7:25:ed:40:b7:
8d:54:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:54:34 2025 by rpki-client