Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d915a37-01c6-392b-8545-69f6370be2ee.roa
File: 7d915a37-01c6-392b-8545-69f6370be2ee.roa (raw, json)
Hash identifier: Qu65hUYlQnTBsAhtJZQVJ0WpRiltC0IsMbuwI9TfQW8=
Subject key identifier: 94:22:B0:65:E6:B3:F4:FB:EE:FC:F9:D7:A2:D9:09:42:A4:EC:F2:6E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCA27C49FA144BDCB0E400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d915a37-01c6-392b-8545-69f6370be2ee.roa
Signing time: Thu 01 May 2025 16:19:41 +0000
ROA not before: Thu 01 May 2025 16:19:41 +0000
ROA not after: Wed 30 Jul 2025 16:19:41 +0000
asID: 22773
IP address blocks: 24.56.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:a2:7c:49:fa:14:4b:dc:b0:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:19:41 2025 GMT
Not After : Jul 30 16:19:41 2025 GMT
Subject: CN=7f3f5cd9-0567-4c29-acac-eafe4837607d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:89:f8:4e:94:4d:6a:6f:45:68:83:08:cf:
67:3c:4b:2f:70:f8:ca:15:95:fe:84:64:60:a7:5d:
10:b0:00:99:7d:b3:b3:66:03:23:0f:b7:5e:69:aa:
65:d4:43:96:a0:b4:01:07:f5:35:f5:eb:8e:aa:7f:
68:72:ff:07:39:a7:46:d6:58:39:64:9c:4d:21:81:
95:58:7d:ef:29:d6:1c:2f:17:69:f1:dc:43:f8:67:
ec:06:39:95:8a:6a:d5:77:f0:f7:fe:53:8c:85:e1:
34:93:81:26:b1:4d:8d:31:34:b6:de:d0:ec:ef:83:
df:97:a1:af:61:75:7f:db:61:77:a5:42:6c:e8:43:
32:1b:fa:fc:32:74:27:cb:e5:5c:40:4c:b5:3f:0b:
01:5b:9f:99:90:05:5c:4f:56:32:ea:00:00:14:2e:
64:ba:db:7d:3a:76:a8:83:56:ce:84:91:d7:ed:1f:
fc:27:4a:c3:dc:ef:90:6a:2e:39:3e:60:a0:e1:3c:
4f:02:47:8a:6c:01:e0:58:c8:fe:e9:77:ec:7a:cf:
63:b2:63:77:74:26:f3:63:b4:bb:ad:75:14:1f:a6:
22:55:89:ba:d6:a0:c8:fc:68:de:4b:92:b0:85:25:
58:7e:93:6e:98:75:2a:cd:6b:d9:57:7b:6d:84:ff:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:B0:65:E6:B3:F4:FB:EE:FC:F9:D7:A2:D9:09:42:A4:EC:F2:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d915a37-01c6-392b-8545-69f6370be2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:5b:76:be:06:e3:fd:81:3f:e9:d0:3f:c6:5f:b6:f2:de:2e:
d5:f8:de:78:cd:e2:0e:88:aa:fa:c4:42:6c:2c:8f:c9:b6:f5:
ee:9c:cb:55:9f:46:3b:2f:43:f7:2e:93:ba:16:64:71:62:a6:
50:5c:49:ec:f3:db:3d:46:4c:d3:4a:72:72:24:e4:0b:d6:13:
d7:da:de:d3:97:48:c1:b6:08:b7:6e:2f:32:0c:3f:9c:eb:84:
80:ad:28:75:ec:85:9b:e5:60:1c:53:7b:a1:c0:69:8d:95:73:
53:91:d5:cf:78:62:6a:6a:8e:50:cc:3d:95:65:76:31:75:5c:
53:5c:60:2d:7a:53:b4:07:f3:37:56:93:9c:2c:2d:d3:70:cb:
b1:a3:44:a2:14:f4:82:17:3d:aa:09:38:27:38:11:ca:f9:e5:
08:64:ca:c8:26:f6:5c:14:a3:99:e3:5f:05:5d:64:2c:20:9d:
72:55:58:37:ef:02:40:5a:38:42:ad:24:8b:09:cd:a2:81:57:
a1:1a:b9:49:28:c5:5b:8e:fa:8e:8d:bc:e1:d2:eb:0c:33:ac:
46:4b:55:37:62:c3:b7:e6:07:e5:07:39:32:b5:1a:ea:a5:f4:
63:3a:35:33:b9:85:04:bf:50:78:17:2c:87:65:fc:d1:97:31:
97:bc:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:58:59 2025 by rpki-client