Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3be71323-d31f-3778-a5c8-9ecaf1ff70cb.roa
File: 3be71323-d31f-3778-a5c8-9ecaf1ff70cb.roa (raw, json)
Hash identifier: GkSDUsn8ifUkjX+/CPLWINNjycGgHqj8+ymecLJ051Y=
Subject key identifier: 39:B4:5D:5A:C2:83:1B:3F:28:36:A2:57:EF:F8:67:ED:33:0C:95:46
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E016F1C884F956ACF1AB60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3be71323-d31f-3778-a5c8-9ecaf1ff70cb.roa
Signing time: Thu 01 May 2025 16:26:39 +0000
ROA not before: Thu 01 May 2025 16:26:39 +0000
ROA not after: Wed 30 Jul 2025 16:26:39 +0000
asID: 22773
IP address blocks: 72.208.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:16:f1:c8:84:f9:56:ac:f1:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:39 2025 GMT
Not After : Jul 30 16:26:39 2025 GMT
Subject: CN=b1a2b09f-c344-4861-9a55-67d9a19ea30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:61:60:4b:f6:d5:52:2e:b1:a6:39:0b:39:
b5:2c:d3:a5:d7:3f:41:7b:10:12:40:7d:b7:77:9c:
64:d9:c8:3c:20:2c:06:62:8b:b2:73:54:30:c4:6e:
d1:0a:d3:d6:63:86:43:f9:ca:cc:32:59:a7:1f:f8:
98:da:51:e8:5b:49:d4:ad:c1:56:47:aa:22:40:24:
74:c2:b1:d1:00:5c:69:49:76:08:37:2b:79:85:cf:
f6:dd:49:d9:0d:88:70:88:eb:28:4a:fd:9b:4f:8d:
8b:55:57:da:b6:2f:32:14:a8:c6:81:c1:d3:2f:27:
f8:7e:2b:d2:e5:b2:d5:e4:62:ba:59:b4:5a:f9:d0:
55:ad:d0:35:e6:49:44:88:5f:f7:24:db:53:93:71:
a0:d6:c5:bc:f2:07:ad:5d:e8:a5:8c:aa:79:68:ed:
58:2c:be:07:65:58:d6:7e:e2:78:9d:29:ae:9c:85:
30:eb:6a:6f:ad:8f:c0:36:35:1b:dd:e4:8a:42:0e:
02:ff:eb:b1:17:87:47:1e:d8:93:4e:37:ea:0d:18:
1f:91:2d:d5:67:05:13:a3:8d:61:1f:26:5c:3f:35:
98:c2:11:06:3f:4e:96:31:c9:ad:9a:7d:dd:61:46:
27:f2:dc:f1:67:af:29:6f:79:41:69:e1:8d:85:22:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:5D:5A:C2:83:1B:3F:28:36:A2:57:EF:F8:67:ED:33:0C:95:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3be71323-d31f-3778-a5c8-9ecaf1ff70cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:44:53:15:6e:c3:d6:b6:a2:c0:ae:89:09:ad:b1:51:09:f8:
66:3d:f8:12:99:b1:1e:ea:98:10:a5:d8:7d:64:a6:9d:16:d8:
83:08:9d:01:56:76:7e:5b:a8:ee:48:10:f7:f3:8f:7a:8c:32:
86:23:16:7b:e6:74:a8:72:8e:86:48:81:ac:b7:d5:96:89:ed:
6f:bc:40:fa:28:72:ee:bd:92:e0:c8:75:8c:58:90:2a:8d:4c:
c2:0d:94:86:55:bf:38:cd:ae:f8:bd:51:a4:25:84:22:bf:4e:
b1:69:68:a4:76:8c:0d:6a:d4:75:01:2b:95:6b:89:f0:76:95:
61:4a:c6:31:19:73:0e:6c:63:e8:55:c3:9b:1d:28:4a:13:45:
59:ef:40:c4:7b:c5:01:55:26:8c:65:e5:8a:4e:2d:70:35:5d:
d1:5c:8e:49:a0:ae:f3:d4:98:4c:84:77:9a:d3:44:ce:f5:e7:
dc:d8:fc:b2:55:b1:75:0d:0f:67:2e:11:69:48:c0:79:f3:69:
50:37:d3:09:ac:d8:53:1e:3b:80:0d:09:35:c7:8d:b1:0e:67:
13:e8:2a:ae:c4:13:65:57:e6:e9:2c:b0:c7:34:d6:e5:83:f0:
e5:27:c1:df:3a:ce:a9:38:62:c8:00:14:cc:7d:f8:87:cf:11:
d5:7d:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:44:50 2025 by rpki-client