Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7922b1b6-9384-3cea-9f6f-20dedce3cd8e.roa
File: 7922b1b6-9384-3cea-9f6f-20dedce3cd8e.roa (raw, json)
Hash identifier: pE0PNIEl8LBLJJ0V4Qsaub1PGnhMtbqNipm6XE+SXP4=
Subject key identifier: E5:18:64:D1:4D:61:BE:2F:98:8B:86:2E:87:DE:5D:F9:49:70:5E:20
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E08580E3BFC80604AACBA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7922b1b6-9384-3cea-9f6f-20dedce3cd8e.roa
Signing time: Thu 01 May 2025 16:27:31 +0000
ROA not before: Thu 01 May 2025 16:27:31 +0000
ROA not after: Wed 30 Jul 2025 16:27:31 +0000
asID: 22773
IP address blocks: 72.217.70.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:85:80:e3:bf:c8:06:04:aa:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:31 2025 GMT
Not After : Jul 30 16:27:31 2025 GMT
Subject: CN=031a1dde-bb2a-43b9-95a0-476d55a890de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:b3:23:3b:e8:ba:96:d7:55:63:ce:f3:a7:
9c:ce:14:cd:64:8c:c3:ca:9f:a2:24:e9:7e:75:ab:
20:57:87:b1:d3:03:30:f0:f3:5f:98:38:12:da:11:
8f:05:49:86:2a:4c:25:df:55:14:ca:57:f3:b2:96:
2f:5f:dc:d1:24:cf:be:f8:fb:91:01:d4:26:3e:33:
ff:39:68:b5:f0:12:ec:88:3c:e3:e9:f0:c1:ac:1f:
87:b6:ef:31:07:0c:1a:c3:e2:3d:56:ae:41:7c:1d:
19:7e:9c:a0:71:44:6f:01:61:0a:12:1a:91:37:cf:
c2:ab:6e:6e:50:47:be:bf:27:28:33:aa:d2:d1:1e:
9a:67:60:70:18:7f:5e:6f:75:40:10:33:85:8e:78:
05:d4:f8:fc:03:89:65:76:51:59:7c:6c:f1:91:8f:
d0:1e:02:d6:22:5b:3b:3a:c0:78:27:5e:68:16:dd:
64:ce:2f:bd:42:b5:ef:35:8a:98:f6:a9:3d:26:59:
0b:34:61:51:26:8a:14:90:c0:84:3f:e4:8d:22:b7:
bf:9f:6f:2b:94:48:d8:6a:f1:5b:6a:b1:b3:a0:73:
f1:33:2c:c1:41:93:83:7f:f3:0b:41:56:74:0c:7e:
49:f3:e9:ac:6c:40:f2:07:21:91:b9:f9:26:37:98:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:64:D1:4D:61:BE:2F:98:8B:86:2E:87:DE:5D:F9:49:70:5E:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7922b1b6-9384-3cea-9f6f-20dedce3cd8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.217.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b0:e5:9e:4d:d1:51:33:87:89:72:d2:fb:80:c5:87:df:b6:
8f:72:9d:1e:45:f7:65:22:28:0a:29:4f:e1:96:7a:db:c5:21:
04:39:7b:5d:75:19:29:11:b2:13:c2:ed:20:b7:ad:3d:61:c1:
04:92:0f:90:f0:5d:1a:d0:37:87:a8:6f:f0:0e:97:80:3f:29:
ba:a7:0e:dc:17:af:41:c7:5c:27:32:ff:24:97:fa:13:2d:bd:
9d:e2:7a:17:1a:ee:3d:a7:14:3d:45:2e:14:a4:fe:96:be:7b:
05:03:2c:af:e0:36:0f:e8:fa:6d:f8:63:4f:4e:60:32:c9:67:
4a:15:29:b3:69:1b:75:f7:6e:05:17:38:a1:d3:df:ed:e1:3d:
a9:72:a8:b8:6c:d8:48:24:52:92:f2:42:80:b0:96:09:da:76:
c3:65:f2:37:d1:bf:e8:5e:26:59:04:85:55:92:61:69:28:b7:
76:90:ba:fd:10:58:d5:1c:92:e9:10:4e:80:e6:4f:59:66:14:
74:0d:dd:60:16:5c:7c:59:47:60:df:94:4a:f3:d5:f4:cd:3e:
93:ef:ad:2a:55:ac:f9:95:07:6a:6c:f6:39:1a:77:e5:72:4a:
10:f0:c3:60:43:8e:2b:8d:39:46:7e:bb:32:95:91:41:af:46:
09:7d:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:28:18 2025 by rpki-client