Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afe03cb8-1158-3924-be43-834c43e1b1bd.roa
File: afe03cb8-1158-3924-be43-834c43e1b1bd.roa (raw, json)
Hash identifier: e2zRne5x0duZyDRp4C2ft07SSk8seYhU6sN+a1vJaLQ=
Subject key identifier: 20:DD:01:83:02:A3:0F:86:A7:AE:D1:71:45:F5:EE:0F:82:4A:F1:16
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0A62E9C9C53B009A8BB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afe03cb8-1158-3924-be43-834c43e1b1bd.roa
Signing time: Thu 01 May 2025 16:27:47 +0000
ROA not before: Thu 01 May 2025 16:27:47 +0000
ROA not after: Wed 30 Jul 2025 16:27:47 +0000
asID: 22773
IP address blocks: 72.221.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:a6:2e:9c:9c:53:b0:09:a8:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:47 2025 GMT
Not After : Jul 30 16:27:47 2025 GMT
Subject: CN=a0b94038-1c4c-4c36-9ba8-bc55e0f8d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:84:f7:84:75:8c:f1:53:ab:96:cb:16:12:
a1:a7:be:09:0b:3a:c2:c1:c2:46:0e:1b:99:72:85:
be:29:5c:1b:c9:52:b7:47:9c:cf:03:2f:93:ae:13:
16:ee:49:e9:a6:ff:31:f2:4e:40:3e:28:0d:15:21:
d4:64:44:11:52:90:2a:9e:cc:1a:8e:18:1d:b8:43:
da:09:d0:7e:f9:43:f4:70:bf:28:0d:32:6c:f7:fe:
3a:6e:d3:36:1f:14:e2:6c:e1:6c:fd:b1:7b:20:18:
06:d0:25:42:ac:59:24:69:de:6d:e8:f3:68:2f:d7:
ce:9b:80:2c:f6:cd:34:84:b7:09:5b:64:e5:07:e2:
2a:55:8d:15:68:a9:ed:17:af:e9:15:9f:37:a9:d5:
bf:64:d3:50:56:4b:a7:4e:c8:1e:c8:9c:52:8a:1c:
49:0f:cb:d6:ee:bb:67:80:86:64:93:28:f1:7e:22:
31:10:70:bc:46:60:78:8a:0b:e2:d7:c1:0d:68:67:
19:31:8e:2d:d8:0c:1c:c9:f0:7a:23:7d:5d:cc:be:
7c:db:1b:22:29:f7:8f:ce:33:26:81:2f:e1:61:ec:
08:d7:ef:53:5a:e6:dc:a6:8c:b6:2f:5e:a1:66:9c:
8a:50:d0:8d:cd:d9:4d:7f:49:36:8a:af:cd:ba:b7:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:01:83:02:A3:0F:86:A7:AE:D1:71:45:F5:EE:0F:82:4A:F1:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afe03cb8-1158-3924-be43-834c43e1b1bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.221.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:14:26:14:67:28:62:e8:d6:c8:98:7e:fe:90:2f:cc:89:01:
52:c1:6a:14:fc:73:91:be:d9:37:1c:a1:70:96:63:96:24:6a:
c6:7b:27:e0:31:db:29:af:be:9d:04:73:21:44:bb:c0:e4:ef:
55:ef:f5:12:b0:45:6d:b0:3e:5a:b2:44:a1:49:70:b0:7b:cd:
6c:a2:29:9e:2a:51:33:bf:5a:13:ed:86:55:d3:a0:41:3a:da:
bc:c6:7e:08:b4:41:2b:f4:e9:bf:4b:46:29:a9:99:b9:f8:19:
47:43:90:95:88:27:f6:1f:cf:c8:34:a2:d0:23:83:1f:05:2e:
b4:f2:e6:31:e9:7e:87:77:64:49:3f:be:9f:8a:f0:a3:bf:7e:
b6:05:1b:77:ee:e6:c8:b5:01:5b:9b:dd:0c:65:2c:80:1e:e0:
78:b4:65:65:cb:49:34:bb:77:89:a4:69:c0:fc:0d:0a:cb:ff:
de:ea:25:c2:72:b2:e3:a9:1a:0c:43:b8:00:17:e1:11:22:61:
15:7a:11:61:37:f9:4c:fb:69:1a:6e:b6:d9:27:bf:39:b1:74:
9e:d0:59:46:0a:38:56:05:b6:d8:d6:30:d9:9a:16:6f:65:f2:
d8:ab:5e:df:4d:f5:b2:34:16:fd:25:22:e2:95:a8:d0:75:b2:
27:96:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:55:56 2025 by rpki-client