Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddfc7a3-2445-3ced-ae8b-dc3d990e611b.roa
File: 3ddfc7a3-2445-3ced-ae8b-dc3d990e611b.roa (raw, json)
Hash identifier: Ni9Yes4xd2lbYisA5r224iDM+6tz5AITUDyxYxF4HG0=
Subject key identifier: 4F:5B:66:11:D4:10:9D:21:9B:12:18:03:6C:B7:EB:74:6B:62:41:DA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FB4AA6FE86156C1416B080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddfc7a3-2445-3ced-ae8b-dc3d990e611b.roa
Signing time: Thu 01 May 2025 17:21:27 +0000
ROA not before: Thu 01 May 2025 17:21:27 +0000
ROA not after: Wed 30 Jul 2025 17:21:27 +0000
asID: 22773
IP address blocks: 98.167.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fb:4a:a6:fe:86:15:6c:14:16:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:21:27 2025 GMT
Not After : Jul 30 17:21:27 2025 GMT
Subject: CN=4e876e58-d4ca-41d7-8861-771132a98d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:64:3d:ad:0b:1b:e2:f4:9a:1c:d2:c6:3c:
80:16:49:96:46:e5:29:3a:bc:18:8d:66:a8:ac:6a:
3c:7d:a6:3c:32:46:cd:09:8a:9e:a0:23:18:dd:2e:
6d:7a:9f:4c:39:c0:0e:0c:a9:01:62:04:08:47:b5:
0f:e2:40:a4:b9:e3:22:92:7d:14:ef:45:af:da:7c:
cf:a5:ce:b2:39:07:99:38:e5:c8:e6:28:f7:f9:80:
26:e4:62:2a:76:49:ee:68:fd:34:93:83:59:ec:f1:
cc:8f:44:44:91:a1:94:a5:9b:b8:cc:16:5c:9d:b6:
1b:46:4b:2e:f2:a5:67:cf:05:52:9d:6f:93:00:79:
95:a6:7b:75:55:03:a3:80:46:24:dc:2b:9c:34:27:
4f:29:77:af:73:33:d7:76:9d:a6:d2:e5:12:1a:28:
1b:07:21:66:23:74:06:83:79:a3:a2:f4:90:2d:04:
b8:91:2c:f6:d3:8b:ba:e1:7f:44:d7:85:d5:a4:2b:
4b:0f:59:5e:04:89:9a:17:ae:72:f5:6f:8e:0d:19:
b7:cc:f9:c8:bd:0f:1d:58:5c:56:85:13:b7:4e:d5:
e1:19:8d:4e:de:25:b5:3c:40:fa:01:36:53:16:30:
09:f8:b1:a3:8f:55:95:01:0c:57:2e:17:78:b4:a8:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:66:11:D4:10:9D:21:9B:12:18:03:6C:B7:EB:74:6B:62:41:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddfc7a3-2445-3ced-ae8b-dc3d990e611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.167.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:cd:14:9d:53:14:20:87:d2:f4:9a:46:ff:82:4c:63:15:39:
09:69:ff:bb:f8:d8:30:5c:7a:9f:d1:98:70:14:36:18:ad:8d:
d6:23:9c:aa:cc:82:e4:c8:35:64:7d:1a:31:a3:c1:cb:49:d7:
4e:1a:01:65:d6:08:93:96:3e:86:40:74:ec:77:17:7b:a3:b7:
91:16:61:19:a4:5b:f0:7f:86:17:0e:7a:2d:3f:54:a9:90:74:
7f:83:b2:5e:c2:50:84:8d:ab:a0:a7:ea:ce:0f:d4:a4:32:03:
bf:16:43:b3:98:20:0d:bf:a4:30:58:85:60:1e:6e:a1:c1:0f:
db:8b:fe:b2:c6:fa:49:00:b4:69:f5:98:5e:91:cf:70:0c:90:
5b:6f:d8:c9:97:1f:82:a7:83:bb:ed:ca:09:81:d6:a1:fb:2c:
bd:16:64:f9:05:81:d3:68:30:96:1c:8a:47:81:b4:ae:9a:97:
3a:17:ce:c2:10:52:f3:3a:76:07:c3:e9:a1:34:df:39:7b:c5:
6e:25:e6:68:83:99:b9:09:c0:58:92:30:79:1f:09:03:62:0c:
4a:82:20:c3:7e:24:83:2b:3f:ea:f7:4f:12:84:71:24:6e:1c:
20:47:6c:f2:58:74:72:57:f2:41:d4:26:17:7c:79:50:5d:35:
f1:3e:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:12:16 2025 by rpki-client