Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f3a69f-01e4-3ec7-a806-a949f3fd8999.roa
File: a3f3a69f-01e4-3ec7-a806-a949f3fd8999.roa (raw, json)
Hash identifier: SolYQhpAeq7IjIcTzO4RjXPQpvOEAZv1j1aoqc01klU=
Subject key identifier: 3E:39:7F:76:25:E1:EA:0E:1F:CA:F4:4D:4D:2F:AB:F6:2F:17:58:F7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DFC382803B302A508B1D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f3a69f-01e4-3ec7-a806-a949f3fd8999.roa
Signing time: Thu 01 May 2025 16:26:00 +0000
ROA not before: Thu 01 May 2025 16:26:00 +0000
ROA not after: Wed 30 Jul 2025 16:26:00 +0000
asID: 22773
IP address blocks: 72.201.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:c3:82:80:3b:30:2a:50:8b:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:00 2025 GMT
Not After : Jul 30 16:26:00 2025 GMT
Subject: CN=8e8c466a-c68a-4c53-88f3-060600b5ec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:44:2f:c5:1e:61:b1:45:37:43:e0:5c:e6:
85:d5:3d:68:22:22:8d:f5:dd:cc:a2:80:e7:46:9d:
ed:e0:63:1d:f4:3e:20:f3:e1:c8:25:c7:7d:04:aa:
1e:55:88:5f:b5:88:f2:31:ac:1b:da:2a:66:c8:9f:
d9:0b:d5:90:51:05:54:61:9a:7b:7a:4f:8d:9d:82:
c6:60:0f:63:50:c2:2d:a5:ac:ba:82:dc:31:5e:b2:
c8:4f:2a:20:6d:53:38:ae:37:43:5a:d2:2d:36:00:
71:00:64:f2:39:21:68:50:d6:2e:e2:e1:af:ac:de:
08:ab:fd:36:ec:bd:41:ff:72:18:cf:74:dc:fe:a4:
bb:d0:7a:73:69:27:e2:1d:44:0e:02:a6:ff:c5:ba:
42:90:89:ef:57:e2:ba:12:06:21:4b:41:26:0f:ab:
2d:3f:25:90:0b:23:55:a8:90:66:61:be:0e:7b:b1:
f4:27:a1:35:32:ca:a9:ac:67:d8:48:28:97:66:65:
19:e6:f6:19:40:b2:53:9c:c1:0c:08:bc:ea:64:dc:
3c:24:48:71:bf:ae:aa:c8:d4:78:04:4b:69:c3:f1:
27:79:66:83:14:40:b1:4c:d3:73:21:38:3c:34:3f:
75:7b:2f:1a:ea:9d:27:72:41:01:f5:64:25:f8:2f:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:7F:76:25:E1:EA:0E:1F:CA:F4:4D:4D:2F:AB:F6:2F:17:58:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3f3a69f-01e4-3ec7-a806-a949f3fd8999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.201.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:e4:3f:cc:98:2d:eb:5c:73:cb:74:a7:5e:7a:2a:00:21:4d:
f3:1a:01:d4:fe:6f:d0:0d:2a:3d:f2:24:d4:c3:3a:12:48:e6:
1d:9e:b8:1d:e1:e9:04:68:53:db:f2:12:dc:f5:04:ce:19:f6:
2a:90:bc:f2:6d:6c:4c:d2:34:96:f9:e5:3a:0a:ea:81:dd:ff:
09:a6:b8:fa:15:bc:17:5f:45:14:23:99:92:36:c6:4c:b7:3d:
11:f9:57:79:64:b4:9f:96:f6:0b:58:80:be:ce:bc:97:1c:b8:
5b:d4:19:86:c2:a1:9b:c7:39:20:9e:12:49:1d:ac:26:e4:80:
a5:b4:96:c6:53:f2:bb:c9:57:77:0d:72:4b:05:3a:45:2f:33:
e2:05:02:20:3a:03:ea:58:cf:bf:b2:2f:a7:10:34:8c:31:52:
a2:ee:c0:e7:c6:f4:fa:2d:62:f4:33:2b:9f:2b:bc:b4:f0:a9:
98:08:96:23:1a:6a:d8:23:c8:0d:a0:56:c6:90:c5:a8:0c:f7:
37:9f:b0:e9:47:74:8e:93:bc:4c:72:09:04:13:01:eb:27:fc:
d2:cf:27:20:b8:26:4e:01:99:81:ce:d0:03:61:38:d4:e1:28:
48:82:76:13:88:b7:0b:cc:92:99:34:70:f9:28:79:9e:d4:42:
ce:e0:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:58:43 2025 by rpki-client