Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/766d234f-8bd2-3e6f-befa-ba20fce6d4a3.roa
File: 766d234f-8bd2-3e6f-befa-ba20fce6d4a3.roa (raw, json)
Hash identifier: VQehYEJp6bIky2SI+rgGiMZEsUYrW9FVLO4Ygjgnh8c=
Subject key identifier: 54:05:56:80:9B:AE:BE:58:4F:22:B9:F2:31:5D:AA:19:2A:3A:42:65
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E13D5656ACFADA644ADA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/766d234f-8bd2-3e6f-befa-ba20fce6d4a3.roa
Signing time: Thu 01 May 2025 16:28:58 +0000
ROA not before: Thu 01 May 2025 16:28:58 +0000
ROA not after: Wed 30 Jul 2025 16:28:58 +0000
asID: 22773
IP address blocks: 98.167.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:3d:56:56:ac:fa:da:64:4a:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:58 2025 GMT
Not After : Jul 30 16:28:58 2025 GMT
Subject: CN=d19d3a51-f7b2-4857-87eb-0e842cb08349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:b3:ea:d4:a2:08:c4:54:5e:8d:13:70:f6:
80:62:40:11:96:6c:ec:fa:28:78:06:25:9b:84:f1:
4d:ec:a9:43:c3:64:c9:b5:21:68:ff:1d:44:12:cc:
8b:d5:fb:37:fc:93:b1:ad:48:77:9e:a1:38:98:9e:
f8:72:e3:56:e4:14:f3:b6:bd:3e:10:4f:bb:6c:08:
b2:51:50:5a:33:45:dd:0c:9a:de:48:36:9a:3b:bf:
bb:53:95:ad:7c:7f:37:3d:f3:72:19:68:57:eb:e9:
03:aa:58:0f:5b:32:f8:a6:db:8d:c1:36:a6:81:3a:
da:f4:7f:e3:ad:3a:0a:28:f7:d8:a6:15:95:1b:a6:
fb:fc:02:99:f9:a0:42:41:c2:23:ae:29:db:01:24:
07:33:3f:a5:b0:49:44:68:b6:08:64:b5:a9:21:89:
0c:b4:0d:60:b4:8c:50:6c:50:6e:20:71:cb:5e:f6:
ac:55:02:1c:18:3f:3a:88:b0:97:96:2f:f1:84:99:
c6:d8:a3:55:c0:59:80:4c:1b:87:5d:16:f7:f4:9e:
7b:8e:77:2a:30:1f:29:30:02:36:c9:1e:f9:6c:a2:
20:a8:aa:e0:e0:54:5d:70:32:78:03:cf:85:33:5d:
26:09:4e:bf:27:eb:25:0a:fc:87:a2:64:c7:e5:12:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:56:80:9B:AE:BE:58:4F:22:B9:F2:31:5D:AA:19:2A:3A:42:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/766d234f-8bd2-3e6f-befa-ba20fce6d4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.167.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:81:c8:49:bd:f8:ed:ec:cb:aa:94:bf:4f:f5:da:0b:28:b5:
dd:ae:05:1b:7e:2d:7f:23:8b:c2:96:45:16:d9:c8:9e:1a:3f:
68:4d:97:08:c1:5a:bf:16:67:93:90:13:26:89:9e:8d:95:c2:
19:e3:20:8a:3e:f8:03:dc:af:a2:2c:03:34:8a:da:8a:6e:3c:
6c:91:95:e3:43:d5:40:86:11:af:45:d5:55:f6:e0:a1:a7:a5:
a4:94:9e:4c:4f:e6:75:75:50:08:f5:fa:ff:28:15:69:f0:ca:
a0:f6:c0:1b:67:33:5c:ac:4a:a9:00:ad:1c:38:3c:8d:ad:00:
a8:ec:7e:1c:46:31:c9:c0:06:77:aa:6f:eb:06:ef:16:cf:8d:
8c:cb:95:99:a8:6d:82:8e:ec:f3:6d:93:0d:0d:b2:c9:55:08:
59:82:3d:7c:28:08:bd:24:5d:8c:64:28:a5:f5:ce:a9:e6:49:
71:f1:3a:35:53:a8:15:95:83:f3:84:cd:52:6e:fc:d5:ec:e2:
fa:c6:27:33:ec:ba:79:ad:f7:c3:d4:f7:d4:d1:d4:f0:ab:89:
22:45:06:06:0e:5f:1c:4e:60:30:5e:a8:fb:92:a2:a9:cb:2a:
b8:9b:63:cc:33:da:de:c3:75:0c:53:11:04:22:88:e7:2b:c8:
bd:03:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:20:00 2025 by rpki-client