Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/668d0884-c953-3904-910f-ac46a885dbbc.roa
File: 668d0884-c953-3904-910f-ac46a885dbbc.roa (raw, json)
Hash identifier: MbQgDA4y2WcaG5y5fTt2nI0RX8rbeEdWzsWkZQwiBbE=
Subject key identifier: CB:69:21:6A:D1:94:7D:09:DC:CE:1F:B8:AF:C8:3F:48:E4:64:9E:59
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E00E6666281203909C1052
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/668d0884-c953-3904-910f-ac46a885dbbc.roa
Signing time: Thu 01 May 2025 16:26:35 +0000
ROA not before: Thu 01 May 2025 16:26:35 +0000
ROA not after: Wed 30 Jul 2025 16:26:35 +0000
asID: 22773
IP address blocks: 72.208.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:0e:66:66:28:12:03:90:9c:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:35 2025 GMT
Not After : Jul 30 16:26:35 2025 GMT
Subject: CN=7257a4cd-9701-4bb8-8102-3cd9fc3941b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:fd:86:60:3f:f3:9e:a2:89:9c:63:64:b8:
2b:ed:c3:3b:5b:5f:a2:e5:eb:70:5f:20:8e:da:56:
45:d8:13:69:33:3f:e7:cf:04:1f:6b:be:45:df:ec:
5a:77:cb:c1:c9:2a:52:8c:c6:63:9c:b7:8c:b3:90:
fb:76:2b:1e:b5:c5:d9:07:44:3c:b6:ea:dd:9f:51:
0d:80:46:e6:ce:d5:17:ad:3e:f6:2f:53:5e:7b:c0:
00:53:33:10:bd:17:7c:6e:00:13:19:4d:b6:df:cc:
49:84:b0:8a:a2:06:74:ea:00:79:cc:72:9a:23:bb:
2a:1f:33:d5:39:4a:27:b3:7d:63:a7:8e:8f:0d:c8:
c4:47:4a:c2:10:3f:49:4b:42:07:2d:02:ad:01:7b:
15:98:24:2a:87:5c:2b:03:5b:78:d0:01:7a:51:54:
65:b3:59:ef:55:84:cd:3e:87:6c:ca:90:be:b8:8c:
b1:15:11:04:56:25:2c:0b:43:5d:37:3b:1b:5c:1e:
b3:90:d1:af:b1:8f:73:3d:38:f0:ae:6e:c3:e4:a0:
2e:5e:91:65:e4:f9:70:7e:70:dd:84:ed:f3:6d:f6:
fc:87:27:58:f8:3a:a9:4c:fe:1e:62:c5:fb:ad:87:
f7:eb:34:9b:4f:66:b1:ca:c6:35:92:13:f6:d9:81:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:21:6A:D1:94:7D:09:DC:CE:1F:B8:AF:C8:3F:48:E4:64:9E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/668d0884-c953-3904-910f-ac46a885dbbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:8e:b0:f3:8f:e5:d2:a5:bd:93:15:18:44:d8:77:a7:06:6c:
72:47:6f:a9:4d:26:f1:fe:fd:ca:d8:b8:b8:2b:5b:ce:47:78:
98:8a:f0:dc:fd:e0:94:af:03:48:4b:48:00:84:3d:bb:8e:88:
66:1b:1a:2f:80:95:a5:43:71:36:85:22:4d:f8:b5:e5:f2:37:
68:a3:ec:ba:8a:ca:17:82:5b:9c:71:73:84:fd:14:84:96:95:
ef:2d:3d:4e:3d:73:96:5a:b2:ff:53:67:12:e5:16:d0:3b:e8:
05:a5:36:7d:c4:9c:04:55:37:fd:83:30:80:12:eb:b3:f4:a5:
ad:fc:6b:7d:40:2c:4e:eb:2b:8b:2c:3d:0c:57:3a:e2:be:61:
a6:48:da:aa:e0:85:31:6c:c6:0b:80:b1:4a:53:90:8a:a0:01:
c9:4b:9a:ab:ea:4f:42:4c:db:cf:74:be:70:8a:ca:7f:32:0a:
6a:6b:af:63:59:82:41:68:8a:38:ab:c5:90:69:81:a4:d4:aa:
1d:48:6a:c6:f0:66:e5:45:53:82:63:24:f6:ba:a8:93:27:b1:
da:01:7c:4f:55:c0:32:f1:74:37:69:70:26:71:6b:16:5e:b5:
22:63:d2:67:cb:25:55:5f:a8:60:75:10:ae:5e:51:23:2d:c0:
e1:83:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:29:41 2025 by rpki-client