Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67529468-2db3-3c46-a5b4-39a24393db97.roa
File: 67529468-2db3-3c46-a5b4-39a24393db97.roa (raw, json)
Hash identifier: kYAywiSjotd4+wY7aMNAhLrqWL4P9qh8BLa3gsHf3us=
Subject key identifier: D2:58:E9:44:54:25:75:43:20:49:19:1F:1C:6F:9B:7B:2F:25:F9:54
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E06BCC51A82E3EABE63D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67529468-2db3-3c46-a5b4-39a24393db97.roa
Signing time: Thu 01 May 2025 16:27:19 +0000
ROA not before: Thu 01 May 2025 16:27:19 +0000
ROA not after: Wed 30 Jul 2025 16:27:19 +0000
asID: 22773
IP address blocks: 72.216.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:6b:cc:51:a8:2e:3e:ab:e6:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:19 2025 GMT
Not After : Jul 30 16:27:19 2025 GMT
Subject: CN=75a46783-8978-4e06-897b-7da8ee16ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:d2:09:9a:49:56:b3:18:93:c7:37:33:38:
21:22:82:2d:5b:79:ff:7e:6a:23:3f:13:70:27:cf:
06:a6:d6:57:43:91:00:23:83:50:41:34:70:d9:ff:
6f:7f:e8:be:81:3c:82:1d:13:ce:f7:b8:fb:e9:8c:
8a:73:c6:47:c6:ec:e7:04:17:6d:b7:7c:b3:02:69:
13:9d:9e:67:c8:e0:49:b7:e9:2e:33:20:60:64:bf:
14:2c:e2:ad:29:ed:ee:8d:3c:51:20:d9:9c:44:33:
ba:7c:cf:10:fa:48:1b:24:9a:10:9d:09:50:cc:f2:
4b:b7:06:60:f7:00:1f:a6:68:a9:bf:27:4d:0f:7d:
f8:af:18:f8:1e:77:8d:22:f6:c1:9c:c0:8b:19:e4:
60:fc:45:df:eb:38:9c:28:3d:4c:70:ba:f4:25:74:
bb:d6:02:de:3e:7d:1d:8b:02:3b:9c:f5:f8:42:11:
52:4c:40:af:cf:17:45:68:73:7e:be:44:34:0a:37:
59:ba:a5:b3:69:b2:33:6a:40:40:0c:ba:70:ee:fc:
c4:c1:d3:a8:47:f9:86:5a:e6:df:37:a6:df:52:23:
38:ce:3a:c2:f3:3e:3b:c3:c7:5d:32:13:cd:68:1c:
cb:8a:c1:49:59:a6:48:15:c6:3a:82:cc:06:dc:53:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:E9:44:54:25:75:43:20:49:19:1F:1C:6F:9B:7B:2F:25:F9:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67529468-2db3-3c46-a5b4-39a24393db97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.216.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:97:50:df:8d:9a:d5:ef:97:28:f8:fe:81:95:34:6f:8a:4d:
0a:fe:71:71:18:62:68:08:ed:f7:96:4a:c8:2d:e2:a9:2b:5b:
62:2f:55:3c:ef:f8:96:bb:c9:1d:7e:cf:e8:ac:a2:84:57:e2:
77:ea:b0:03:a5:1c:c6:3e:2c:07:d8:b0:25:48:14:ee:02:9e:
0e:52:51:ae:06:bd:89:87:f9:5d:be:4e:a9:85:cd:d1:cf:0a:
e7:9d:5d:27:a7:c6:69:99:61:6d:03:29:12:68:87:07:4a:8d:
b7:db:70:8b:34:59:65:59:2f:74:e9:c6:64:69:17:39:df:bd:
85:c5:ba:69:33:0c:fb:7d:08:9d:5e:f9:82:90:63:5a:f4:e5:
45:2d:09:2c:e0:50:dc:0d:36:51:35:f1:22:98:a6:81:74:41:
6c:9f:eb:62:fd:17:7e:48:4e:0a:b2:b4:76:05:ab:28:95:cd:
74:79:ab:76:da:0f:73:7d:ed:d2:fd:e5:83:64:d3:53:d7:9f:
8a:93:e7:98:15:c1:89:34:df:b9:f9:6e:1b:e5:7c:87:34:51:
0a:ef:7b:b8:b7:27:8f:ef:c8:ce:f9:56:80:9a:79:ae:68:67:
3e:a8:c0:76:ba:5c:fa:35:60:c3:55:83:8f:97:07:d0:0f:ec:
43:ea:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:00:36 2025 by rpki-client