Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f8eaffc-a835-3525-8052-5ea41d5b47e2.roa
File: 3f8eaffc-a835-3525-8052-5ea41d5b47e2.roa (raw, json)
Hash identifier: ezRGUN9KErQjjQiiV9PrhsSsqlL98FmEQKlPAw2NMko=
Subject key identifier: 22:4A:1F:C5:A2:B2:C5:1A:69:9C:29:C7:66:F7:40:65:90:3E:82:DE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FAD93361D53F310A8DDE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f8eaffc-a835-3525-8052-5ea41d5b47e2.roa
Signing time: Thu 01 May 2025 17:20:34 +0000
ROA not before: Thu 01 May 2025 17:20:34 +0000
ROA not after: Wed 30 Jul 2025 17:20:34 +0000
asID: 22773
IP address blocks: 72.193.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:d9:33:61:d5:3f:31:0a:8d:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:34 2025 GMT
Not After : Jul 30 17:20:34 2025 GMT
Subject: CN=0e072c1f-e9d3-48ca-b066-bd9a06cc1b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:0d:fc:93:5f:96:7d:e5:ee:2b:24:8b:96:
1a:0b:52:a2:c6:6e:06:c5:ff:fb:69:f6:88:ae:84:
12:3a:7c:74:d1:36:bb:80:e2:2e:9e:21:b4:15:d4:
87:89:8d:13:ca:24:f4:f7:bc:4d:c3:11:e0:2a:81:
0d:46:e4:3c:15:4b:4c:74:91:7e:e5:8d:95:21:32:
d9:7c:10:9b:c4:63:19:b6:ab:2b:ed:91:14:0f:9c:
e6:d3:7c:05:99:e1:04:7d:9d:a3:5e:f8:71:d8:d7:
6f:f6:c5:fb:05:c1:1a:ef:11:19:99:47:64:15:97:
81:43:2a:81:d3:41:96:f5:e7:46:ad:78:5b:e1:a7:
09:ed:32:a5:66:8e:37:00:13:d4:97:22:f7:2d:21:
2e:dc:7f:24:96:19:95:0b:79:d1:8c:21:4b:dd:e3:
e2:a6:22:3d:29:b8:bd:1a:d9:ae:1e:01:fe:82:f8:
d4:94:b5:a5:c2:e6:52:22:a3:13:3d:d3:86:0c:06:
14:83:78:7a:86:20:f1:0d:75:7e:e7:31:b4:44:54:
6c:7f:80:e6:ff:1b:63:3c:98:e1:14:1c:b3:ea:9c:
3e:33:19:68:61:b2:49:ee:54:cb:2d:34:11:06:f6:
f5:a2:16:b4:17:fc:f4:21:a9:ea:a5:79:59:85:4a:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:1F:C5:A2:B2:C5:1A:69:9C:29:C7:66:F7:40:65:90:3E:82:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f8eaffc-a835-3525-8052-5ea41d5b47e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.193.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ad:d0:34:a5:4d:38:57:39:92:46:46:83:c6:4b:ca:81:7d:
cd:5d:4a:3c:c9:7c:bb:0e:f8:ab:44:cf:11:5b:0d:d3:48:09:
b1:14:c8:f8:48:09:e3:3d:66:6a:71:54:5f:13:b1:b0:cb:9a:
d8:92:7a:e7:d9:8b:6a:1a:e4:ce:f8:91:27:10:06:bd:3b:4e:
cf:39:26:6b:be:e7:32:bb:49:3c:75:42:5f:eb:7e:c1:18:3c:
98:69:95:45:18:4c:c8:cf:04:fb:bc:07:71:49:d7:f7:c3:61:
84:2b:6d:49:c4:82:04:7a:49:91:46:ee:8e:72:0a:b2:52:81:
14:38:37:43:ea:a8:f3:0d:8c:50:83:22:5d:29:88:30:73:a6:
ab:01:70:1c:d7:aa:af:0e:80:7c:a3:72:6d:b4:c1:eb:30:9f:
73:8e:59:bd:4c:f5:df:3e:bb:35:3a:a4:45:9c:95:50:8a:01:
e2:7e:63:a4:a6:1f:40:46:67:15:95:6b:3b:47:84:b2:aa:d9:
bb:b6:7c:4f:d5:27:c3:f1:97:9b:9c:e8:cd:ff:46:3b:38:b5:
2a:05:36:ca:ce:be:dc:84:a9:38:7b:74:32:37:5c:34:f9:ca:
7a:85:36:a1:9f:08:86:06:eb:37:eb:00:e3:f9:b7:bf:e3:41:
82:47:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:16:36 2025 by rpki-client