Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5312a3-155e-3084-9bec-60be932a53c7.roa
File: 6d5312a3-155e-3084-9bec-60be932a53c7.roa (raw, json)
Hash identifier: zZGqzBiJW7m69LqjmrhEJG0k6n0W0Cy1Uf5bgRnSD7M=
Subject key identifier: 80:71:31:0B:DB:38:86:07:78:85:55:CD:94:E5:04:CF:B7:4C:70:85
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E07BF6BA7BE0C88194A1C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5312a3-155e-3084-9bec-60be932a53c7.roa
Signing time: Thu 01 May 2025 16:27:27 +0000
ROA not before: Thu 01 May 2025 16:27:27 +0000
ROA not after: Wed 30 Jul 2025 16:27:27 +0000
asID: 22773
IP address blocks: 72.217.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:7b:f6:ba:7b:e0:c8:81:94:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:27 2025 GMT
Not After : Jul 30 16:27:27 2025 GMT
Subject: CN=5869c125-2ddb-42a6-9681-b69b689e5830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:e2:43:12:ab:58:f9:cf:0a:31:23:31:56:
81:99:a9:73:b3:ee:4f:d5:06:43:8b:fb:86:c0:6e:
61:88:26:e0:06:11:9d:ec:6e:9e:07:60:94:9a:b2:
0d:b7:83:c8:8b:ee:f6:55:73:e6:bf:6a:f2:8f:bd:
be:35:d7:21:9f:74:b2:1e:3a:3f:30:38:4b:b0:8a:
0b:b3:69:af:60:c5:46:83:7d:8c:3b:d7:2d:b3:70:
c9:74:94:a6:61:4d:54:1d:e6:58:ff:22:a2:70:2a:
cd:36:cb:9f:2e:45:4b:f1:06:df:a7:2c:0d:07:ea:
04:30:58:5c:7d:e7:76:fb:68:16:72:98:70:9c:ba:
c4:8b:0d:1a:65:22:a4:16:77:63:24:2d:68:ba:e4:
f5:cd:ea:21:d5:e9:8d:21:a5:de:d1:b0:10:ce:40:
9d:a8:19:36:02:e7:87:8d:88:68:d1:f2:d7:4c:59:
81:03:5e:d0:f3:5f:59:09:4a:0d:ab:bc:bc:9a:22:
87:02:68:55:cc:38:d5:01:5b:2f:8d:e3:ce:d8:48:
07:09:e3:44:81:0b:38:98:0e:8b:af:00:3f:96:2f:
a8:a2:73:ee:4b:8a:c7:ad:63:ed:98:d8:65:02:1e:
67:64:28:b8:31:17:19:89:7a:09:c9:77:a4:9b:fc:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:71:31:0B:DB:38:86:07:78:85:55:CD:94:E5:04:CF:B7:4C:70:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5312a3-155e-3084-9bec-60be932a53c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.217.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f0:58:8e:b9:3f:88:00:c2:1a:8f:9e:4a:8e:43:1f:54:ea:
22:c0:c0:b5:c2:ac:4b:34:e9:ea:8e:e3:2d:92:bd:f1:ba:3d:
96:84:41:31:7d:b2:93:f6:89:c7:09:b7:36:40:f1:b0:51:c1:
13:1f:02:a7:b8:57:da:4a:eb:49:3e:3f:36:ab:36:9d:a7:36:
28:3b:a6:8c:13:31:21:c8:6b:5e:30:4f:7d:66:19:c1:9f:53:
d5:f3:67:2b:30:c1:07:93:5a:0a:2e:c3:1a:4d:55:ac:26:05:
e1:8f:ce:3a:0e:1c:aa:eb:fa:fc:e9:d8:e1:cf:41:f5:3b:a7:
ef:f8:c6:c6:23:f9:79:83:1c:a2:17:92:4b:4b:a8:88:a3:a5:
9a:4e:f2:71:db:74:4b:14:40:f5:2b:17:e3:e2:57:b8:63:c9:
fa:a6:b2:8e:a4:e3:4a:4b:1e:f4:b5:e8:ee:8e:ec:3d:3e:74:
63:07:be:9e:75:de:31:c2:59:05:31:e7:00:fc:8e:91:41:48:
3f:65:0d:eb:3d:4b:eb:8e:ca:9d:78:8e:4a:37:00:bf:e1:39:
5f:61:73:cf:9c:72:e3:4a:33:ef:f3:71:2b:3e:e2:87:fd:9a:
04:4b:a7:11:4a:cf:50:60:30:d6:8b:65:16:27:41:55:a9:32:
5a:99:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:59:07 2025 by rpki-client