Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d7de644-ff5a-3661-9cb1-3b23214f5f27.roa
File: 4d7de644-ff5a-3661-9cb1-3b23214f5f27.roa (raw, json)
Hash identifier: 3BMiqoXFoWln0IQl071NYc8zjxkot2KrmJu7QHzX7sg=
Subject key identifier: 2C:E6:22:AA:37:63:43:35:3D:9C:9F:D4:16:4E:02:CE:07:8F:D6:CC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA525A61A873CF0F2202C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d7de644-ff5a-3661-9cb1-3b23214f5f27.roa
Signing time: Thu 01 May 2025 17:19:30 +0000
ROA not before: Thu 01 May 2025 17:19:30 +0000
ROA not after: Wed 30 Jul 2025 17:19:30 +0000
asID: 22773
IP address blocks: 70.173.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:52:5a:61:a8:73:cf:0f:22:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:30 2025 GMT
Not After : Jul 30 17:19:30 2025 GMT
Subject: CN=6aa8d0fc-2280-43c2-be6f-572e1d2e100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:be:69:3b:c7:81:26:fc:b0:13:96:2d:55:
09:d1:f1:ec:a7:c6:4a:d3:17:25:68:1e:63:66:a3:
8f:f0:40:37:77:f0:21:e0:42:2a:45:22:e2:fb:c6:
f4:f3:2e:f6:8c:4b:d6:84:16:a9:86:e9:2c:53:a8:
8c:17:f0:21:ff:53:61:ea:3f:60:f8:10:e6:84:9e:
cb:79:19:c2:cc:a0:47:d2:30:52:71:9b:46:0a:7a:
08:cb:fd:80:31:76:53:ad:c1:91:76:7d:18:98:55:
b5:06:5a:ee:70:8e:a6:a8:4c:75:93:a1:99:4d:be:
f6:fe:45:17:0e:3d:6d:24:f6:bd:49:d1:e6:ad:97:
0e:0d:9e:78:a4:c1:26:7e:e6:14:07:fc:b8:10:2b:
f1:78:e6:1c:5b:93:c1:48:69:05:78:ed:61:b8:1b:
25:3f:80:20:3c:6b:19:50:71:e8:97:42:b8:16:a4:
9d:79:57:6d:80:2d:83:60:27:a6:8c:e5:2e:ef:0c:
b8:b3:23:a3:5b:13:48:64:03:ae:b4:9b:5f:72:54:
b2:36:00:c9:df:8a:30:34:be:64:81:54:a1:77:78:
3a:9f:e4:33:9a:10:51:0d:74:52:63:cc:fe:c3:8f:
0f:a6:da:3e:22:22:81:da:4d:1e:6a:9a:5c:e6:58:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:22:AA:37:63:43:35:3D:9C:9F:D4:16:4E:02:CE:07:8F:D6:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d7de644-ff5a-3661-9cb1-3b23214f5f27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:a0:b9:6b:15:1e:8b:69:15:f8:36:e2:98:3e:e2:e5:ae:aa:
43:c6:99:3a:a5:87:b1:29:6f:1c:35:dd:c3:89:a6:82:be:0b:
96:06:55:04:09:09:7e:ee:55:b6:25:72:54:9c:79:89:08:d3:
7b:a4:23:e7:65:fd:96:a7:65:9d:ed:dc:b6:0a:5d:ab:ea:44:
6a:b6:b1:4f:ea:d1:55:70:f9:34:19:76:69:0d:4e:15:ac:76:
7d:79:74:2b:40:0f:5d:50:1a:3a:50:77:95:13:91:d6:2a:5c:
60:9e:5d:e4:d7:d8:75:13:71:56:93:70:e8:2a:e4:94:10:45:
62:fb:59:30:99:47:aa:8b:83:3a:eb:22:9f:60:98:34:3f:68:
13:0e:17:dd:e8:df:9f:c5:dd:05:59:55:a4:8a:d0:3b:91:47:
cc:14:a4:51:bf:cf:b6:eb:3f:90:57:ea:db:b7:f0:b7:f7:d1:
51:36:76:5a:dd:65:19:21:34:12:54:76:65:04:82:e1:be:bd:
d9:74:b6:8e:b5:b5:89:a8:34:29:a6:69:f8:2a:eb:de:4b:1f:
52:40:9b:55:f1:af:d9:ce:29:bd:ed:60:ba:19:be:7e:eb:4a:
50:86:68:b7:19:20:7c:82:0b:25:87:6f:ab:73:2d:37:bd:e8:
5e:12:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:40:43 2025 by rpki-client