Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/76ec91a5-1aa5-36f1-9fb5-03e3e9f57b6d.roa
File: 76ec91a5-1aa5-36f1-9fb5-03e3e9f57b6d.roa (raw, json)
Hash identifier: limQV2ntaeIZ4cJxm/4nFjTzsnK47VmyhPYsY8pFs20=
Subject key identifier: 3E:C5:0A:A1:FF:3E:9C:DF:02:B4:E2:CC:E6:AB:77:11:A2:28:8F:CC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E04A9D9FBA9D66D1761680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/76ec91a5-1aa5-36f1-9fb5-03e3e9f57b6d.roa
Signing time: Thu 01 May 2025 16:27:03 +0000
ROA not before: Thu 01 May 2025 16:27:03 +0000
ROA not after: Wed 30 Jul 2025 16:27:03 +0000
asID: 22773
IP address blocks: 72.211.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:4a:9d:9f:ba:9d:66:d1:76:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:03 2025 GMT
Not After : Jul 30 16:27:03 2025 GMT
Subject: CN=8a228a31-e4a9-400e-b1dc-6cff7f2194ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:66:29:12:13:5d:a8:6e:db:c0:b5:d0:89:
ec:ac:49:59:68:62:8d:f6:89:4f:46:5e:b0:c6:4b:
46:78:8f:02:16:15:48:d2:b5:7e:5d:b2:0d:bf:70:
b3:3c:7a:e0:4b:85:6d:71:62:b6:d4:12:a4:cb:e5:
7e:6a:34:f8:d9:64:6d:06:f3:bb:c4:7a:0d:de:f2:
c8:89:eb:15:b4:15:e4:a0:88:8f:1b:b5:97:44:5c:
6e:26:38:49:5c:92:e6:ce:0e:ec:70:ff:25:6e:52:
ec:b9:63:4b:74:c0:d4:45:a3:51:40:eb:41:25:5c:
5d:3f:04:cf:74:46:f7:4d:31:b3:3e:bf:7c:26:42:
3e:d3:91:81:ac:48:e8:7c:c8:e0:de:72:67:6e:29:
e5:ac:9c:06:06:b6:41:f8:ba:e9:69:e0:78:c1:89:
24:4c:1f:07:e8:4a:75:9f:35:0b:a0:22:7f:4e:d8:
39:7c:66:c7:33:9a:15:77:b0:7e:61:ac:c6:54:8a:
21:2d:7e:1b:25:04:d6:fb:92:fe:b7:4f:23:7a:04:
58:f9:6a:7e:b1:bd:e3:e8:6d:2e:67:21:dc:1f:4c:
ff:54:c5:13:05:10:73:d3:6f:e0:d5:99:a3:4f:da:
71:a8:95:89:78:e6:54:52:f2:a3:88:53:e6:6d:b0:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:0A:A1:FF:3E:9C:DF:02:B4:E2:CC:E6:AB:77:11:A2:28:8F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/76ec91a5-1aa5-36f1-9fb5-03e3e9f57b6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.211.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:f3:ac:0b:e1:8d:36:6f:34:be:4d:01:cc:a3:ec:4b:67:09:
53:68:d5:63:78:7d:dc:24:22:2d:e7:e9:38:0f:6f:f3:c6:96:
f1:53:a0:4f:ea:80:b3:4a:14:6d:e8:73:b9:55:79:1a:05:ac:
8a:ba:88:06:d1:71:f2:fe:f0:7f:6c:cf:a1:bb:36:c1:45:38:
73:71:2b:57:3d:b8:39:21:da:3a:96:06:47:ba:76:80:47:38:
10:2b:d5:1b:07:fb:2b:f1:56:35:7d:d8:43:81:5c:32:a5:6b:
23:80:f3:82:60:f0:c6:69:31:2f:6a:ee:3a:ac:69:07:c8:86:
7e:89:91:ea:90:8f:0b:83:0a:1b:57:c9:30:36:ac:44:12:25:
c4:e7:c7:e4:c7:4a:d8:8e:74:30:f0:f9:04:dc:a8:a7:f9:d7:
bb:01:86:61:ad:93:99:5f:41:c0:56:9c:59:d0:85:85:dd:41:
74:30:07:91:61:34:05:03:45:8b:b9:e8:b4:66:81:f9:34:c7:
92:ac:1d:33:95:ff:fd:39:50:8a:fc:1e:2d:f9:5e:54:35:06:
60:d7:ac:0e:d6:bc:b0:64:8b:58:38:3a:02:88:42:e2:09:7a:
e9:c4:59:30:19:e5:4e:be:a9:0c:74:5b:de:0d:55:96:1a:02:
f3:76:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:11:17 2025 by rpki-client