Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4baa8833-4b7c-3d98-ac09-5461bbefa1ef.roa
File: 4baa8833-4b7c-3d98-ac09-5461bbefa1ef.roa (raw, json)
Hash identifier: hIhjI+P89OdyxyDrMJF1Ua+Lze0JcYRIpBRRlU/9QJA=
Subject key identifier: B8:8A:9B:47:84:D0:6E:63:E3:E7:E4:8E:BA:5A:11:90:43:17:E8:53
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E173F2916CD06AAD331740
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4baa8833-4b7c-3d98-ac09-5461bbefa1ef.roa
Signing time: Thu 01 May 2025 16:29:24 +0000
ROA not before: Thu 01 May 2025 16:29:24 +0000
ROA not after: Wed 30 Jul 2025 16:29:24 +0000
asID: 22773
IP address blocks: 98.171.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:73:f2:91:6c:d0:6a:ad:33:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:24 2025 GMT
Not After : Jul 30 16:29:24 2025 GMT
Subject: CN=3bad2dd6-c46b-43cb-b51f-0ac0ad04598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:26:ee:bf:9e:70:6e:2e:6b:56:f3:4b:61:
f4:1a:c7:0b:bd:81:07:52:c2:8b:e3:e8:02:20:63:
cb:7b:c3:e2:31:ec:f8:27:9a:6a:21:8c:b4:ba:fc:
04:b9:0f:bf:00:95:bb:39:12:d7:46:6f:9f:32:14:
df:6e:39:9c:14:6a:fd:f6:09:56:9d:e8:e8:cc:63:
12:4b:8f:51:65:76:2c:65:ba:07:10:4b:57:c2:5e:
7c:b4:12:f7:a3:55:a5:78:84:47:26:df:ba:95:2e:
ea:b4:63:c7:73:62:5e:4d:5d:8e:3b:20:bb:b7:04:
6c:7b:29:ff:e2:06:cc:f3:f3:1e:2f:0b:70:fb:02:
5d:71:ab:7c:fd:52:23:a2:b4:35:77:83:64:3a:1e:
23:dd:9c:d4:ef:b5:62:b5:13:d6:44:81:ef:95:dd:
a5:5a:bf:25:11:79:be:48:f9:f1:80:7c:63:93:45:
04:5b:42:11:3d:55:e2:2e:ac:9a:6b:e4:4e:47:88:
a1:b3:80:d5:d9:d1:3b:0c:e8:6b:1c:ab:42:81:e6:
67:f1:66:b1:12:13:b2:36:bc:0d:9b:80:ab:fb:d2:
43:4d:b1:93:96:a6:92:ac:66:e7:da:fa:b3:49:80:
76:bc:da:e6:13:4f:fa:ee:f8:a5:ea:7d:e3:a0:ff:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:9B:47:84:D0:6E:63:E3:E7:E4:8E:BA:5A:11:90:43:17:E8:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4baa8833-4b7c-3d98-ac09-5461bbefa1ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.171.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:fc:d6:a6:48:7a:f2:13:1d:10:40:5e:f4:d7:6d:0b:42:3c:
55:1b:fd:4c:9e:72:aa:71:16:05:78:d2:cc:8a:20:4c:7f:07:
8b:28:7b:e6:03:fd:b0:ac:b5:f1:77:02:a1:eb:fc:5c:ff:b1:
9a:2f:49:50:72:10:c3:cc:e7:74:a9:f3:05:2b:c9:7b:35:50:
35:b3:b0:17:51:18:9b:15:59:e1:99:fa:75:99:38:ac:55:4b:
39:74:dc:8d:b9:eb:8b:42:0a:05:0c:98:5a:52:12:4a:21:99:
5a:f2:c1:46:ef:05:08:69:ea:d4:a7:71:09:d4:bf:e8:27:93:
3f:35:4c:f6:a6:4f:7e:31:a0:7e:9c:22:e4:f4:e5:86:b6:77:
56:1f:f1:5a:fc:7b:de:be:3a:34:26:fc:7b:fa:4b:d5:e6:81:
37:5a:08:9c:c8:0b:36:ae:9c:eb:4f:e8:05:59:49:85:67:ea:
4b:01:d3:62:48:c4:50:f3:81:e6:3d:2b:2f:53:12:81:66:79:
62:af:c0:66:ad:57:3d:0c:f3:31:21:f2:80:21:82:03:66:42:
00:a2:d2:f2:52:c7:6d:7a:06:a7:7d:95:25:60:dd:cd:65:f4:
c8:e9:bd:fa:8e:0b:f3:c1:9a:b2:66:68:8e:21:e0:3b:b5:a1:
db:ab:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:32:49 2025 by rpki-client