Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8697b489-0f36-331c-b221-334be309090e.roa
File: 8697b489-0f36-331c-b221-334be309090e.roa (raw, json)
Hash identifier: uBXiAfpyrLl1s0ZuXTm0z1uKxWBEAr+hJx2cr1xKj5U=
Subject key identifier: 09:1F:6E:BE:D5:2D:77:65:E6:8F:5B:43:E7:75:E7:89:69:99:21:35
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0FBC5C79CC4DA379EBA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8697b489-0f36-331c-b221-334be309090e.roa
Signing time: Thu 01 May 2025 16:28:27 +0000
ROA not before: Thu 01 May 2025 16:28:27 +0000
ROA not after: Wed 30 Jul 2025 16:28:27 +0000
asID: 22773
IP address blocks: 98.165.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:fb:c5:c7:9c:c4:da:37:9e:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:27 2025 GMT
Not After : Jul 30 16:28:27 2025 GMT
Subject: CN=0a3d1322-9518-4379-8f01-c3484b84ad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:66:82:90:41:70:9a:5e:1e:98:a6:2b:68:
dd:72:86:79:2e:4c:70:56:5e:62:04:92:c3:1e:f3:
26:2d:2f:fa:a9:c9:09:75:38:2e:db:b3:fc:68:be:
49:12:d9:b2:32:9a:d3:42:04:fb:e3:86:7c:2d:32:
bf:c9:e4:38:f8:c7:07:62:b9:18:4f:5c:51:5e:51:
1a:74:b4:f8:5d:6a:00:2d:4f:1d:76:27:58:fe:27:
0b:eb:c3:e0:69:bb:01:cf:e0:f3:0b:cb:21:6b:0d:
ef:40:07:6f:70:1f:88:02:a3:b6:39:61:09:ec:00:
aa:f3:1a:e7:52:e1:8b:cc:6c:55:7c:02:09:9f:58:
f4:e2:cb:ce:a6:08:c0:4e:52:a9:46:9c:fd:77:4b:
44:3a:76:c6:4e:25:06:75:a6:9c:08:ba:ad:4c:61:
41:6a:fd:89:e8:65:25:fe:31:72:84:27:c0:68:f1:
8a:95:8e:f2:82:2f:bf:aa:ea:d2:27:ec:5a:4d:d2:
7e:d8:6b:42:dd:29:aa:30:c1:91:fa:07:25:90:f2:
82:5e:42:0d:9b:68:23:b6:02:3c:cb:a6:20:fa:3a:
1b:e8:ab:5a:a1:bb:36:a7:af:21:c5:e2:a0:a3:6c:
76:16:15:f9:3d:33:2e:2b:f5:89:a0:a0:07:f3:f4:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:6E:BE:D5:2D:77:65:E6:8F:5B:43:E7:75:E7:89:69:99:21:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8697b489-0f36-331c-b221-334be309090e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.165.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:9d:36:45:0b:0e:97:33:be:3c:75:dd:93:51:fc:26:60:b5:
90:c3:98:60:39:d9:3c:8a:38:b9:f1:69:ce:4f:78:14:09:5d:
38:10:ea:c7:7a:f8:53:3d:fe:e7:ff:ba:49:f9:4d:5e:4d:87:
44:7b:47:11:86:ae:44:d5:27:f5:ae:3c:27:99:62:26:51:92:
f3:87:ff:fc:3b:eb:4b:38:d3:1e:cb:6b:ba:c1:7c:0e:33:98:
9e:a1:ea:ac:89:9b:44:ae:b5:72:a9:67:9c:d0:2f:7b:42:19:
1b:e1:71:7c:f2:ef:77:9e:9f:89:06:61:a0:1e:8e:c7:85:3d:
22:b5:88:9d:97:a2:15:4d:89:16:72:f7:c4:8b:4e:69:73:0e:
92:89:2e:b0:88:69:c6:c2:13:5e:75:3c:3f:e1:c6:9c:f5:c1:
07:1f:3f:86:0b:bd:2f:1a:aa:44:7d:7f:39:b1:5d:a7:9f:c1:
ee:80:64:ea:5d:de:f5:8f:39:37:ab:54:85:a2:49:da:be:e7:
fc:10:21:dd:94:29:50:8d:d1:ff:36:9d:85:46:e0:11:75:86:
55:0b:94:db:fe:42:09:1d:f9:e3:c3:21:8f:6f:89:65:d9:f6:
14:6b:0d:5b:76:03:98:12:aa:ff:23:f4:6e:81:56:15:d1:79:
65:62:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:37:54 2025 by rpki-client