Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9bceba7-9a2f-31b9-b4bf-546e9f6d7dc0.roa
File: a9bceba7-9a2f-31b9-b4bf-546e9f6d7dc0.roa (raw, json)
Hash identifier: EZMZfVr2MpweinxrPkd7XmARDyVnM46+3pPqOxUFBMA=
Subject key identifier: CD:DF:78:EC:FA:93:3C:63:CD:4F:16:F7:35:D6:23:24:42:BF:2E:AC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FAA8EAEDC2FAD8B1AA89C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9bceba7-9a2f-31b9-b4bf-546e9f6d7dc0.roa
Signing time: Thu 01 May 2025 17:20:11 +0000
ROA not before: Thu 01 May 2025 17:20:11 +0000
ROA not after: Wed 30 Jul 2025 17:20:11 +0000
asID: 22773
IP address blocks: 70.189.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:a8:ea:ed:c2:fa:d8:b1:aa:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:11 2025 GMT
Not After : Jul 30 17:20:11 2025 GMT
Subject: CN=498493e3-8693-4059-ac4c-1a7e62c69fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:21:9c:ee:b6:50:72:09:ab:4f:af:a0:6e:
42:50:72:f5:1f:f5:15:1d:23:84:f4:74:af:98:94:
33:99:e7:98:8c:3a:60:fc:62:5a:1a:01:a6:bf:6a:
e2:a9:d4:80:50:76:03:3f:48:2d:b2:d8:24:d1:81:
e0:8c:01:35:ff:af:87:00:ff:aa:71:5f:07:6f:e9:
38:60:1d:18:18:8d:95:21:31:13:4c:f1:64:ad:dc:
27:69:79:25:bd:28:f4:81:d8:1a:75:5a:42:52:9b:
8e:ca:f8:ae:43:13:3f:eb:51:34:24:65:16:0b:e3:
a3:1a:21:0a:37:cd:e9:62:f5:2e:3d:c4:18:09:91:
02:6c:23:08:14:0c:b6:4a:c0:1a:e1:d4:5a:cd:d7:
75:16:60:6d:12:24:70:3f:ac:cd:3d:a3:dc:31:63:
71:72:ed:ab:63:c6:94:a6:21:de:ab:f6:3a:dd:87:
12:27:b4:8c:ab:55:10:9d:e1:33:1a:1b:4a:8a:ae:
22:21:93:ac:98:9f:a7:bd:76:04:29:dd:47:0a:20:
57:d1:ee:9d:7f:cf:01:4d:f5:0a:32:00:b3:f9:2b:
78:07:b9:c8:b7:f3:e9:81:1b:c0:6c:0e:a2:ef:68:
8b:c7:4e:c0:44:ac:45:eb:fe:71:6d:05:60:e5:be:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:78:EC:FA:93:3C:63:CD:4F:16:F7:35:D6:23:24:42:BF:2E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9bceba7-9a2f-31b9-b4bf-546e9f6d7dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.189.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a0:4e:4a:57:b2:84:f6:9c:2d:48:f1:d3:4c:af:b7:4d:35:
76:ce:6d:1e:89:46:40:63:53:5a:08:c0:d0:4a:e1:00:8a:d4:
d3:33:b1:7a:2d:a7:24:69:0b:49:bc:02:2e:57:61:f5:e1:00:
9e:85:59:70:bb:4b:ea:a7:10:2a:95:75:d8:de:d4:d0:2e:e3:
8f:a7:c3:77:83:32:4d:d2:4b:80:d1:79:c2:50:64:df:f6:05:
ec:88:7a:aa:1a:6a:32:7c:2c:2b:04:ae:e4:c8:6d:c7:f8:38:
2d:88:dc:82:46:54:41:c5:54:95:4d:75:c9:d9:19:51:d9:87:
0d:ec:da:64:90:7f:6c:71:d8:d2:74:a5:67:d8:47:1d:58:8d:
d2:bc:3f:16:20:4a:99:f3:b4:c7:b0:bb:6b:1e:29:95:0a:c3:
f0:c1:c5:ac:6f:be:19:5f:56:75:29:3f:b3:44:ba:23:6b:e3:
3d:18:13:84:2e:1a:1a:c0:72:c3:96:1c:48:b9:2b:e4:14:17:
13:33:5b:82:15:fc:d1:cc:85:1a:ba:e2:80:26:78:19:bd:c3:
51:5b:d6:b9:f6:05:b8:6c:97:8b:ae:89:3b:70:c2:cf:05:52:
7c:21:81:89:ab:b4:14:e8:a3:f7:2f:ca:4e:8c:40:26:fc:9e:
7c:49:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:38:35 2025 by rpki-client