Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55cc0de8-1c69-3392-8d90-7db33dcdaacc.roa
File: 55cc0de8-1c69-3392-8d90-7db33dcdaacc.roa (raw, json)
Hash identifier: qAtXY+zLjkwsJT0lnFGA7ICP14EcMl+ZeeAK5rVMEFY=
Subject key identifier: 76:2B:CA:3A:84:0F:71:2E:D0:F4:03:5D:E1:3A:11:AD:49:E3:62:F4
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA95B12F6ED0BE1832F880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55cc0de8-1c69-3392-8d90-7db33dcdaacc.roa
Signing time: Thu 01 May 2025 17:20:02 +0000
ROA not before: Thu 01 May 2025 17:20:02 +0000
ROA not after: Wed 30 Jul 2025 17:20:02 +0000
asID: 22773
IP address blocks: 70.189.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:95:b1:2f:6e:d0:be:18:32:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:02 2025 GMT
Not After : Jul 30 17:20:02 2025 GMT
Subject: CN=135fdf48-6ae1-4433-911d-f7e11621d9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:45:c2:b4:44:3f:5a:aa:e1:4e:39:35:8f:
21:ce:bc:b8:c4:e0:89:d9:72:dd:c0:c7:c0:14:9d:
1b:1f:b9:0e:93:8e:7d:92:24:ab:fc:64:a2:b8:e4:
dc:8d:3c:3a:d6:94:30:6f:06:67:0f:f7:8e:ef:b2:
8d:a9:0f:a1:41:10:19:4c:41:2f:70:fb:5e:12:e9:
c7:0c:b1:e4:65:66:81:f6:22:ed:4f:f7:14:32:84:
68:6d:be:2f:c8:84:f9:ae:54:7a:84:23:ff:9a:f8:
e5:32:d1:1c:ec:56:27:f9:55:cf:22:fc:e7:08:e0:
56:22:03:96:39:30:51:df:e6:d4:7d:8e:c8:11:f4:
31:d3:8c:8f:01:18:bc:e1:e8:bc:57:90:59:b6:8e:
fe:8b:4e:c7:d1:89:59:2f:ec:bf:bf:d2:d0:2f:39:
6e:b9:44:44:bc:5d:b1:8e:55:e1:e7:59:c0:24:46:
52:c2:fe:f0:13:20:4a:30:e9:32:60:26:09:11:6e:
3b:aa:e2:c7:d6:2b:29:d8:2e:fa:bd:ad:c0:45:08:
55:b1:7a:9d:a3:fa:bf:8f:cd:81:cb:83:68:a6:04:
6e:f8:ec:82:8e:24:20:b4:3e:62:22:7e:7b:e0:ff:
41:0c:e0:87:73:46:ec:ab:47:1f:d7:63:79:77:87:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:CA:3A:84:0F:71:2E:D0:F4:03:5D:E1:3A:11:AD:49:E3:62:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55cc0de8-1c69-3392-8d90-7db33dcdaacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.189.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:b2:27:be:e3:cd:30:9c:68:9a:ae:8d:65:b1:6a:27:0c:87:
cf:b9:43:c9:f9:c4:c5:17:ef:86:e3:e1:14:9b:19:91:20:30:
8a:15:55:34:6a:82:20:11:d1:74:5b:89:58:eb:11:e8:c5:42:
41:29:49:ac:9a:85:01:be:d2:47:11:b4:aa:8d:2d:31:03:e6:
8d:63:53:41:d9:a6:3f:9b:ff:be:d1:c7:ce:75:79:f2:7e:dd:
55:09:58:7f:93:c9:e5:c8:99:f8:76:d2:14:5d:ef:1e:77:68:
c9:8b:f2:d5:c4:ba:49:83:b7:ad:12:e5:1f:08:9c:53:90:99:
31:ce:d4:cc:11:82:c1:b4:2d:62:d2:9f:8f:fc:6e:84:ed:ce:
29:26:ef:d8:1a:64:66:f8:dc:9b:db:57:f1:15:a7:8d:a1:28:
14:6e:dd:ac:cb:ed:8a:3e:82:e8:8f:ba:81:ec:e7:4c:88:3b:
6d:00:db:84:35:89:74:a1:f9:63:78:a1:a9:74:c9:66:f6:ff:
74:13:82:c1:1b:45:55:86:90:06:fe:ec:80:91:0e:91:52:b4:
30:1d:03:fa:a7:a3:5d:46:10:f9:76:b4:d3:c6:5b:3c:22:8b:
ce:84:08:7f:04:d5:45:1b:cc:53:32:4c:c7:e9:3f:9b:94:3d:
0c:a2:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:29:40 2025 by rpki-client