Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438ad706-2639-34e3-a2cc-db6586e508b0.roa
File: 438ad706-2639-34e3-a2cc-db6586e508b0.roa (raw, json)
Hash identifier: xbHcnne3JP1B4o/qrxC2hY0uXAqs5V8aBTV9DMqVCtY=
Subject key identifier: B8:95:C9:FC:19:58:50:78:FA:23:F8:A1:AC:F8:87:AF:B0:DB:16:93
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA3F3BBCEF66CF1A5A1040
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438ad706-2639-34e3-a2cc-db6586e508b0.roa
Signing time: Thu 01 May 2025 17:19:21 +0000
ROA not before: Thu 01 May 2025 17:19:21 +0000
ROA not after: Wed 30 Jul 2025 17:19:21 +0000
asID: 22773
IP address blocks: 70.170.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:3f:3b:bc:ef:66:cf:1a:5a:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:21 2025 GMT
Not After : Jul 30 17:19:21 2025 GMT
Subject: CN=98dd284e-dbfe-4683-84a4-36df41afd5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:e9:8c:af:c5:84:93:3d:23:9b:ef:49:a5:
e6:30:e3:b3:3e:6f:11:9d:26:25:56:f6:62:9a:a6:
59:90:37:8f:f7:aa:9a:f8:4e:ee:b4:43:05:d0:25:
2a:5a:65:b5:1f:89:df:08:21:82:14:de:3c:3c:e2:
f2:e9:38:2d:a3:82:15:3c:f3:db:fd:c9:7a:ab:a9:
2d:a5:9c:2b:71:ba:6d:41:44:6b:41:25:ba:c8:01:
ad:37:5b:d4:40:5b:22:0d:8f:d1:dd:a2:16:cc:50:
9d:12:ee:81:98:9b:6b:00:59:bd:02:b1:82:05:f2:
d9:f4:02:08:73:57:e7:9c:a3:a0:7f:f7:53:6e:a9:
87:ec:4d:a7:48:d7:64:88:ac:fb:55:6b:17:cf:21:
6c:d7:f3:f1:ee:15:65:41:7d:25:aa:91:63:d4:84:
c5:7f:c1:f6:c0:3a:3e:d6:5a:ea:6b:ca:30:65:50:
b7:79:8c:b3:4c:72:f1:5c:82:fb:bd:f5:dc:5b:c3:
55:fc:8f:d7:d5:69:ba:87:25:e7:6b:39:df:27:dc:
36:38:ef:a6:3e:db:0a:81:23:2b:b1:16:8b:6f:bd:
0c:19:a5:f8:49:01:47:f9:c5:37:6f:a3:6d:da:2f:
01:65:74:9d:93:36:86:c5:14:42:64:75:c0:73:64:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:C9:FC:19:58:50:78:FA:23:F8:A1:AC:F8:87:AF:B0:DB:16:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438ad706-2639-34e3-a2cc-db6586e508b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.170.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:11:ad:e6:53:29:9b:b7:12:e8:0a:31:aa:89:36:71:fc:21:
a7:22:48:4e:3a:c7:fa:63:1b:22:7b:05:a0:e4:fa:67:cd:ad:
84:ea:1e:9f:5c:63:8f:da:82:de:df:84:cd:c2:cd:90:62:a4:
5a:55:d8:25:63:7a:89:c9:06:ed:e0:ba:97:d9:1d:3e:25:72:
d7:ff:f1:de:aa:f2:54:bd:81:4d:e9:c9:2f:3d:7b:e9:24:d2:
06:6c:f9:8c:6e:2c:e8:ab:3d:7e:13:08:60:9d:32:a0:f6:6c:
f7:0f:0b:80:af:a3:e9:40:81:db:03:72:d6:6e:41:75:bd:8d:
d0:16:30:6b:98:42:08:48:73:e4:67:57:25:73:a8:7d:d2:10:
c4:01:4a:0c:81:6a:6b:84:89:07:9a:65:15:fb:50:d7:97:f3:
63:69:b0:ff:a2:4d:75:a4:d5:50:7e:ff:be:68:4a:74:5b:ca:
25:87:74:4c:a6:4e:0c:9f:3b:4c:72:ce:3b:50:c5:bb:c2:4c:
75:05:97:38:e0:95:19:86:4c:52:36:dd:fc:92:38:83:30:ae:
92:e9:00:1d:e7:07:e3:f6:3e:15:00:33:19:85:14:aa:a6:77:
54:2d:fc:23:8f:7c:14:03:d3:cc:23:81:46:06:b0:64:cf:c2:
b6:81:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:25:34 2025 by rpki-client