Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44724927-65ca-3cdd-9fdc-7c7bb67cb691.roa
File: 44724927-65ca-3cdd-9fdc-7c7bb67cb691.roa (raw, json)
Hash identifier: JpQy96bHzpgYlN1S8e5wI8CORsEriil6iAyrXaITA4k=
Subject key identifier: EA:28:2A:9A:79:73:3D:FD:7A:CA:93:DE:E3:55:5E:9F:41:11:FF:46
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEC165C278DEE19EC9F8C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44724927-65ca-3cdd-9fdc-7c7bb67cb691.roa
Signing time: Thu 01 May 2025 16:23:58 +0000
ROA not before: Thu 01 May 2025 16:23:58 +0000
ROA not after: Wed 30 Jul 2025 16:23:58 +0000
asID: 22773
IP address blocks: 70.172.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:c1:65:c2:78:de:e1:9e:c9:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:58 2025 GMT
Not After : Jul 30 16:23:58 2025 GMT
Subject: CN=feb55e82-9074-40b4-9743-2e4ca62e91be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c6:5e:60:7c:c4:6c:2f:f1:b5:b5:64:5b:32:
ec:40:06:b1:b8:bf:1a:df:93:97:db:b4:1d:82:99:
06:a4:2a:25:07:93:b8:69:72:d5:3f:91:ad:01:06:
87:b2:13:2e:b3:40:0f:a2:a5:e4:c5:1c:82:a1:85:
10:f8:73:68:da:1d:4c:f4:b7:9a:51:94:a8:2f:62:
e2:4a:90:04:6d:00:a3:78:7e:42:8e:55:19:0b:37:
3e:0f:ae:c9:e9:56:76:3a:c9:8e:d7:69:43:96:17:
16:ef:74:e9:ce:a0:11:d8:e9:d5:3b:20:78:65:25:
a5:00:f1:61:84:36:2b:e5:47:d0:00:24:78:99:6d:
63:45:9c:71:ea:bc:34:ad:0f:44:e0:18:99:57:b2:
b5:42:d1:26:87:0b:04:c7:13:d0:90:86:b5:92:c1:
5b:3d:07:f6:7d:e2:cf:40:0f:9b:4b:55:24:7a:2c:
35:85:a6:b3:f2:17:91:72:06:38:57:71:28:4c:7c:
9a:86:de:7a:1e:a0:e2:e9:1c:e7:3c:e4:e4:09:21:
a1:9d:57:b1:8e:ec:17:94:44:dd:2d:fb:db:ec:eb:
ea:58:a0:4a:12:b2:2e:77:07:bd:72:11:22:bb:0a:
ef:22:23:02:60:ff:8c:25:5d:6b:cc:73:d2:bd:90:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:2A:9A:79:73:3D:FD:7A:CA:93:DE:E3:55:5E:9F:41:11:FF:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44724927-65ca-3cdd-9fdc-7c7bb67cb691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:9c:1d:4f:56:b3:4e:94:55:90:9a:d4:dd:b4:83:a7:d6:50:
6c:32:81:77:f9:37:00:79:29:96:82:e7:b0:60:1c:a3:17:8e:
22:2e:b5:0a:9c:83:63:f2:fc:fd:fb:0e:b3:bb:2a:98:08:6d:
63:16:66:bf:e3:fa:b8:c7:80:b7:56:04:22:9f:ed:4d:5a:2e:
b1:cc:a7:21:62:5f:f3:5e:56:b0:1f:7a:4b:ce:42:92:a2:2b:
7a:3f:ec:76:e8:16:27:eb:09:d8:ba:d6:3e:be:8c:5f:90:74:
01:9d:c9:e2:79:eb:c7:16:2d:d5:81:c1:68:7a:9a:f7:d9:d2:
28:c0:d5:d3:f5:c2:61:4b:07:58:65:b8:41:79:6a:01:5b:6a:
0c:76:06:f9:79:5a:b7:8e:09:a1:8a:0f:0f:f8:cc:9d:15:ca:
68:51:6b:15:20:57:c4:c2:8a:ae:5a:b9:8c:8e:6a:e1:9c:75:
e9:39:36:04:39:e4:fc:a3:bb:c0:4f:0a:6b:0f:9f:33:be:e4:
66:19:2a:02:9c:7c:17:db:c0:eb:bd:93:bb:db:d7:d5:6e:e6:
3f:cc:2f:03:b1:df:f3:63:5e:09:eb:4e:02:9f:b4:a2:d0:3b:
5e:3e:7f:7c:9e:01:1e:f6:53:6b:f3:29:98:b8:3a:e6:92:ce:
32:11:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:00:58 2025 by rpki-client