Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/849cf1de-d93b-3b62-9aa1-51668c628843.roa
File: 849cf1de-d93b-3b62-9aa1-51668c628843.roa (raw, json)
Hash identifier: TxvB8/b0WuGUnTNY5iEeau6mr9iTbTvM1dpCLj4bReE=
Subject key identifier: 62:2B:45:29:75:61:9D:D6:4C:28:5C:5F:A4:F5:F8:F1:E0:22:05:CD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E02DE4899EED89C597C3C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/849cf1de-d93b-3b62-9aa1-51668c628843.roa
Signing time: Thu 01 May 2025 16:26:50 +0000
ROA not before: Thu 01 May 2025 16:26:50 +0000
ROA not after: Wed 30 Jul 2025 16:26:50 +0000
asID: 22773
IP address blocks: 72.208.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:2d:e4:89:9e:ed:89:c5:97:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:50 2025 GMT
Not After : Jul 30 16:26:50 2025 GMT
Subject: CN=f3f5afac-68a5-4db6-904a-e9aa901dc791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:08:8d:1e:9f:d6:fa:c7:f9:a4:4e:c8:5a:
cc:fb:d9:b8:af:a6:35:28:81:2b:22:f0:44:6c:c5:
7b:a5:f9:a5:e6:d9:fa:63:ff:36:4a:63:28:8e:24:
6f:03:c4:f8:b0:35:55:0f:79:07:46:5c:11:7b:ab:
31:0f:c6:51:73:a4:bf:f7:06:00:93:98:ca:12:b1:
02:31:e4:2d:73:b8:54:7a:f7:59:72:56:21:33:ab:
44:9c:8b:17:33:18:20:db:26:6d:63:f7:8a:35:e4:
47:e5:4b:27:8b:fd:e3:a4:47:4c:4b:41:11:be:03:
3d:1e:0b:1d:38:22:76:fc:22:4c:5e:5c:1a:83:06:
1d:85:39:8c:2a:1e:8c:aa:ea:cf:e2:39:a6:0e:04:
fe:ba:de:00:a5:66:1e:7c:65:05:42:ee:1c:e1:26:
73:e7:39:03:6e:77:62:74:24:9f:0b:47:98:a9:11:
88:1b:6b:34:81:90:aa:23:e2:67:db:2d:20:0a:6f:
a6:2a:64:f6:0e:ce:89:88:dc:a1:c1:d1:a8:6e:7e:
30:18:7d:e6:60:a1:c2:2a:43:91:be:5a:41:f8:75:
d2:8c:07:c1:df:9c:67:55:a9:3e:1d:a9:5c:02:bc:
c9:4c:a2:ff:9d:6b:1e:24:8f:e1:cb:6c:2c:66:59:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:45:29:75:61:9D:D6:4C:28:5C:5F:A4:F5:F8:F1:E0:22:05:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/849cf1de-d93b-3b62-9aa1-51668c628843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:2b:1e:35:51:39:6c:d4:0f:d0:77:30:21:8f:31:d0:57:d7:
83:a6:23:73:56:62:80:2b:09:0c:08:cd:8d:a1:04:f0:6e:28:
b7:7a:a6:2c:8c:de:63:18:93:e9:f5:89:1e:07:cb:38:f7:a9:
a1:22:d5:e0:2f:c0:51:3b:e4:33:f2:34:2f:f3:63:5d:4b:d4:
67:b7:da:07:52:82:58:54:74:ec:56:97:67:9d:4b:78:d2:51:
44:d1:60:15:ff:67:0d:ab:bc:66:36:9c:0b:97:f2:04:fc:b1:
7b:98:ad:03:21:ed:eb:30:f2:2e:2f:c2:db:3e:4d:1f:a8:7f:
5f:2a:f6:0a:ff:c1:1c:76:67:d7:b0:41:a0:bb:ee:c3:ae:27:
56:5e:e4:1b:4f:68:91:50:fe:f6:ba:e9:7a:49:35:f0:68:9d:
79:3f:53:21:fa:4e:88:c3:1a:24:f6:2b:7f:1c:5a:a1:6e:d8:
f0:bf:8e:5c:fb:79:85:27:ad:6c:54:8b:7b:24:ad:99:fd:4f:
0e:42:ba:dd:bd:43:86:23:34:9a:8f:96:9e:2d:9e:d7:5e:72:
3d:dd:43:85:7e:92:07:6b:7a:2c:c5:02:d2:02:ff:7e:74:5b:
d9:bf:5c:83:7e:d0:40:96:a6:ef:a8:6e:36:3d:2f:b8:a9:3f:
47:5b:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:40:48 2025 by rpki-client