Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3244723-ab04-3e9a-ac36-19c735dc1bee.roa
File: a3244723-ab04-3e9a-ac36-19c735dc1bee.roa (raw, json)
Hash identifier: Q35KmJDxIX/SH+QgJEWuWZSsn+YCNsu3iDb23wKvFf0=
Subject key identifier: 15:D2:23:16:F8:09:13:EE:49:2A:7A:E6:89:A3:E0:85:BC:9F:8B:DA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E02FBE55227011E04D3AA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3244723-ab04-3e9a-ac36-19c735dc1bee.roa
Signing time: Thu 01 May 2025 16:26:51 +0000
ROA not before: Thu 01 May 2025 16:26:51 +0000
ROA not after: Wed 30 Jul 2025 16:26:51 +0000
asID: 22773
IP address blocks: 72.208.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:2f:be:55:22:70:11:e0:4d:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:51 2025 GMT
Not After : Jul 30 16:26:51 2025 GMT
Subject: CN=6ea79c93-ba02-4348-b69c-f316e82d0deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:f1:b4:83:f2:f3:e3:2f:27:5f:40:4b:0f:
5b:6d:86:e1:6e:0e:67:fa:c2:f4:d0:b0:68:cc:5e:
de:8b:fb:90:be:4d:70:f1:08:3e:59:63:84:76:85:
b8:64:06:5c:e2:7a:e4:89:eb:6c:a8:31:32:c4:c0:
75:c8:7e:78:6a:9a:2c:c9:98:72:05:2c:cb:db:90:
4b:46:bd:d4:ee:43:31:a0:c5:c7:fd:90:1f:fc:40:
5e:d6:d5:ca:d4:4f:7e:5c:f4:64:86:94:bf:39:8c:
ba:9d:06:14:f1:64:95:73:5a:01:e1:a5:03:0d:0f:
9b:91:ac:bf:44:cb:a7:06:fd:8a:da:c7:49:e7:df:
24:b6:61:00:e9:42:5c:e4:ab:c0:82:a3:17:17:29:
7e:7b:97:4a:e5:e4:b5:bb:e4:8b:ce:e0:49:c2:cc:
38:2f:cf:d9:d6:d1:b0:f5:35:b1:9f:52:e9:df:d8:
5e:0a:2a:6a:31:2d:f8:5c:74:5c:55:b0:40:b9:8e:
23:75:7b:a7:50:1b:85:c8:39:b0:09:b4:e1:e9:6a:
91:dd:13:83:a6:be:73:40:92:3b:ab:de:eb:f3:ab:
7a:62:ce:2f:9f:24:7c:26:73:88:2a:d4:98:80:1e:
01:ce:b9:cf:81:1a:09:f3:d1:b9:2f:d0:1b:fe:dd:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:23:16:F8:09:13:EE:49:2A:7A:E6:89:A3:E0:85:BC:9F:8B:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3244723-ab04-3e9a-ac36-19c735dc1bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2c:fa:8c:fc:20:ad:6e:a6:7b:e6:04:c5:16:b0:fc:c9:f3:
03:3d:20:59:49:7b:e0:05:a1:75:67:bc:5b:13:97:44:c2:01:
0d:64:c2:be:d2:e8:77:87:fc:72:90:41:e6:d7:6c:64:36:10:
5a:71:8c:7a:67:29:bb:68:7d:4e:05:7e:cb:56:67:c7:95:2f:
99:99:27:be:04:5c:67:a4:d8:d0:34:1c:05:11:14:92:be:88:
9d:53:9f:ef:2c:2f:70:cf:c4:ab:c0:e4:8b:f4:78:15:b5:27:
05:aa:ab:b3:53:ea:d4:34:b3:59:0f:6d:e2:4f:05:02:28:ad:
ed:b2:8b:2c:bb:bd:84:30:4d:76:3f:a8:7b:97:d4:be:f0:53:
51:e8:53:b1:12:f5:e7:d7:a0:61:e3:89:69:3b:14:d3:fa:0a:
63:cd:00:77:36:61:29:7a:c6:16:52:53:0a:43:ed:b8:4e:ae:
49:c6:ce:91:42:48:53:a3:83:1c:51:d7:f6:2c:c0:e0:92:a1:
12:28:de:89:a6:b4:a2:86:37:e6:92:a8:e8:37:a2:f4:c9:ba:
2d:a3:88:00:df:ed:ef:de:fc:5d:58:6a:00:40:95:3f:2f:f6:
ce:d4:6a:ef:0e:94:a4:8f:7d:32:4d:b2:6c:0c:43:fd:dd:61:
b9:c5:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:58:06 2025 by rpki-client