Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40af6932-044b-3c49-963c-1e2bea2af236.roa
File: 40af6932-044b-3c49-963c-1e2bea2af236.roa (raw, json)
Hash identifier: zZ+zla+WVGiteGsqd7x/dda3RMAAwu1TAlVOWRuk8q8=
Subject key identifier: 78:C9:8B:D7:9A:64:A1:86:DD:4E:B1:59:F2:6C:8A:04:C9:86:42:11
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E01C60D5E775C5C34B25C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40af6932-044b-3c49-963c-1e2bea2af236.roa
Signing time: Thu 01 May 2025 16:26:41 +0000
ROA not before: Thu 01 May 2025 16:26:41 +0000
ROA not after: Wed 30 Jul 2025 16:26:41 +0000
asID: 22773
IP address blocks: 72.208.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:1c:60:d5:e7:75:c5:c3:4b:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:41 2025 GMT
Not After : Jul 30 16:26:41 2025 GMT
Subject: CN=778b680b-fcbe-4fa5-84c4-7721f79d09cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:d1:ca:7e:47:8e:8a:24:03:a4:fc:05:31:
45:5d:43:43:d8:3e:ba:12:55:5d:8a:f6:ae:b7:44:
b3:84:4a:19:2a:61:91:ba:fc:a8:72:70:e5:ce:ac:
2d:2b:7f:12:8b:e3:68:6a:8e:43:58:7c:04:aa:a6:
92:7f:f6:90:14:20:8a:d0:5f:00:b9:4a:cb:dc:96:
26:ab:2b:b1:0e:4a:de:3a:0e:0d:ac:57:78:3e:7a:
1b:bb:65:28:53:62:58:9e:97:e0:78:82:d9:c4:7c:
7b:d7:b7:4b:55:0e:68:57:06:25:68:11:57:93:23:
47:e7:52:bf:0f:61:20:c4:48:80:b8:ea:c7:c8:b3:
b3:96:3e:56:85:5d:d6:7e:48:a8:a1:2c:71:4a:83:
d8:ed:81:ce:59:ff:60:0b:92:05:56:9f:16:bd:ed:
37:7b:39:da:0d:61:a5:cd:5b:f5:96:e2:99:29:d4:
7c:2d:91:1f:b9:79:b4:53:f7:36:fc:1e:f5:f6:9d:
7f:1a:49:0f:f8:87:ac:7c:94:9e:1a:3c:55:6c:b4:
2d:5d:72:43:8f:2d:4d:a5:21:56:99:ed:19:02:a1:
10:0e:07:9b:1d:84:94:27:e7:b5:b1:02:ef:39:45:
ef:b4:5e:cc:ae:f0:ce:67:d4:d9:39:52:66:2a:98:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:8B:D7:9A:64:A1:86:DD:4E:B1:59:F2:6C:8A:04:C9:86:42:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40af6932-044b-3c49-963c-1e2bea2af236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:32:ed:7f:a7:92:e8:ae:34:5e:f9:65:92:31:72:4a:66:0d:
db:94:27:9e:c6:ce:e9:db:60:f8:d2:2d:0e:20:d3:be:a0:fd:
02:e9:db:67:64:5c:ef:1b:78:8e:2e:62:9d:1c:d7:65:6a:67:
d2:d9:9c:46:ec:b5:82:f9:19:63:a1:22:16:7e:72:38:b7:98:
26:79:fd:45:b5:9a:88:78:03:d4:e8:39:52:04:0f:9b:9a:04:
ff:68:7e:1b:6b:2b:4f:81:50:50:75:06:41:3e:2b:e0:2c:e5:
d7:b7:d3:ed:11:8d:6c:be:9a:e5:25:c3:13:95:c0:ab:fb:9f:
c0:79:2d:04:b2:71:1d:79:3d:a2:cb:e5:5f:63:19:27:a9:fe:
8e:2a:e6:a8:a6:26:1a:63:44:e8:74:30:9e:dd:be:d8:35:48:
25:d4:27:36:f2:97:60:fa:66:7a:82:41:51:f9:c2:9f:05:93:
56:aa:b8:c3:05:ee:13:5a:c8:c4:3b:38:b4:2c:82:ac:5b:7a:
ec:08:38:23:0a:52:da:e0:59:b2:f4:21:49:a8:63:02:22:4c:
54:18:51:68:80:c8:0d:70:d9:20:a1:9d:bd:f9:6d:de:d5:2a:
c3:4b:52:4b:5b:30:55:a4:07:a3:a3:12:66:81:ce:07:a4:a9:
2c:6d:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:21:49 2025 by rpki-client