Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fcafb68-2a32-3fe7-b57d-06f31f5fafb3.roa
File: 7fcafb68-2a32-3fe7-b57d-06f31f5fafb3.roa (raw, json)
Hash identifier: 3WC9qm1b9WD5J4OcbRURKkt4gvMx+GrpPlZpz9SIVfY=
Subject key identifier: 23:88:86:16:41:30:A8:52:E4:E4:9A:08:06:B9:0D:41:39:AD:E8:8D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E24B202B6CA50FB2E6A1C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fcafb68-2a32-3fe7-b57d-06f31f5fafb3.roa
Signing time: Thu 01 May 2025 16:31:05 +0000
ROA not before: Thu 01 May 2025 16:31:05 +0000
ROA not after: Wed 30 Jul 2025 16:31:05 +0000
asID: 22773
IP address blocks: 2001:579:81ac::/46 maxlen: 46
Validation: Failed, certificate revoked on Thu 01 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:4b:20:2b:6c:a5:0f:b2:e6:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:31:05 2025 GMT
Not After : Jul 30 16:31:05 2025 GMT
Subject: CN=2c954940-7a54-4db5-8e8a-8a8e41e07645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:80:62:3a:53:0f:cb:d6:89:69:57:0b:3c:
ae:cc:f2:6d:d0:1e:cb:f7:0a:f1:88:da:ce:c4:32:
a0:7e:fe:2d:d5:2e:4b:9b:94:6d:91:d2:4f:b0:02:
f8:ce:c4:4b:5e:a4:91:e8:b4:40:d3:bd:b6:fe:66:
cd:1f:18:4b:51:32:75:a9:f5:e1:e4:f4:20:fb:55:
cb:c5:ec:ce:82:4b:10:a3:6b:b8:5c:de:73:c3:79:
fc:11:2a:64:5a:e4:4d:b0:da:4b:d3:3d:95:e0:e9:
52:59:8a:12:77:c5:58:be:9d:f4:12:71:3f:de:d4:
a1:01:4f:ce:45:14:78:91:af:ee:09:15:b5:02:5e:
09:95:58:fe:c5:7a:31:1a:99:82:18:cf:a4:e3:2a:
b9:0a:8f:67:48:f2:90:5e:0d:c8:6b:85:d7:ef:aa:
03:e0:d1:6d:24:85:30:76:13:f3:ce:ed:b2:7c:d6:
f6:0f:34:33:28:64:80:49:21:62:47:53:69:5c:71:
0b:ec:24:0e:49:2a:69:91:b6:56:be:88:ab:ce:9a:
b6:51:3b:2e:2c:22:c1:c2:cc:f4:8e:3d:bc:10:31:
79:73:46:e5:8e:30:7a:79:99:91:c4:48:26:11:46:
8b:e5:05:48:e6:3f:b7:b7:71:8a:cf:9d:79:52:c4:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:86:16:41:30:A8:52:E4:E4:9A:08:06:B9:0D:41:39:AD:E8:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fcafb68-2a32-3fe7-b57d-06f31f5fafb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:579:81ac::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:47:96:11:9f:17:ae:de:4b:9f:9d:45:a2:22:cc:36:69:f2:
95:69:3b:d5:7e:d7:37:42:68:6b:03:31:30:46:c7:59:7b:2d:
bd:3a:f9:95:a0:de:41:eb:5a:91:fc:41:b0:df:ac:ea:86:94:
e5:f8:4b:97:5d:ec:46:92:b9:ba:98:ce:9b:3f:53:d3:f2:b9:
9b:e1:ea:6a:31:90:b6:e3:51:9c:21:ef:8b:cb:48:b6:d4:a8:
29:24:c0:b1:e8:f4:02:27:e7:ac:c3:2a:6b:2a:6a:0a:9f:38:
fa:66:8d:5a:5e:06:3e:b5:56:84:88:68:4c:5b:5b:22:66:c1:
7d:0f:90:af:a0:00:b1:c7:e1:1d:71:83:f7:15:32:f5:17:d2:
41:79:26:e1:94:ab:43:a7:15:a0:e6:46:dc:4c:aa:bf:e9:f8:
a7:b8:c5:bd:bf:e9:64:6b:bd:df:b0:24:d4:d7:6d:75:07:9c:
5a:24:28:62:1b:9e:c5:34:be:c2:04:06:63:20:cd:1f:7d:ec:
7c:6b:97:6f:c6:29:2d:0e:69:9e:f1:ec:16:2e:75:76:9e:32:
a7:88:17:e5:68:90:cb:96:60:52:9f:1a:da:5e:03:1a:7b:60:
dc:71:9b:e4:91:a3:51:73:96:30:aa:84:7a:42:33:ef:c0:3d:
b3:2c:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:28:06 2025 by rpki-client