Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a57f09c0-2d19-3d8a-9171-11aa99cf8b11.roa
File: a57f09c0-2d19-3d8a-9171-11aa99cf8b11.roa (raw, json)
Hash identifier: kbtvvAl4J3Q64S+z4vPirmtTQRkyoQ/cAjX0OHcV8qs=
Subject key identifier: F2:D7:6C:BA:AA:16:03:61:6B:FF:FA:16:4A:FA:37:15:3B:10:6B:54
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FAAE89ADCE9523F136CD00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a57f09c0-2d19-3d8a-9171-11aa99cf8b11.roa
Signing time: Thu 01 May 2025 17:20:14 +0000
ROA not before: Thu 01 May 2025 17:20:14 +0000
ROA not after: Wed 30 Jul 2025 17:20:14 +0000
asID: 22773
IP address blocks: 70.191.2.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:ae:89:ad:ce:95:23:f1:36:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:14 2025 GMT
Not After : Jul 30 17:20:14 2025 GMT
Subject: CN=c447110c-5120-4741-af3d-8250ce6bb931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:90:df:60:b7:5d:cb:42:b7:56:f3:77:88:
07:5c:7d:1b:ca:28:93:c0:33:8f:9d:8e:11:61:ac:
2a:93:c9:87:10:d2:a3:84:6d:ae:c4:7a:2f:4f:c2:
22:36:31:ef:f0:1a:d4:8f:f1:13:9c:d3:9e:17:29:
8c:3e:be:c6:28:a4:53:88:3a:f6:c7:38:19:d9:0f:
13:d1:6f:cc:11:7e:6c:22:4b:88:5c:2a:61:7e:cc:
2a:d2:95:6e:96:ff:13:22:0a:f8:6f:c2:08:6d:27:
73:51:4b:f4:d3:85:70:fa:7f:7e:02:4f:e0:c6:b7:
76:83:00:45:2e:6b:4b:db:79:2b:1d:50:bf:eb:6b:
bd:38:a5:ac:08:92:9c:87:bf:57:8b:01:05:38:44:
4f:48:5c:35:98:07:da:f9:58:bd:73:f6:b6:95:99:
65:ba:7b:7a:22:23:ca:ad:50:48:09:e4:dc:21:9c:
47:88:b7:39:14:83:e7:2a:9e:9a:d0:c0:1d:99:85:
9a:95:1d:24:ae:87:74:e7:5f:20:20:05:79:56:1b:
c4:49:7c:ee:82:e0:80:d1:ff:45:85:0b:69:89:9c:
c0:d3:7f:07:c3:36:ac:d9:aa:17:77:11:9e:90:85:
34:8f:2e:07:7f:bd:ae:aa:7d:6d:db:cb:29:c2:be:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:6C:BA:AA:16:03:61:6B:FF:FA:16:4A:FA:37:15:3B:10:6B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a57f09c0-2d19-3d8a-9171-11aa99cf8b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.191.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ba:25:eb:c2:40:98:e9:ef:22:c2:7d:d7:28:44:61:73:62:
61:8e:f3:7c:64:c5:55:8b:b6:e6:31:3b:f4:05:45:ff:e7:fa:
08:62:cb:1e:ce:5f:2b:e0:a8:06:9e:f9:24:1b:3f:53:5a:b2:
57:ae:90:94:87:d9:48:42:7c:f4:e4:f8:ab:79:89:16:50:ae:
36:c5:57:f8:21:06:d3:e2:a6:c5:03:ab:d1:f0:7c:82:64:52:
8f:70:56:79:50:01:49:3e:e5:16:53:b8:70:46:70:0e:00:0c:
b7:61:34:2d:77:f3:b5:e2:7a:c1:01:1a:9d:69:34:40:4e:b1:
46:52:ed:a4:c0:98:f4:2d:67:4a:fd:47:2f:6f:f1:e4:6e:df:
d7:48:44:f7:0e:bf:cf:d8:32:b9:c1:fa:ff:ac:d2:14:9c:86:
57:91:03:60:23:ed:54:7a:11:9e:be:45:5f:24:a6:e1:ad:86:
bf:0e:e3:a1:49:e0:38:18:23:56:da:c1:71:e4:c0:04:df:ac:
b7:27:15:60:4b:c4:e4:45:3d:08:1f:46:a9:76:cd:59:7f:f0:
04:0d:09:e9:50:e2:e1:85:0c:a7:66:08:f4:70:0e:1c:49:2b:
bc:35:c0:3b:ef:fb:95:13:98:7f:4d:ed:84:cb:31:7d:d9:b3:
ae:43:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:38:20 2025 by rpki-client