Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/935c5447-21a6-3d2a-8abc-9a0d4e9d3bec.roa
File: 935c5447-21a6-3d2a-8abc-9a0d4e9d3bec.roa (raw, json)
Hash identifier: CKKoSqvbBnzVZn5OrhAfjWD4HAtnOTLjGrAW3wKmBq8=
Subject key identifier: F7:D9:0E:4F:DB:04:2E:A4:1A:87:B6:06:93:29:9D:E7:B7:4F:E8:CF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEB8E995F4D5C5CD777300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/935c5447-21a6-3d2a-8abc-9a0d4e9d3bec.roa
Signing time: Thu 01 May 2025 16:23:54 +0000
ROA not before: Thu 01 May 2025 16:23:54 +0000
ROA not after: Wed 30 Jul 2025 16:23:54 +0000
asID: 22773
IP address blocks: 70.172.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:b8:e9:95:f4:d5:c5:cd:77:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:54 2025 GMT
Not After : Jul 30 16:23:54 2025 GMT
Subject: CN=7096f0ea-e685-47ae-9a73-0078a55df24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:bb:2e:75:10:09:1a:16:ed:5a:ac:31:b5:
d2:d3:67:ca:96:c6:07:3a:8a:5a:17:16:b3:7f:89:
ba:80:fa:58:43:54:24:2c:bb:81:06:7d:12:15:7b:
32:a0:04:fd:c1:71:bd:1d:82:af:2a:b8:2a:57:e7:
0c:e5:26:4b:8b:ce:33:de:2e:f4:5d:c3:57:86:bd:
15:c3:cc:e4:d5:30:fb:17:89:fc:f0:1f:53:d9:7f:
a7:2c:f9:13:71:9b:f0:b7:d8:36:ed:68:c7:e7:71:
ce:84:e4:18:f0:86:c6:0d:70:0a:2c:1d:49:b2:9e:
fd:63:fd:a6:23:e3:f6:b4:01:8b:c5:d9:ea:20:99:
3e:4f:02:91:2e:c0:ad:77:de:5d:18:22:36:e1:27:
7e:be:b1:33:36:3f:9f:92:8d:18:fd:a9:ea:74:9b:
6c:1d:58:e8:65:eb:47:fe:01:33:67:c6:0b:3f:e2:
0b:f4:53:fe:20:09:4d:cc:58:3d:5b:c1:ff:ab:1b:
e5:7f:01:35:87:37:ab:7c:bd:9c:3c:f5:92:1f:9c:
cc:14:84:e7:9c:d8:4f:64:0d:3e:bc:29:62:26:9a:
ab:bd:f9:64:71:2d:d9:f3:45:8e:5b:70:dd:45:f8:
20:a7:6c:50:5e:76:66:86:71:71:33:a9:e0:31:8f:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:0E:4F:DB:04:2E:A4:1A:87:B6:06:93:29:9D:E7:B7:4F:E8:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/935c5447-21a6-3d2a-8abc-9a0d4e9d3bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:8e:54:02:27:8a:33:d5:22:45:2c:97:bf:c9:eb:75:ff:ae:
3b:78:cb:f7:c8:22:6a:d3:a7:0e:80:48:3e:f1:7b:39:12:c5:
17:0e:45:d5:ad:b4:c9:fa:bd:b7:0c:99:a3:d4:74:ae:61:39:
c2:3d:af:46:03:81:d0:e3:5f:93:ca:6c:f0:56:24:b8:81:44:
ec:7b:ca:7e:c0:13:4d:45:b1:6b:09:21:83:0b:ee:b6:4c:cf:
e6:c7:0e:a5:c8:52:55:5b:c9:34:f2:6c:c6:b5:42:6d:e1:2c:
bf:6b:46:0e:1e:28:12:d2:48:03:e2:52:72:a2:50:16:ad:57:
a8:e5:bd:ec:83:8f:37:8f:0a:c1:20:ee:61:db:5e:95:74:45:
e6:b5:35:c5:14:72:bc:81:0d:af:2c:2d:a5:03:92:0e:be:cf:
3c:3e:de:56:68:2d:c6:fe:09:31:8b:90:55:c6:48:3b:59:39:
00:50:82:d5:e7:a8:fc:99:71:02:70:03:d0:96:de:d2:74:42:
19:a7:e0:81:11:e8:fc:db:8d:36:42:04:d9:57:b3:32:c0:ca:
49:d5:94:cf:dc:34:89:43:b4:63:20:5f:3f:71:a8:c1:cf:4a:
06:98:0a:c2:9c:b0:01:c8:bf:63:13:3b:86:cf:34:84:69:cd:
df:6c:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:02:00 2025 by rpki-client