Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95e68dd3-63ce-3589-9831-7c7890de2305.roa
File: 95e68dd3-63ce-3589-9831-7c7890de2305.roa (raw, json)
Hash identifier: oi9KNLix5LKHRLTyjm+/8Rj1IcHwiUv9klag2w0giVA=
Subject key identifier: 38:DF:5F:12:83:9D:76:53:19:6B:A6:49:ED:B5:34:42:8D:CA:A3:D7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0F709A6C3038060C1A840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95e68dd3-63ce-3589-9831-7c7890de2305.roa
Signing time: Thu 01 May 2025 16:28:25 +0000
ROA not before: Thu 01 May 2025 16:28:25 +0000
ROA not after: Wed 30 Jul 2025 16:28:25 +0000
asID: 22773
IP address blocks: 98.161.238.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:f7:09:a6:c3:03:80:60:c1:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:25 2025 GMT
Not After : Jul 30 16:28:25 2025 GMT
Subject: CN=9a18c04e-e8a0-44a6-a697-9c9a8a0fdcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:19:8f:db:30:ab:52:8e:6e:1c:3b:4d:3f:
8d:4e:d1:3d:a6:e0:47:e6:8b:00:e1:47:1c:63:bf:
77:64:59:aa:f7:74:99:25:7e:46:fb:a2:c7:ff:d6:
9e:d0:f5:be:96:86:a9:ef:c7:c8:82:65:82:c3:9d:
eb:04:71:4f:7e:39:5a:db:02:9a:d3:9b:77:aa:7c:
d0:06:13:5b:8d:cb:13:76:1a:39:c5:b3:19:7b:b1:
0e:f7:ca:7a:af:db:8b:95:90:ec:d4:56:b0:80:ec:
7d:4b:e2:ac:e9:ce:85:a0:94:98:4d:85:5a:d1:b3:
d5:29:c7:ec:32:8a:b1:8b:18:5e:1b:32:e7:66:ef:
f5:ed:4e:4c:ed:da:34:46:43:cf:e9:4b:16:40:62:
8d:92:3a:22:ac:52:7b:8b:1b:e4:d8:9f:3c:0f:a6:
59:53:84:0a:be:b7:cc:c9:20:5e:27:81:8a:7e:57:
70:9a:b7:94:cc:ef:d4:1e:41:f9:89:75:bb:b1:cb:
e1:b7:52:d7:4a:12:84:a1:6d:9e:af:24:29:89:36:
bf:d4:38:27:1b:fa:27:1c:4e:93:cc:e4:52:83:8e:
97:96:f0:01:21:73:03:c9:93:33:7a:01:61:c1:2c:
df:74:78:a3:75:b5:b1:d7:7b:ab:f5:3e:62:ec:b0:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:5F:12:83:9D:76:53:19:6B:A6:49:ED:B5:34:42:8D:CA:A3:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95e68dd3-63ce-3589-9831-7c7890de2305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a4:83:4f:3f:a2:0a:f8:29:97:25:af:d8:ed:2c:eb:65:f2:
c2:9c:6b:e2:0e:fb:e9:7a:fc:21:df:45:80:45:db:63:7d:7a:
87:fd:e0:f2:df:0b:26:28:8f:df:46:5f:bb:0c:3a:d1:15:a4:
85:54:a9:ae:0f:c9:29:d7:97:a5:43:4f:f3:c6:e1:58:57:22:
8f:c7:8f:2d:8f:8d:8f:f8:ee:f3:ad:c0:6d:8e:ab:de:3d:5c:
af:c5:76:df:bf:9f:92:7c:fe:e9:c3:73:5b:6e:e9:bd:34:e0:
0a:a1:73:14:99:5a:67:3c:43:a3:5f:d6:20:80:87:d0:7e:e3:
02:a3:36:f6:c6:ef:e8:a0:40:ac:41:c4:c9:91:40:e5:76:4a:
ff:66:e0:7f:1d:5a:77:eb:d1:b7:06:c5:35:24:51:a0:fa:10:
5c:c8:eb:3d:3f:cf:5e:d5:f3:89:07:d3:56:dd:c7:f6:22:dd:
e3:f6:7e:35:56:b3:d8:8a:54:7c:ca:e6:ed:c3:0e:e3:fa:16:
81:d2:fa:21:eb:b3:05:3f:a9:fd:f2:c4:d9:10:ce:c9:77:3c:
66:f6:c3:05:b8:75:f4:02:0c:d2:16:25:8f:66:ea:d3:cd:1a:
d2:36:b0:ec:84:f6:49:15:6d:bc:54:f9:8c:b6:02:85:d7:58:
06:1a:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:21:13 2025 by rpki-client