Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b21739aa-80bc-3f48-94e1-7d67f3c1d20f.roa
File: b21739aa-80bc-3f48-94e1-7d67f3c1d20f.roa (raw, json)
Hash identifier: 2EunOfJPOzW+qVhVE1ZwQgwjo+inDBqXLX/JBKlVFsQ=
Subject key identifier: 0A:F1:40:F2:43:71:1A:FD:67:F6:CA:78:0E:75:11:09:76:AE:21:25
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0CD783B856637176D5B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b21739aa-80bc-3f48-94e1-7d67f3c1d20f.roa
Signing time: Thu 01 May 2025 16:28:05 +0000
ROA not before: Thu 01 May 2025 16:28:05 +0000
ROA not after: Wed 30 Jul 2025 16:28:05 +0000
asID: 22773
IP address blocks: 72.223.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:cd:78:3b:85:66:37:17:6d:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:05 2025 GMT
Not After : Jul 30 16:28:05 2025 GMT
Subject: CN=e7974f93-b431-4fba-8cbf-0c2050e6fd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:c2:45:c5:6d:cc:79:86:9b:c0:a4:72:c2:
bd:30:cc:17:d5:af:58:7d:61:d0:e5:95:72:2a:6d:
c4:bf:9f:1f:a2:8d:ab:e6:21:76:da:03:03:38:35:
5e:5e:64:0c:54:e2:f8:82:5a:6c:49:e7:ed:72:50:
32:e6:d4:a8:33:c4:4b:a8:16:d7:e1:db:00:7e:a1:
a4:5f:36:39:fa:61:76:eb:ba:7a:f7:54:29:ee:ad:
f7:b3:9f:a0:bc:2a:ac:22:3d:84:92:3a:7c:e4:51:
6c:7a:23:3b:65:d0:36:91:7a:3e:90:7e:b2:6f:04:
d7:16:57:a7:6a:e0:dd:f0:c7:d0:52:07:b5:91:bd:
07:42:90:9b:13:b9:92:7e:dc:11:e4:f6:ec:12:f4:
6a:c9:4e:f0:30:be:81:f1:b5:11:50:86:ed:53:c9:
40:d6:b5:2f:31:bf:85:61:bf:82:39:08:78:47:0b:
06:99:9f:da:ab:b1:64:11:9b:80:41:db:fa:9c:c9:
2e:5d:2d:1e:41:87:b1:38:e0:c1:1d:1a:f6:6a:7b:
8d:c4:b0:b2:0e:15:c2:63:a1:c7:42:5c:1e:6a:22:
94:f5:83:87:47:7e:03:fe:2f:89:80:1b:c7:9d:ff:
37:fc:f6:a8:ac:a8:08:1b:75:ef:3a:06:7f:0e:da:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:40:F2:43:71:1A:FD:67:F6:CA:78:0E:75:11:09:76:AE:21:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b21739aa-80bc-3f48-94e1-7d67f3c1d20f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ec:d3:a5:db:c0:a7:79:a3:ec:4f:0c:ac:24:2f:8d:e1:2f:
11:3d:62:ff:f6:36:c1:64:76:4c:49:13:47:f2:1a:bd:c4:76:
d8:0d:aa:e1:d8:c6:94:af:85:cf:94:f2:48:0c:b1:da:da:02:
d9:dc:d9:16:73:a2:c1:53:b6:b6:c7:1d:f2:a6:8e:93:d3:23:
e2:0d:16:f3:ed:c2:a4:9d:87:3c:d0:7b:1d:67:8e:49:bc:b8:
54:9e:eb:a3:04:ac:92:39:81:74:2f:09:8e:f3:bc:46:da:f0:
a6:80:22:dc:92:6c:84:4b:aa:d1:03:32:3a:30:77:ab:84:1d:
43:43:04:6c:a6:de:a3:a2:47:33:7f:2e:a9:d6:d1:b2:c4:9c:
81:f4:9f:4b:b2:9a:46:31:2b:b5:f5:6e:4b:9f:78:ee:c9:62:
c4:42:aa:68:95:3f:fb:c2:8c:e4:ae:e1:dd:d5:0d:91:03:1f:
ce:90:80:7a:b6:11:7f:c3:b0:07:89:54:f7:95:08:31:b4:67:
cf:a0:87:0b:d4:8b:c1:41:89:c8:68:71:ab:32:53:22:9c:7c:
5b:97:ce:a7:57:60:d4:5a:45:23:ad:69:34:23:fd:92:6c:13:
ba:e6:75:88:99:8f:95:6a:a0:1f:05:d7:3d:b3:96:4a:3d:b1:
0f:c8:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:10:04 2025 by rpki-client