Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aa9de2a-3067-39ef-99a4-3ac4eb43f475.roa
File: 6aa9de2a-3067-39ef-99a4-3ac4eb43f475.roa (raw, json)
Hash identifier: d8GgCtIXJ+khijvxRvcNYYwXA3sPICpTxkzuy6yz9hk=
Subject key identifier: BB:2D:C4:14:95:34:C5:13:71:3B:C3:B3:D0:F1:43:E6:2A:72:AA:BA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0A80D491A0A34949CE800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aa9de2a-3067-39ef-99a4-3ac4eb43f475.roa
Signing time: Thu 01 May 2025 16:27:47 +0000
ROA not before: Thu 01 May 2025 16:27:47 +0000
ROA not after: Wed 30 Jul 2025 16:27:47 +0000
asID: 22773
IP address blocks: 72.221.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:a8:0d:49:1a:0a:34:94:9c:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:47 2025 GMT
Not After : Jul 30 16:27:47 2025 GMT
Subject: CN=6f09f1c6-b581-4e11-a432-a3b8d78da6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:5e:61:65:b4:48:55:89:31:41:7d:59:e6:
24:e3:64:97:ff:fa:00:99:3d:b1:6f:09:2e:3b:7f:
48:d4:c0:31:99:98:11:71:22:b7:f3:31:ea:67:db:
59:5e:77:ff:c6:08:4a:ff:dc:32:d5:43:b1:72:17:
b0:a7:67:44:55:38:a1:00:80:d1:e1:8f:6b:ce:70:
af:45:f3:cf:3c:62:e3:58:52:9a:92:58:1e:9f:43:
75:02:6d:c6:7c:a8:e9:65:de:b7:42:71:3e:f8:f1:
f3:03:38:68:5f:72:23:8a:a3:46:cb:c4:ba:be:dc:
66:10:28:ae:6f:d9:1e:88:85:00:b0:44:3a:0a:9b:
d4:41:a2:46:43:45:11:fc:b5:9a:fa:c0:cf:85:31:
f7:f5:78:af:73:68:0c:59:e4:5f:1f:a3:e6:05:65:
af:b9:b9:e3:f1:1a:2b:b5:46:98:dc:ac:e1:87:9b:
ed:f7:a8:46:ef:94:14:bc:43:9a:1f:77:e5:f1:ee:
b5:47:7f:35:cf:b2:cf:bc:b3:d0:69:e0:63:1d:df:
13:48:c5:e6:67:40:b1:61:8b:71:47:46:91:94:55:
4a:1d:3b:39:86:2d:91:e8:07:65:16:a9:15:90:4e:
22:0f:b8:54:ea:47:80:52:93:59:b8:d0:a0:2a:0f:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2D:C4:14:95:34:C5:13:71:3B:C3:B3:D0:F1:43:E6:2A:72:AA:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aa9de2a-3067-39ef-99a4-3ac4eb43f475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.221.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:74:fb:4e:6e:8a:a9:01:54:eb:78:58:31:63:5a:37:c5:fe:
ef:62:54:67:3b:df:29:19:17:c6:37:12:17:54:18:fc:89:4b:
df:f5:5a:64:a5:d8:0f:c4:08:71:99:77:53:10:42:47:de:04:
93:07:5c:52:06:11:e6:94:01:dd:d2:05:8c:9f:13:4b:21:ca:
a5:db:d0:8f:fe:a5:bf:22:04:d0:99:3b:1f:99:85:0b:17:a3:
ff:cd:17:e2:0a:e6:a9:db:a3:87:3e:6a:44:0a:cb:8b:57:ae:
bd:80:7c:58:99:ed:c2:7e:0d:a9:cf:29:8d:f0:5d:c0:97:4b:
d7:8d:70:11:90:d3:87:77:d4:df:c3:b0:e2:0a:30:a6:04:48:
d1:76:3c:df:73:b7:28:68:d1:da:2a:8f:f1:7a:0d:14:c7:03:
f5:d3:40:e7:9f:82:b1:b5:6b:a6:01:db:ba:d3:3e:1b:01:aa:
fb:7c:dc:99:c2:81:16:db:db:31:4c:99:c3:d6:f0:be:a6:63:
16:5a:81:a9:c0:bc:ef:bc:ee:31:17:74:d4:08:b1:a4:87:c5:
c0:04:4d:84:49:c1:fc:ba:39:be:ad:f9:e2:f5:ce:6c:ee:70:
5d:8c:de:b4:69:c6:4a:e6:5f:5d:d5:91:fc:fe:28:5f:fc:a6:
ff:e2:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:39:40 2025 by rpki-client