Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64a39687-3bc7-3923-b649-702890696c5e.roa
File: 64a39687-3bc7-3923-b649-702890696c5e.roa (raw, json)
Hash identifier: LuTuqAVf1JD82/+aaTU7UYWu5sJ+kD+ZbcJo5cTsgVE=
Subject key identifier: 54:FC:89:C8:AB:A1:41:E7:20:2E:C1:23:D9:FB:D9:C3:FC:E1:F2:3B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA3A04937208C56FC0E200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64a39687-3bc7-3923-b649-702890696c5e.roa
Signing time: Thu 01 May 2025 17:19:19 +0000
ROA not before: Thu 01 May 2025 17:19:19 +0000
ROA not after: Wed 30 Jul 2025 17:19:19 +0000
asID: 22773
IP address blocks: 70.170.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:3a:04:93:72:08:c5:6f:c0:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:19 2025 GMT
Not After : Jul 30 17:19:19 2025 GMT
Subject: CN=b662cdd8-7788-480e-adf9-dfbb4c3a59b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:ed:7e:56:0e:f7:52:92:88:c7:e2:b2:e4:
0e:41:8f:cb:53:c6:44:db:25:73:6a:4e:32:86:8c:
9e:11:32:64:65:18:e5:c0:27:2a:f6:70:99:45:ff:
8d:ac:94:dd:49:bc:94:6a:0d:a5:a7:08:34:b4:25:
8e:98:85:08:59:ba:2b:36:16:ff:a8:35:05:36:78:
e8:11:86:57:d8:2d:07:59:3d:74:5e:2e:02:f5:40:
0d:6a:d4:0b:ce:fd:87:bb:5f:a9:83:c3:ea:b3:84:
eb:2e:f7:aa:93:ad:00:7e:32:3d:21:c0:33:99:2d:
8f:72:b9:60:d1:fc:d5:ec:ad:bf:ad:dd:3f:c3:05:
09:56:f0:5f:8e:65:67:30:23:41:a5:02:2c:6e:38:
1c:d3:bb:20:cd:55:10:53:c1:22:cd:58:05:c6:ac:
fc:d6:90:be:f2:38:a7:f8:f6:91:fe:28:ab:a4:01:
b0:e7:c5:00:fe:88:40:c3:12:ce:40:47:06:f2:fc:
47:bc:0b:98:69:1b:0c:65:a6:62:02:21:a7:c2:88:
84:59:be:12:9c:d2:e7:26:ad:ef:ab:d0:ec:3a:af:
d0:af:c0:f2:47:6a:5e:c9:39:7d:18:56:96:24:67:
18:0b:c6:2f:ef:70:59:21:bb:ad:7f:c9:15:4f:55:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:89:C8:AB:A1:41:E7:20:2E:C1:23:D9:FB:D9:C3:FC:E1:F2:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64a39687-3bc7-3923-b649-702890696c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.170.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:a0:7a:c0:be:81:7f:c1:df:eb:3d:a2:65:ba:3c:49:44:d7:
9a:8a:a7:fd:0c:bb:b6:a0:69:5c:05:25:69:a0:cd:c8:62:6f:
28:b1:21:dd:95:a4:34:5d:68:2d:4a:76:85:b6:7b:15:eb:90:
d6:94:7d:2a:46:cb:c9:6b:00:6b:ed:f6:c8:63:31:33:6c:1b:
aa:f3:11:7d:a2:57:5c:e1:f3:fb:93:c2:f6:73:e0:5f:f2:4e:
4a:e1:95:6e:6c:29:60:d5:77:81:a8:02:64:ff:b7:ce:4f:38:
25:ff:1f:a6:12:75:d2:af:b9:fd:4d:c8:de:8d:60:9a:bc:52:
55:d2:53:86:a7:98:d8:c7:33:b3:fd:0b:c9:d6:5b:a6:1a:aa:
c8:c4:b5:a3:2a:8c:4f:15:89:4e:eb:91:6d:bd:c3:4b:7c:1c:
bc:ab:12:cb:62:c6:7b:38:4e:08:46:6b:0a:00:c2:9d:fe:41:
d9:01:6c:db:db:5e:9c:99:44:79:37:82:c6:d7:67:98:57:ad:
ac:3b:cc:87:18:a4:50:bd:c9:df:2c:ec:62:61:05:75:0f:ff:
21:c4:83:59:fd:ef:4d:a2:a4:ee:b3:fd:81:29:8a:e8:ff:05:
e1:1a:4d:18:d1:9d:79:41:3b:9c:79:ea:29:cd:93:74:e9:59:
83:d8:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:57:31 2025 by rpki-client