Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6523c959-28c4-3d97-ba85-a111456d3e8a.roa
File: 6523c959-28c4-3d97-ba85-a111456d3e8a.roa (raw, json)
Hash identifier: qx1SwBvka8SrXvPl0CWcPkqFlrfbzjnui7IEWDv+0cw=
Subject key identifier: F0:81:7C:03:D0:08:AF:85:42:03:04:49:58:D6:8F:A5:BB:79:12:EA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA74864A0AB4968C5AC400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6523c959-28c4-3d97-ba85-a111456d3e8a.roa
Signing time: Thu 01 May 2025 17:19:46 +0000
ROA not before: Thu 01 May 2025 17:19:46 +0000
ROA not after: Wed 30 Jul 2025 17:19:46 +0000
asID: 22773
IP address blocks: 70.173.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:74:86:4a:0a:b4:96:8c:5a:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:46 2025 GMT
Not After : Jul 30 17:19:46 2025 GMT
Subject: CN=4d6b7891-ded9-4eca-b7bb-7157c2a4afcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:31:d4:fb:ab:ab:00:4b:16:68:8c:37:3f:
5a:9d:cb:23:89:0a:f6:64:c3:fc:98:9f:28:1a:b2:
62:11:16:89:dd:07:03:80:db:3b:5e:07:07:1f:cd:
43:eb:16:b2:d0:02:87:65:c1:47:df:ac:5c:f2:4c:
7d:5a:2f:48:71:96:7b:2f:12:45:b7:27:71:ed:e3:
8d:97:d8:35:96:70:59:76:33:ae:51:4c:73:52:d5:
b7:cd:ce:07:c9:d3:6f:a4:5f:94:47:7f:28:83:6f:
bc:27:7e:5f:e3:a9:ba:8d:cc:29:a7:51:ad:fe:29:
ff:5d:88:4f:13:60:ef:89:6e:80:38:95:35:eb:4c:
80:06:ee:3e:1e:d9:71:cc:7e:7f:53:cc:d8:6d:08:
e3:55:21:1d:21:65:cc:4c:50:72:36:68:9f:d7:ed:
fe:19:43:0b:73:74:a9:33:03:4b:83:31:f5:54:ed:
6f:f3:67:c6:03:55:d1:3d:d3:ad:ff:c4:36:93:6d:
9f:51:ec:f5:fa:8e:ce:5d:67:1e:af:da:2a:42:eb:
28:cf:08:7d:54:69:9d:03:3f:27:01:62:9e:6c:e4:
c3:07:57:7c:ab:21:f5:3f:61:aa:42:6c:aa:45:90:
1c:5f:da:8e:75:42:28:ca:ea:d9:36:3e:ee:3d:78:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:7C:03:D0:08:AF:85:42:03:04:49:58:D6:8F:A5:BB:79:12:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6523c959-28c4-3d97-ba85-a111456d3e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:19:1c:81:3c:dd:c2:e7:8b:6b:21:34:00:ed:19:d0:68:2f:
15:a3:61:a7:50:45:7d:3f:c5:5f:e4:7d:29:7c:0d:8d:ac:32:
53:14:41:26:81:ed:6f:99:2e:0d:c6:13:22:ef:d8:09:55:c7:
fa:6d:c2:0b:91:87:65:1e:5d:7e:ca:cf:01:d5:a4:16:a4:ce:
fb:66:fe:b8:f1:69:32:2d:50:e3:c0:b7:e3:18:80:e5:8c:25:
56:ba:45:8b:2d:d2:c6:d4:16:2d:e6:65:dd:97:a7:6d:60:fc:
3f:f5:8c:8b:e7:8f:00:a9:06:25:8b:25:46:85:4e:fd:e1:d1:
bd:c0:d8:52:e3:87:56:4f:0e:cd:26:d3:bc:b1:a6:83:75:d5:
bb:7f:bf:3f:f8:cb:4e:da:bf:4e:5d:59:a8:8c:73:c3:de:5f:
1a:2d:b1:8e:a2:49:f3:f5:bf:e6:74:a8:97:32:db:15:18:3d:
a8:86:2a:a0:e9:a9:82:c9:0f:72:2d:bc:82:e6:ea:49:bb:73:
a1:c1:a9:7a:eb:05:36:81:8a:56:da:dd:a3:1f:06:6f:69:e5:
7b:ff:17:15:38:6f:d2:a6:f2:6d:e3:43:f4:92:92:31:27:16:
08:4e:ed:bd:20:48:38:b6:6a:3a:06:9f:f6:3e:2e:fb:60:7d:
f3:73:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:45:53 2025 by rpki-client