Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/57ce2d9f-e44d-3e94-97ee-df18904e1f4b.roa
File: 57ce2d9f-e44d-3e94-97ee-df18904e1f4b.roa (raw, json)
Hash identifier: LfS7Oa4XXBi7t2ppZzXEcJXg12GTQ11PKAh/xRA02eA=
Subject key identifier: 3E:44:9E:2A:DC:B5:3F:90:1F:07:D6:50:9B:5E:3B:DE:C5:65:BA:77
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E043C4FBCF7264C39BC160
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/57ce2d9f-e44d-3e94-97ee-df18904e1f4b.roa
Signing time: Thu 01 May 2025 16:27:00 +0000
ROA not before: Thu 01 May 2025 16:27:00 +0000
ROA not after: Wed 30 Jul 2025 16:27:00 +0000
asID: 22773
IP address blocks: 72.211.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:43:c4:fb:cf:72:64:c3:9b:c1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:00 2025 GMT
Not After : Jul 30 16:27:00 2025 GMT
Subject: CN=dc4ace9e-1a14-4e31-ac0d-15ac18c7ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:20:ee:4c:d3:e8:63:6b:69:0d:c7:3c:7a:
50:2d:bf:a5:71:e4:94:79:b0:59:cc:bd:f8:c0:a8:
cb:82:21:43:4c:d6:a9:3f:11:a4:a2:0b:ca:a5:5b:
2a:6d:93:a4:4b:4e:6f:59:d6:c9:1c:02:3b:bf:76:
84:a0:ba:d0:66:44:a2:a3:c5:1b:9b:d7:19:32:51:
55:f0:04:ac:88:a3:82:58:0a:da:e7:4c:85:7d:c1:
a7:05:b4:1b:79:76:83:02:4e:b9:11:99:5f:c3:9b:
24:68:6a:58:5b:4e:91:99:6b:06:b3:b8:c2:7d:3d:
55:18:c0:ea:61:78:03:19:8e:45:d0:5a:15:9e:af:
d4:aa:1d:5c:ac:e0:05:2e:03:80:1e:e6:23:d0:5d:
30:0f:f2:63:f6:c8:e6:75:2e:37:16:77:7a:1e:f8:
bb:ee:d3:db:35:7e:57:a9:22:5e:f8:65:24:58:45:
8d:98:2c:b8:51:e1:a5:79:68:c3:ab:56:45:ac:70:
e5:8d:29:21:cc:3d:7b:57:13:e0:2c:25:83:d7:2f:
4d:10:5c:16:c8:2c:60:45:de:a4:03:38:11:62:2a:
15:44:78:a3:e7:49:88:c3:e5:d6:87:17:08:28:09:
7a:d0:c5:85:d1:09:2a:92:ec:07:ba:fd:c7:3c:ca:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:9E:2A:DC:B5:3F:90:1F:07:D6:50:9B:5E:3B:DE:C5:65:BA:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/57ce2d9f-e44d-3e94-97ee-df18904e1f4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.211.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ad:28:b4:d2:c3:43:b1:c0:06:77:52:35:2c:09:c3:12:54:
40:22:b4:ac:aa:bf:78:53:be:ac:7d:64:b1:b9:74:15:94:79:
4f:d7:36:37:e0:5f:bd:5e:d9:65:7b:d2:a4:e3:13:3b:2b:7c:
fa:ab:8e:75:db:cd:f4:3b:57:60:9b:42:13:3e:20:e0:26:87:
37:bf:3d:60:86:0e:3c:9b:8c:dc:29:09:cc:97:95:4d:fd:6c:
50:24:a4:47:5f:a4:26:d0:b6:a6:cf:70:83:f3:be:7b:7b:cf:
9a:bc:5c:7c:90:32:a3:a8:96:d8:1b:1c:df:82:31:87:a5:09:
f7:a3:7c:9b:4b:ed:97:2c:bd:f5:ee:e5:45:73:73:dc:34:2a:
df:32:a7:62:4c:1a:9e:18:4a:6d:6d:97:ad:f9:5e:bb:60:80:
af:4b:fb:e8:1c:16:b0:71:07:85:16:b2:f9:e7:48:36:fe:9b:
f4:37:54:69:8e:98:0c:22:93:ec:65:df:ed:09:2a:4c:24:c2:
19:10:33:42:20:8b:16:bb:3e:3b:51:0a:9e:63:d4:fe:f3:4a:
12:f5:f2:40:bb:e0:7d:f5:b0:98:30:db:71:ce:73:8f:fb:d0:
a9:41:82:27:28:83:1a:54:8f:b1:f3:32:e0:2e:fb:fe:7c:3c:
17:04:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:30:24 2025 by rpki-client