Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/83b9535b-ba84-3634-9af2-c433f4df8eb7.roa
File: 83b9535b-ba84-3634-9af2-c433f4df8eb7.roa (raw, json)
Hash identifier: +DyovnMyIx0f20S8xillucne23zlJMWOptHxeufLO4c=
Subject key identifier: EA:21:26:5E:3E:13:5E:FC:45:A8:B5:59:99:65:43:D0:B4:76:71:B2
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E15FBFFC70E46C95CDA720
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/83b9535b-ba84-3634-9af2-c433f4df8eb7.roa
Signing time: Thu 01 May 2025 16:29:14 +0000
ROA not before: Thu 01 May 2025 16:29:14 +0000
ROA not after: Wed 30 Jul 2025 16:29:14 +0000
asID: 22773
IP address blocks: 98.171.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:5f:bf:fc:70:e4:6c:95:cd:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:14 2025 GMT
Not After : Jul 30 16:29:14 2025 GMT
Subject: CN=458eede4-9086-4376-9474-f3ac7bc51ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:cf:8c:55:c3:fe:70:62:61:6e:3f:0f:6e:
b1:8a:fe:65:32:b8:df:62:43:01:4a:34:00:5e:b0:
1d:e3:aa:74:ad:f4:4c:30:30:2f:27:e5:c0:e1:60:
58:6c:17:4e:ff:f5:e4:32:22:91:21:03:19:94:ce:
c6:c9:f6:0d:29:d4:40:75:a2:0c:8e:7d:9b:f2:ad:
be:e4:ab:00:d1:76:0b:2a:ba:4f:cf:15:07:81:d5:
42:06:b6:21:62:1d:ee:64:cb:88:ef:06:bb:a8:e8:
0d:4a:b0:0a:e7:4b:de:b7:e0:2e:80:9b:81:71:e4:
5d:73:28:1b:02:4c:f4:0c:49:d2:68:4e:81:00:1a:
38:db:9a:d6:95:88:6d:25:5c:3a:c5:0e:00:95:67:
bd:0d:2d:a1:c9:5a:5d:c9:df:c3:24:e1:ad:9f:77:
36:57:26:ce:1e:20:7f:d4:ba:59:71:75:0c:93:25:
11:1a:56:5a:ce:8a:82:60:08:d2:f7:b1:0c:91:1a:
ee:4e:45:a4:04:ee:59:68:24:60:9d:47:5f:45:00:
d1:25:c9:e7:a6:61:b2:c7:05:5f:4c:96:91:6a:1c:
71:05:11:15:87:b8:96:30:98:59:0f:f8:8c:e6:40:
19:ae:18:fd:0d:45:74:e6:fc:0a:76:e6:2c:99:fd:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:26:5E:3E:13:5E:FC:45:A8:B5:59:99:65:43:D0:B4:76:71:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/83b9535b-ba84-3634-9af2-c433f4df8eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.171.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:dd:19:5e:80:9a:5f:64:a7:8c:0d:a2:c5:05:26:a5:5e:dd:
a2:53:51:e0:67:90:78:13:56:65:96:b0:9d:60:30:b9:24:49:
70:0a:7d:c4:88:f7:30:c8:0b:95:70:96:19:95:99:a6:15:ad:
91:f1:51:1f:11:42:39:5d:2e:41:dc:ac:e8:a7:cf:79:32:24:
b0:df:20:4a:c8:cd:a1:a9:ab:37:c8:b1:b1:5b:04:a1:4c:f0:
25:e2:5b:f0:9b:b3:86:6f:1c:a6:85:e0:dd:2e:70:7a:c4:aa:
cd:02:40:8d:8e:ce:c4:06:ea:47:94:50:09:16:8b:1a:e3:bd:
b5:93:fc:74:ac:e0:73:07:51:44:4d:bc:e7:f1:f5:34:27:c3:
e2:b0:fd:37:1c:da:b4:20:7a:f2:a1:2e:96:f5:de:02:8b:33:
e8:a8:9e:e7:c6:4b:3e:d6:50:45:d0:63:1a:f2:4d:a8:64:d4:
16:22:25:b8:86:e1:76:15:48:d9:52:31:2c:0d:5f:c4:0f:14:
71:f4:9e:7c:12:e2:05:af:47:f5:79:01:1e:c6:85:79:4a:25:
29:2e:ff:28:53:ce:a8:30:0d:64:dc:07:81:1f:0e:f0:bb:20:
c1:b8:a1:d1:ca:c2:a2:f2:a8:8e:fa:bb:5a:42:ba:5e:49:ed:
ab:7b:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:45:58 2025 by rpki-client