Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bd5a383-544e-34ec-8727-c1fd4e544fee.roa
File: 3bd5a383-544e-34ec-8727-c1fd4e544fee.roa (raw, json)
Hash identifier: b73PunUnjOLpMcRPMR6sXoMy5EzQ/FRsh4xeCUgfSqg=
Subject key identifier: 8E:0F:CD:04:4A:3A:48:07:6A:F3:CD:63:7D:B5:0A:0A:F2:B6:ED:C0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E1A682554C4ED79EEE5180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bd5a383-544e-34ec-8727-c1fd4e544fee.roa
Signing time: Thu 01 May 2025 16:29:48 +0000
ROA not before: Thu 01 May 2025 16:29:48 +0000
ROA not after: Wed 30 Jul 2025 16:29:48 +0000
asID: 22773
IP address blocks: 174.72.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:a6:82:55:4c:4e:d7:9e:ee:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:48 2025 GMT
Not After : Jul 30 16:29:48 2025 GMT
Subject: CN=898dbbb9-5261-4552-a12f-67a6b42e58dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:3e:cb:58:f5:94:99:99:fe:66:8d:01:b0:
eb:48:3e:01:8e:24:4e:e8:3f:69:e7:07:f7:f5:15:
ce:00:7e:75:b8:d5:16:e5:e6:7e:1b:fe:2c:ae:0b:
04:d2:7c:08:9d:0e:a0:f8:00:46:74:e5:7d:bf:23:
2d:b0:41:b2:5f:e4:e4:4d:06:3b:3e:41:76:04:12:
50:92:67:6b:59:df:a6:53:ae:e2:c9:e4:e1:8e:67:
db:54:19:72:dc:70:9a:88:aa:e5:fc:82:ce:dd:37:
98:27:29:42:92:4b:28:be:81:9f:f6:89:bd:5d:6f:
dc:5f:91:dd:01:67:4c:3d:cf:07:2b:ea:8e:92:8c:
e1:78:bd:7b:6f:cb:6b:22:4b:74:a6:9f:99:1c:68:
54:e5:57:c7:b7:0a:0d:ce:a8:90:9a:5e:29:af:9e:
e2:b9:a5:14:81:d9:58:b1:f4:f4:05:eb:00:82:83:
81:4b:be:2e:a3:29:11:5f:4b:52:ef:85:ef:db:ce:
f0:4c:5a:d1:eb:d8:e1:70:47:c7:93:bc:bd:f3:2b:
2c:17:91:5a:47:9a:1e:4b:f6:1c:6c:66:05:7f:70:
0e:c8:aa:d9:da:88:e3:19:cb:85:fc:b5:e4:59:a8:
44:bf:6b:98:38:1d:03:b6:a4:d5:3f:2e:b0:19:82:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:CD:04:4A:3A:48:07:6A:F3:CD:63:7D:B5:0A:0A:F2:B6:ED:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bd5a383-544e-34ec-8727-c1fd4e544fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.72.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ef:e6:55:00:be:09:5a:db:75:53:a7:82:3e:b2:72:c1:00:
ba:4d:e6:ef:13:71:e5:5a:d8:c2:43:14:df:a2:d2:b5:74:ea:
97:28:87:0e:e1:c9:f6:de:81:76:fd:56:12:c6:e1:92:15:56:
73:7a:65:a0:c4:0e:ff:61:05:80:9f:31:4f:b2:03:5a:b0:64:
f3:3e:42:a3:bd:e8:f6:7f:17:b5:7d:cf:48:f1:fb:4e:8b:8f:
2b:8a:24:df:32:b6:54:b5:ba:03:14:39:7d:1c:52:84:f6:1a:
38:77:3a:6d:ff:27:c3:ef:2f:44:ab:51:69:a5:6b:5d:c5:37:
e0:3c:dc:44:e2:c4:34:86:b7:79:9b:62:11:e6:46:c5:9a:27:
34:f9:41:48:ba:83:38:76:62:a6:c7:b6:37:4d:bf:1b:83:28:
fc:40:c1:f4:3d:f0:97:d4:92:ff:55:2f:b9:d9:13:2d:f5:f7:
4a:1f:96:c9:fc:27:9d:ee:a7:b2:69:74:6a:29:ac:c2:b5:56:
99:4a:ab:e0:3d:73:1f:29:94:b1:01:5c:cd:3c:43:ac:65:b6:
ad:90:65:a3:1d:41:22:f4:a3:31:86:da:87:cd:19:31:ba:78:
24:88:b9:b4:93:b5:86:14:50:5d:c2:8c:94:66:ad:4f:f4:e7:
8d:af:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:07:12 2025 by rpki-client