Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58bd2e43-84d2-3534-9dbe-68b4cd9f5173.roa
File: 58bd2e43-84d2-3534-9dbe-68b4cd9f5173.roa (raw, json)
Hash identifier: SkpZF4CVvjqriaOLKGxnbtuuGqf6zq7Yk9TaRrkn9mM=
Subject key identifier: 79:8B:6D:8A:8F:F2:FA:06:80:48:6F:B5:D8:47:55:FB:8B:C9:8C:F8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0E43B39FE8FF0390F1FB8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58bd2e43-84d2-3534-9dbe-68b4cd9f5173.roa
Signing time: Thu 01 May 2025 16:28:16 +0000
ROA not before: Thu 01 May 2025 16:28:16 +0000
ROA not after: Wed 30 Jul 2025 16:28:16 +0000
asID: 22773
IP address blocks: 72.223.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:e4:3b:39:fe:8f:f0:39:0f:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:16 2025 GMT
Not After : Jul 30 16:28:16 2025 GMT
Subject: CN=17260c1f-9e75-4005-87c0-f9da8cd95b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:84:f1:80:9f:3e:04:bf:be:31:bf:7b:c8:
87:0b:5a:d9:18:52:5a:44:fb:18:d2:25:b8:a0:5c:
39:3a:65:d7:53:81:b7:99:98:e2:65:58:c0:ff:f9:
5c:f3:16:47:14:5e:0c:1f:37:08:39:55:09:74:f9:
9e:1a:14:f8:5c:65:c4:8e:91:e9:c5:6b:90:1a:e6:
44:50:30:3b:19:a5:e3:58:02:d6:72:a1:d8:40:e0:
1b:20:3b:eb:e5:e8:11:73:3c:e2:83:1a:5d:2a:8b:
12:24:38:93:40:6c:de:6d:99:7d:49:a2:42:01:75:
6a:dc:c8:97:d3:5b:ea:7c:31:69:4e:21:2e:b0:de:
47:71:47:52:a0:7e:7c:1f:e4:f5:45:d1:a5:4b:30:
7f:5a:ae:77:28:9f:27:f0:b3:65:99:78:4e:ad:d9:
be:8f:fe:79:36:e0:5b:d8:e6:f2:6f:cd:9b:95:1b:
48:fe:11:8c:b0:4b:63:84:5b:6c:4d:06:c1:8f:73:
0f:1c:1b:f2:e4:a8:2b:1e:1f:f9:47:8a:7a:ee:0b:
78:f3:a9:7c:64:e8:56:8a:a3:08:20:90:11:4e:39:
65:2c:07:6e:7c:f4:11:65:74:0f:ae:ef:44:f1:41:
e3:b7:e0:b4:ed:ff:ee:1c:82:e8:2f:7e:8a:49:3a:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:6D:8A:8F:F2:FA:06:80:48:6F:B5:D8:47:55:FB:8B:C9:8C:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58bd2e43-84d2-3534-9dbe-68b4cd9f5173.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:4d:b6:97:8e:6a:5a:c0:94:e2:c3:11:08:63:f2:79:c2:85:
29:b9:e2:34:5c:0d:ff:29:02:14:d5:51:d0:62:93:49:c4:ab:
1d:5d:3c:e3:6a:fc:e8:1b:d0:d3:63:ef:f6:99:a3:29:39:db:
51:8c:fb:05:67:00:36:43:36:d5:32:be:98:1d:39:ed:95:d4:
e6:2b:e6:db:9f:10:ff:c1:f8:f1:ce:de:dd:55:3a:ec:d0:c8:
00:68:13:f2:0d:f1:f1:2b:87:1e:8f:49:9c:90:20:cb:84:f9:
0a:20:b6:6b:ba:da:37:42:c5:46:4d:ff:19:f9:bb:96:6b:48:
bc:a0:29:ce:18:a2:f6:42:7c:90:9e:f3:9b:e0:f2:c7:81:3e:
5a:28:54:f8:11:77:ca:cb:fc:77:3d:e0:f6:72:25:98:f3:a4:
0d:30:89:1f:78:a5:e8:c3:23:20:1e:46:74:0f:df:c4:60:58:
06:01:6b:50:49:c8:21:9e:3c:ec:37:74:e0:55:f7:a0:1d:18:
02:97:bc:35:c1:66:1f:9d:90:5b:39:bf:f7:2d:88:8a:3d:c8:
46:e3:e5:4e:5a:f7:10:c6:57:cd:66:45:4c:db:a0:d2:3b:ed:
a7:22:26:fd:d5:c0:2d:fa:e8:58:5f:85:a2:37:df:07:f0:d8:
79:92:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:44:13 2025 by rpki-client