Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b274424a-5cc9-39b8-860a-2c9f187db458.roa
File: b274424a-5cc9-39b8-860a-2c9f187db458.roa (raw, json)
Hash identifier: 5OIuGQtLj4ZzWy8sD+bo6vqTzzVNpTigLKbBR/6pfsI=
Subject key identifier: FB:D1:BB:04:B6:A0:1B:3A:70:24:7D:79:DE:B5:35:DF:C1:FC:35:FA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEAD7B515B69E49E2E0540
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b274424a-5cc9-39b8-860a-2c9f187db458.roa
Signing time: Thu 01 May 2025 16:23:48 +0000
ROA not before: Thu 01 May 2025 16:23:48 +0000
ROA not after: Wed 30 Jul 2025 16:23:48 +0000
asID: 22773
IP address blocks: 70.171.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:ad:7b:51:5b:69:e4:9e:2e:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:48 2025 GMT
Not After : Jul 30 16:23:48 2025 GMT
Subject: CN=bdc58097-a5ed-4c48-93a4-6667ae3b6773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:b5:bf:96:3a:34:ae:fd:c4:c1:e6:d6:c1:
d4:8f:fd:6f:c2:d2:22:1f:42:d6:63:9d:42:50:58:
9b:f8:21:20:2b:54:e5:76:5d:71:26:da:2c:cb:5a:
87:2b:bf:91:f4:11:06:45:d7:de:be:09:f0:90:f6:
23:49:94:91:6f:b7:0a:ce:b5:da:16:e6:3d:f4:e8:
b5:f4:1d:a4:34:03:0c:fd:96:02:18:43:c2:02:2c:
12:cc:03:3f:9e:36:f6:63:98:a2:9d:24:c9:07:a6:
02:52:1b:04:14:0f:3e:2e:46:22:40:d7:a1:16:6c:
42:ae:f5:4b:71:6c:ee:33:ee:94:21:db:69:f9:ac:
92:0f:90:ca:63:5c:18:49:f3:73:f4:b4:34:d7:e0:
fd:9e:78:7c:c4:c9:09:1c:c6:55:09:63:3c:66:46:
21:85:9d:2e:9b:d0:8f:35:00:14:4a:ac:90:28:aa:
39:95:fe:63:16:19:77:6c:ef:2d:73:c3:66:e1:f9:
e6:9b:f3:11:25:81:6c:3b:42:eb:92:13:67:62:bd:
04:75:7d:c7:13:72:a5:6d:0d:7d:2a:44:69:92:4f:
37:2f:dd:ea:65:26:db:d0:49:85:a6:a7:20:6b:6c:
06:93:f1:66:7d:3b:20:d0:1d:68:67:3c:60:b1:89:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:BB:04:B6:A0:1B:3A:70:24:7D:79:DE:B5:35:DF:C1:FC:35:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b274424a-5cc9-39b8-860a-2c9f187db458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.171.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c8:27:34:36:33:fe:49:0a:be:08:be:ed:29:25:55:46:42:
30:2b:a2:24:d6:43:d0:f8:a8:c3:5b:62:f6:ce:41:3e:a5:25:
d7:0b:83:c2:be:1b:4a:75:d6:69:f3:48:f3:7f:b9:99:c4:e5:
ab:ea:a7:95:f8:1a:cf:2a:6b:d4:d1:98:4b:ce:85:6c:e7:ad:
2b:16:3a:55:55:0d:7d:83:f2:02:39:9b:82:ec:0f:d7:62:76:
6c:60:5a:a0:8c:7c:2d:2f:59:d2:ee:dd:c5:93:55:ad:d1:c8:
8c:19:6d:38:e5:d8:fe:3e:f9:3c:28:28:fd:83:ce:f5:7c:78:
5f:9a:f2:c2:f9:81:10:8e:74:6b:44:c7:6c:7a:7d:53:5a:4d:
31:b9:20:51:79:03:48:bc:54:5e:46:06:3c:d0:7c:cd:34:ee:
ca:80:00:d2:2f:bb:a6:b1:42:e9:39:ac:61:af:f4:66:a4:7b:
84:4a:1a:28:3d:d2:c1:cc:e0:17:fa:f6:0c:69:73:64:57:01:
d5:55:64:a0:b6:55:aa:9a:5f:7b:f8:6f:8c:5e:e7:78:35:09:
24:e9:d0:96:24:8e:e0:53:70:b7:1c:56:92:ba:23:5d:5a:87:
d4:8e:ab:f9:7e:59:67:fa:12:59:4e:86:de:5a:c2:15:b5:33:
14:bb:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:49:17 2025 by rpki-client