Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/562952bb-0ff2-3e40-9b3f-7cc919825936.roa
File: 562952bb-0ff2-3e40-9b3f-7cc919825936.roa (raw, json)
Hash identifier: 2FkdqeAipcA1MFEjmaHpLGF/NQ4nIpfpc9IXnKhnjtw=
Subject key identifier: 46:00:F0:F0:1F:C2:63:E4:E4:AA:4B:92:0D:A5:A6:92:B5:7D:69:AD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCCA909AD931C382B60C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/562952bb-0ff2-3e40-9b3f-7cc919825936.roa
Signing time: Thu 01 May 2025 16:20:00 +0000
ROA not before: Thu 01 May 2025 16:20:00 +0000
ROA not after: Wed 30 Jul 2025 16:20:00 +0000
asID: 22773
IP address blocks: 24.251.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:ca:90:9a:d9:31:c3:82:b6:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:00 2025 GMT
Not After : Jul 30 16:20:00 2025 GMT
Subject: CN=6ba9fcde-24ca-43f1-bb17-1ca5eedc3b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:fe:1a:34:26:8d:f0:45:42:27:69:87:af:
58:22:93:0e:51:4b:e3:77:5c:9f:f6:dc:4d:74:55:
f5:b8:c3:aa:d2:ab:95:12:23:87:65:46:a9:4e:da:
2d:f1:64:2c:26:9e:9a:0c:3e:a5:23:d5:d8:37:43:
98:c7:93:5f:96:72:96:4b:78:6a:9e:b1:56:79:2a:
82:b0:5c:a8:76:bf:cd:6b:a6:69:ea:b1:9d:c7:86:
fc:a4:7c:28:3e:b8:30:e9:73:43:a9:bf:29:d7:56:
8f:f7:76:82:63:d4:87:64:47:bb:66:1c:0f:6a:8b:
3c:62:4d:b5:8b:57:8a:ee:52:94:90:7c:56:4c:0b:
be:4a:6a:fa:98:14:c6:5a:82:be:06:cf:64:00:fb:
79:a4:9a:63:c3:f3:bc:00:68:93:90:f8:ca:a1:dc:
b4:46:28:ec:82:ae:31:2f:df:2e:fb:de:7b:56:69:
35:c5:67:91:b9:2b:c6:23:47:ba:16:52:e9:e2:0a:
72:61:ca:60:ba:65:09:55:f1:83:be:d5:06:df:81:
6a:54:a0:b7:60:79:8c:2f:65:81:7a:e1:8f:6e:55:
fc:51:ed:87:96:81:55:7d:64:e0:1d:31:c1:46:e3:
6c:6f:49:49:17:ff:0a:49:ad:9d:f3:5b:bb:84:4b:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:F0:F0:1F:C2:63:E4:E4:AA:4B:92:0D:A5:A6:92:B5:7D:69:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/562952bb-0ff2-3e40-9b3f-7cc919825936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:64:c3:8c:fe:70:aa:60:46:05:f0:35:c7:24:31:16:20:c8:
5b:e7:ca:1f:14:1a:5f:02:67:61:6c:41:a0:b0:e2:1e:17:4b:
9d:79:11:e5:25:10:0a:7a:bf:a3:3b:9e:ab:1b:ac:29:ef:39:
9c:a0:92:00:cf:4c:30:63:10:c6:e9:38:58:cc:fc:1b:83:c2:
c6:6d:60:4a:0f:48:1d:44:e4:ac:6d:5a:b4:63:e5:83:ec:09:
46:19:68:c0:75:21:87:eb:5c:8d:da:d5:99:91:92:b9:58:9a:
69:20:80:f3:b1:eb:3d:fa:27:a5:57:7c:14:f1:43:47:b4:d4:
aa:a8:6f:65:d3:db:cc:55:f2:ac:02:1f:8d:0c:99:df:96:6a:
c6:18:14:e1:6a:c0:8d:02:02:67:c9:4c:12:52:0b:bb:25:20:
c1:3e:64:c7:6f:42:0c:0d:ff:ff:af:a7:c8:99:bf:d1:87:d1:
60:cd:ba:3f:db:fe:05:99:dc:2d:48:15:85:21:68:d2:78:59:
f6:9a:85:84:47:21:38:d4:13:23:66:5e:36:e5:d2:10:2c:00:
03:d9:bf:70:d4:ad:7e:a8:06:f5:43:9b:55:15:e9:3a:25:81:
a7:2d:5b:89:52:f2:c9:c3:57:fd:f5:d0:b6:3d:44:21:af:35:
78:0f:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:47:16 2025 by rpki-client