Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f1afb6f-5e90-3635-ad37-8cabb4a3851e.roa
File: 7f1afb6f-5e90-3635-ad37-8cabb4a3851e.roa (raw, json)
Hash identifier: bfBnb0N8z9qLj6XyONeplO6VbBTp648j9NUwU5Gdviw=
Subject key identifier: 15:AB:3A:34:1B:43:FE:8F:9F:2C:2A:C9:C3:ED:1B:27:40:B7:E6:BE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E15541E44E6A3E9BBB75C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f1afb6f-5e90-3635-ad37-8cabb4a3851e.roa
Signing time: Thu 01 May 2025 16:29:09 +0000
ROA not before: Thu 01 May 2025 16:29:09 +0000
ROA not after: Wed 30 Jul 2025 16:29:09 +0000
asID: 22773
IP address blocks: 98.168.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:55:41:e4:4e:6a:3e:9b:bb:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:09 2025 GMT
Not After : Jul 30 16:29:09 2025 GMT
Subject: CN=45d64651-e7fb-49b3-8645-b6d531d20131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:98:8f:9e:2e:b1:7f:8a:e9:a8:a6:c9:64:
19:7c:61:ac:08:fc:0d:65:4a:27:2d:fd:b0:34:e3:
8d:bf:6a:c6:87:50:e7:b8:a8:26:ce:6f:23:46:7a:
42:a3:b6:03:e4:69:ce:9d:62:07:0a:97:50:b4:7a:
45:14:78:78:1c:be:98:2b:b8:89:9c:07:86:a9:d3:
e6:d8:59:0a:47:ac:e4:23:eb:21:64:fc:5d:cb:f7:
e5:21:4d:c7:2d:7d:05:ad:d1:34:5a:b4:4d:a4:29:
03:45:de:ca:5b:79:5c:e3:fb:6b:80:4f:2e:ed:a5:
97:e1:44:52:43:78:08:26:4d:bf:49:03:4a:94:97:
3b:f5:b6:3c:63:e8:8b:18:25:35:f8:0d:dc:26:1e:
8e:50:d4:c3:03:dc:42:58:f8:91:82:90:58:d2:ae:
d6:c4:4c:04:63:4c:03:bf:14:7a:dd:3c:20:29:6e:
7d:52:6f:05:fa:e7:14:49:3d:87:60:05:ee:62:f6:
43:16:c2:ce:5f:0b:3d:02:6b:cc:b9:bc:42:e8:a9:
6f:9e:9e:f8:94:23:f3:80:b9:9a:a9:fe:d3:ad:ed:
63:cd:91:cc:cf:09:b9:e9:a6:c3:96:a3:2d:78:bb:
2e:9f:16:7e:4c:d4:d7:cd:39:11:da:38:4c:92:bd:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:3A:34:1B:43:FE:8F:9F:2C:2A:C9:C3:ED:1B:27:40:B7:E6:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f1afb6f-5e90-3635-ad37-8cabb4a3851e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.168.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:c9:66:df:ef:c8:b3:65:28:f7:14:0d:38:31:3a:5b:dd:d0:
c6:bc:aa:84:60:3f:a4:97:8b:dd:a7:c7:04:21:c2:57:f1:b3:
49:f0:20:66:65:cc:82:d6:f6:90:c2:d7:a8:c0:f7:74:6e:aa:
60:ce:76:f2:76:97:3f:fc:8f:53:31:c3:8a:e3:c7:44:5b:10:
04:dd:05:f3:37:a6:9e:85:3a:b6:4b:ae:0c:c2:8e:91:78:b8:
d1:2d:81:44:a4:8d:ae:d8:93:81:e3:30:7e:eb:05:d2:62:15:
e8:c0:b8:d9:77:e7:1d:bf:77:5c:2f:5b:37:34:5a:63:52:4e:
1f:aa:77:d8:f6:56:9b:fe:8b:c3:ba:f4:6b:1e:f0:66:be:a2:
67:12:ec:d5:58:cf:3a:f7:af:05:25:99:da:8c:37:a7:61:c2:
9e:9f:8e:cb:c7:72:ea:76:13:6d:31:52:3f:d4:f1:7e:89:51:
d2:14:38:ee:e9:2d:66:1e:2c:12:9e:bd:30:56:b5:71:f1:4c:
a5:95:cb:30:fc:75:b5:df:19:36:bf:ba:59:76:c8:d8:58:7f:
60:00:42:18:34:dd:a0:55:45:da:dc:4c:77:d5:e6:94:cc:c0:
ab:62:ac:36:30:af:88:fb:7e:d6:f0:54:3f:14:7d:1e:3f:7c:
e2:0e:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:20:59 2025 by rpki-client