Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/695c75f4-9064-35d7-9f22-d2908373b57d.roa
File: 695c75f4-9064-35d7-9f22-d2908373b57d.roa (raw, json)
Hash identifier: fwf1aEm9J1I0enK6W9EnI02aweEeP6KB8ahkTBuk6j0=
Subject key identifier: 94:5E:5F:B8:80:55:64:89:99:AD:57:85:2A:02:51:C2:97:5D:50:31
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E07CB8D4A7690BFBD15480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/695c75f4-9064-35d7-9f22-d2908373b57d.roa
Signing time: Thu 01 May 2025 16:27:27 +0000
ROA not before: Thu 01 May 2025 16:27:27 +0000
ROA not after: Wed 30 Jul 2025 16:27:27 +0000
asID: 22773
IP address blocks: 72.217.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:7c:b8:d4:a7:69:0b:fb:d1:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:27 2025 GMT
Not After : Jul 30 16:27:27 2025 GMT
Subject: CN=695e1bb5-2eab-4490-99ea-894fc7ceee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:b8:de:a5:0f:c4:d2:f6:e3:3a:d4:db:6f:
a3:aa:d8:01:12:97:20:a6:71:d6:92:2d:01:47:ca:
ae:3d:2b:3d:ec:1a:81:ce:b0:7f:e8:fe:85:92:bc:
48:91:bd:f3:b9:1a:30:54:f7:7d:2d:97:19:49:9d:
f1:cc:35:8f:55:97:b5:88:77:71:9a:bb:01:a9:b8:
27:0b:bd:29:4a:16:7a:cb:0d:e6:c3:b1:6f:64:fa:
e5:5b:52:4b:a6:75:a0:a8:6b:12:96:43:d0:7b:9d:
6a:16:bb:02:b3:27:e2:6e:33:b6:d6:0b:6e:04:ff:
aa:68:34:7e:b0:3c:d3:3a:1e:1c:a8:5e:a2:8e:3c:
d5:5b:ae:9a:df:4b:7a:bb:4e:6b:07:62:83:d0:bd:
a9:48:62:25:d3:17:ae:a3:ae:00:38:87:61:92:b7:
48:0b:9a:70:ac:13:ea:b2:93:41:ec:24:b0:e4:30:
cc:96:32:16:5d:23:a5:af:15:f4:39:0f:1a:6c:2d:
7e:73:a9:ed:b2:41:fb:b0:57:5d:17:c8:ad:7c:b9:
f7:bc:3c:69:c0:2f:0d:49:2a:87:cc:09:a1:a8:33:
91:51:bc:12:3c:3a:99:53:4d:f7:87:b8:f4:63:d5:
3e:31:0b:09:00:ee:54:8a:cb:b1:b6:cb:16:73:3f:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:5F:B8:80:55:64:89:99:AD:57:85:2A:02:51:C2:97:5D:50:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/695c75f4-9064-35d7-9f22-d2908373b57d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.217.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:79:b7:59:6f:17:12:04:6a:9b:de:1d:23:97:48:2a:3d:3c:
61:c1:05:51:83:f0:ec:3c:7b:be:42:29:2b:2a:41:bb:cc:c8:
39:19:a1:d6:3c:7a:e8:8f:ad:dd:40:60:e5:82:c0:ce:a5:bf:
5c:ce:b0:28:05:22:a5:92:f1:67:dd:1d:1f:af:98:77:c0:5e:
e1:3f:0d:24:78:8f:0c:bc:bd:d6:e0:66:fc:58:bb:d1:5f:3d:
8d:83:61:79:24:65:81:f4:21:b2:4d:26:cc:17:d8:e5:ce:a3:
d1:4b:95:fa:33:ab:83:a3:ac:32:9f:7a:ca:75:ab:7e:1b:e6:
9f:e2:60:09:25:c7:b9:d4:f3:f7:e1:5e:2f:79:1e:57:f9:e2:
a9:ae:37:4c:e3:72:72:90:fd:33:1d:ca:76:91:21:db:ed:5a:
2e:90:ee:fd:a1:81:9a:71:0e:2c:c8:ec:07:55:51:17:44:8e:
19:2b:b8:35:85:7a:86:9f:b4:b7:19:a4:49:4a:5a:3e:0f:31:
6f:97:11:67:94:20:de:46:61:6e:ed:30:fd:7c:0b:eb:10:be:
6e:c5:a6:26:f8:66:36:8d:a1:c5:24:36:c4:99:b8:10:b5:af:
31:19:b5:24:6e:89:eb:36:74:4c:23:51:de:0b:11:20:03:c6:
cf:fb:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:43:39 2025 by rpki-client