Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b19550d-1ed1-3b01-948f-dd0a8d9a6289.roa
File: 4b19550d-1ed1-3b01-948f-dd0a8d9a6289.roa (raw, json)
Hash identifier: jrfwPJy+tnodS/+ck/Uby0r/pzs+uQCCrew2XxKOqks=
Subject key identifier: A8:01:CA:FC:C8:53:8C:46:09:02:77:29:F6:F9:A8:DB:38:93:8E:A5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE7A4CB6269151BBDB05A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b19550d-1ed1-3b01-948f-dd0a8d9a6289.roa
Signing time: Thu 01 May 2025 16:23:24 +0000
ROA not before: Thu 01 May 2025 16:23:24 +0000
ROA not after: Wed 30 Jul 2025 16:23:24 +0000
asID: 22773
IP address blocks: 70.162.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:7a:4c:b6:26:91:51:bb:db:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:24 2025 GMT
Not After : Jul 30 16:23:24 2025 GMT
Subject: CN=f0488642-31a7-4066-b318-4de8ebb981a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:5e:73:13:03:89:b4:d7:5b:91:f1:8e:fe:
e2:41:04:3a:13:cf:0a:92:73:6e:67:53:41:79:67:
a9:c3:31:7b:0b:6c:0c:06:08:ab:fe:b4:c5:9d:61:
1f:4a:7e:a5:60:ce:bf:73:1b:fc:60:63:8c:d6:ec:
b1:1e:99:c6:35:77:ef:62:dc:03:58:96:67:db:06:
46:ba:f0:11:2a:5c:ee:c2:59:b9:e2:2d:99:cb:a6:
22:de:7a:56:b6:bf:5f:35:90:e4:80:15:00:79:38:
c0:e9:da:d9:d9:27:f4:0e:ca:fb:fc:40:f5:e1:ee:
38:77:25:86:54:22:4b:12:e5:1c:62:9d:4d:f8:dd:
06:40:51:0f:19:8f:b4:58:66:1c:98:9e:d5:bf:19:
1d:fa:ff:76:50:52:74:72:6a:1f:68:87:13:13:f6:
55:cd:3a:f8:95:fa:99:78:83:01:3b:24:66:8d:82:
ce:ca:6c:0e:1e:b1:40:a3:e3:5b:24:d9:a7:0f:c9:
d5:18:15:04:c1:36:42:fa:ad:9d:20:08:92:9b:48:
2f:97:31:1a:e3:cd:c7:a0:f4:18:3f:c2:e5:90:22:
bf:4f:c3:e4:ff:1f:54:9a:02:c1:4c:bb:c8:fa:78:
a4:2a:9e:e2:63:b9:85:7c:09:ac:b5:8a:e7:27:88:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:CA:FC:C8:53:8C:46:09:02:77:29:F6:F9:A8:DB:38:93:8E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b19550d-1ed1-3b01-948f-dd0a8d9a6289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.162.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:2d:55:8d:0d:a9:cf:eb:86:9c:27:60:b1:53:e4:a8:1b:df:
24:f4:95:d5:be:34:a8:bd:9c:9c:d4:6f:c4:90:77:7a:7f:7b:
12:bb:3a:1d:2c:3e:66:df:f6:8f:4b:ec:c6:02:e5:5d:24:db:
82:1c:ed:9f:27:c9:8a:1d:86:2c:5d:58:c0:81:b8:5b:84:19:
24:1b:9c:c6:e8:02:0c:50:f4:94:35:42:4a:6d:87:80:ec:57:
68:38:28:1c:3a:f5:e0:ae:78:10:7e:b8:58:72:0e:de:e3:f8:
12:30:b6:19:1e:50:70:8b:71:47:b9:a2:fd:a3:3c:29:e2:a4:
d7:e2:11:a6:52:94:cd:82:0c:7a:39:80:df:14:5e:fe:20:4f:
18:cf:26:86:a2:59:e3:84:f7:b5:0d:29:1a:d3:82:c9:59:df:
e8:bd:d0:82:42:22:4e:35:f2:6a:06:34:04:5c:45:c3:e4:db:
54:3b:b5:28:58:a9:bc:8a:30:39:6c:73:a3:92:7a:e2:d4:80:
87:ea:60:f6:ad:31:cf:1d:b8:8f:da:db:c6:8c:c4:4e:5b:60:
51:9a:4d:46:c4:3e:c2:3d:63:ae:bd:fe:78:b5:fc:32:88:72:
23:47:d6:da:11:4a:5a:30:b9:04:34:ff:30:90:ae:cd:20:e7:
f4:fe:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:46:59 2025 by rpki-client