Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/821d336c-1357-3f9b-9f3d-23af0e7b105c.roa
File: 821d336c-1357-3f9b-9f3d-23af0e7b105c.roa (raw, json)
Hash identifier: hOPmfVHa+OeZqJ+hjilETnwe+41Tvp2YeoZ2v1+vNBM=
Subject key identifier: 99:48:11:B7:9A:5E:31:1C:40:5A:8F:0A:09:B3:D5:50:8C:9B:27:31
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E1744950278C0C63BCF700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/821d336c-1357-3f9b-9f3d-23af0e7b105c.roa
Signing time: Thu 01 May 2025 16:29:24 +0000
ROA not before: Thu 01 May 2025 16:29:24 +0000
ROA not after: Wed 30 Jul 2025 16:29:24 +0000
asID: 22773
IP address blocks: 98.171.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:74:49:50:27:8c:0c:63:bc:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:24 2025 GMT
Not After : Jul 30 16:29:24 2025 GMT
Subject: CN=e3dc6495-1ac5-4f07-be79-f3235606b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:64:8e:32:bc:a3:fa:49:ac:36:f7:39:3c:
a7:ed:c2:01:c2:e9:ca:67:b9:92:67:82:be:3a:11:
19:dd:8c:60:2f:ab:d4:ee:13:60:08:9a:df:bc:02:
8b:0d:d2:fe:81:77:c8:21:68:b2:3a:a8:da:a3:22:
53:e1:32:ed:b0:47:7f:b8:e8:fa:1c:fb:1e:a6:6c:
b9:49:52:b1:fa:59:e0:4b:74:97:ff:5c:c6:70:13:
0b:76:1e:c7:c8:05:2e:f3:c2:5b:ec:2e:97:f0:7e:
8e:7b:a0:8a:1d:72:c5:56:86:69:1d:2a:c2:d8:70:
df:e8:a3:bc:92:27:51:fc:fe:7a:43:46:3d:5e:70:
b4:5d:d6:9c:a1:9f:9f:9f:41:81:78:b4:df:19:2d:
43:82:78:50:5e:4c:1d:5b:8c:ed:3b:44:1e:c9:3e:
5e:e9:fe:8e:42:ac:55:06:fd:b3:60:52:34:17:39:
b3:46:e8:e4:4e:46:81:3f:64:fd:da:7a:94:22:76:
c7:2d:10:b6:15:df:41:63:5d:de:b5:27:85:56:4a:
56:e9:d9:c5:c4:d2:38:52:c3:42:23:15:ed:a7:28:
18:3e:84:de:ae:35:4b:39:c1:43:de:79:16:a2:29:
de:8c:ea:1f:3d:47:d0:f3:4e:73:b2:b7:19:9c:eb:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:11:B7:9A:5E:31:1C:40:5A:8F:0A:09:B3:D5:50:8C:9B:27:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/821d336c-1357-3f9b-9f3d-23af0e7b105c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.171.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:c7:db:da:d2:4b:b0:5c:53:80:ea:0c:a0:1b:5c:22:6a:26:
54:1c:21:8a:72:84:e6:45:6b:6b:ca:26:ba:6d:0c:c7:ba:fc:
5c:a6:b4:53:ab:af:d8:99:81:eb:60:d1:f0:13:95:30:65:3f:
45:68:2e:57:bd:b2:7e:48:77:8e:e5:d7:36:ca:5c:b8:1c:f8:
6b:96:46:07:51:c1:75:87:65:e5:8c:ad:60:a6:78:9d:23:39:
3a:27:91:1d:31:3d:90:0e:b5:a1:ea:cd:ca:83:ce:77:ad:6d:
60:9e:b6:6c:bf:46:4c:bc:df:74:84:5b:2a:5a:f7:fb:87:05:
74:a6:a7:52:4b:55:cd:cc:b3:12:f9:c1:70:c4:cb:5e:af:39:
00:9a:cf:c9:46:40:d3:cf:38:fa:64:3c:d9:55:a0:df:a4:97:
96:43:ec:bf:f7:f8:56:6a:23:b0:2c:12:5b:da:45:29:26:e9:
35:c8:7f:4b:46:ab:4a:67:79:4c:0f:c8:d2:f0:0e:2a:88:6f:
46:34:48:02:34:50:71:3a:60:0f:f0:cb:94:ca:a7:62:c7:59:
c8:0e:dd:ff:7b:db:32:66:75:a8:96:08:58:00:4c:25:32:17:
05:97:54:98:90:35:20:2d:e4:73:f0:e3:a4:be:f1:cb:6e:ce:
57:38:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:33:59 2025 by rpki-client