Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c3206d0-5e47-3b31-84ad-f5267da48ea8.roa
File: 5c3206d0-5e47-3b31-84ad-f5267da48ea8.roa (raw, json)
Hash identifier: AXf3OtnB3zzqJOswzHnARuIN1bgsgS/5dTA9bbNEiDY=
Subject key identifier: 18:B2:B2:B6:1A:C4:27:EE:34:59:9A:8C:17:91:4A:0B:E9:0D:2F:EC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA4CAA4EFEAD10ED3E1B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c3206d0-5e47-3b31-84ad-f5267da48ea8.roa
Signing time: Thu 01 May 2025 17:19:28 +0000
ROA not before: Thu 01 May 2025 17:19:28 +0000
ROA not after: Wed 30 Jul 2025 17:19:28 +0000
asID: 22773
IP address blocks: 70.173.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:4c:aa:4e:fe:ad:10:ed:3e:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:28 2025 GMT
Not After : Jul 30 17:19:28 2025 GMT
Subject: CN=0c4dbe48-d847-407b-9786-60764fd006a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:8a:1e:9c:61:b4:90:ef:81:6d:07:71:30:
12:68:0d:50:5c:b0:77:2c:b9:fa:74:8f:0f:2b:aa:
3f:1a:01:10:2b:4a:18:53:05:bb:6a:59:70:95:59:
0d:6d:07:db:a7:3f:bf:78:a8:2a:c2:1c:78:86:a8:
76:f2:b8:e7:22:8d:b1:0f:93:04:5b:ab:fd:43:6a:
a2:5a:e4:7f:4c:e3:b2:1a:fe:93:1c:88:15:6e:62:
1f:04:2a:e7:a2:ea:8b:a5:75:3c:79:1b:2f:3f:94:
d6:3e:2a:5b:8e:e9:86:a8:07:35:18:1a:aa:04:8b:
23:d0:dd:2d:8f:37:f3:14:12:b3:bd:ce:26:52:0b:
b1:fd:c8:a5:4f:53:24:60:8a:80:d4:19:fe:b3:bb:
b8:d9:92:f1:81:33:f2:ab:e8:28:1f:6c:ae:2e:46:
79:e2:45:1a:bc:1b:ef:2a:23:6e:0a:8b:06:16:2e:
97:4a:34:55:a5:34:68:31:0f:b8:0d:2e:fb:60:49:
c7:2f:fa:eb:d7:60:33:fd:f0:d2:e9:75:76:16:38:
32:61:81:8f:c7:59:59:0c:cc:de:da:cb:a1:12:7f:
fd:1f:3f:8b:7f:22:60:7e:5e:42:44:66:71:1b:59:
f8:d2:be:1a:c7:e4:01:51:c0:ca:80:74:7a:a8:22:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:B2:B6:1A:C4:27:EE:34:59:9A:8C:17:91:4A:0B:E9:0D:2F:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c3206d0-5e47-3b31-84ad-f5267da48ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:0c:c6:df:4c:c6:c1:6e:d7:71:57:ed:00:38:9e:80:1e:6e:
ee:97:a1:a3:72:37:be:96:ef:f1:21:68:ef:f8:98:ea:ce:b6:
64:87:91:a1:8f:35:c0:08:1d:6c:36:91:76:47:b3:1e:13:50:
93:9d:8e:c3:fa:d4:d8:93:50:d2:39:1b:46:f4:14:6e:89:b7:
0d:c0:58:8c:63:86:7d:2a:c8:14:f7:f9:cd:23:6d:4f:b1:b3:
1d:12:ac:54:eb:fb:34:95:5a:ab:ce:23:62:9a:a0:de:9f:2a:
66:67:fe:e1:e7:ae:21:58:0b:7a:97:28:3a:e3:a9:a8:92:05:
0f:e7:9c:5b:79:ec:8b:98:3f:d0:3f:f4:45:82:3a:51:43:20:
43:ab:14:8c:5e:09:d1:a8:9b:3f:58:05:48:05:77:07:15:54:
f0:c2:37:2b:9b:4e:52:b6:f6:4a:50:ef:84:55:3b:0b:84:9c:
dd:3a:ab:b4:ae:b0:b1:70:d2:4f:45:30:47:4b:b4:2b:9d:c2:
b1:83:24:5b:a9:d2:08:c4:98:2c:d3:63:e3:35:26:b8:21:cf:
8a:a7:cc:f3:ec:e5:af:fa:32:7b:c6:d8:c7:0b:a9:e6:93:d3:
7d:9e:cd:3c:24:2d:3c:77:d7:6c:a9:af:b2:99:c8:d9:ce:0b:
b1:cb:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:46:50 2025 by rpki-client