Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5262fd7-3ea2-39ba-9d8f-aa2e98bc2351.roa
File: b5262fd7-3ea2-39ba-9d8f-aa2e98bc2351.roa (raw, json)
Hash identifier: Y+/pOhs494EXJbKOxWVJKANWbUAlPVfDujixbOoz89Y=
Subject key identifier: A7:35:3C:D7:7C:BA:8F:0D:1A:29:CC:50:63:E1:D9:08:F7:FF:F7:E3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCC30FF6E00432BBB0F980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5262fd7-3ea2-39ba-9d8f-aa2e98bc2351.roa
Signing time: Thu 01 May 2025 16:19:57 +0000
ROA not before: Thu 01 May 2025 16:19:57 +0000
ROA not after: Wed 30 Jul 2025 16:19:57 +0000
asID: 22773
IP address blocks: 24.251.102.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:c3:0f:f6:e0:04:32:bb:b0:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:19:57 2025 GMT
Not After : Jul 30 16:19:57 2025 GMT
Subject: CN=94f1c353-2bb7-4018-8256-6da6488522ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:8b:3b:b2:88:8b:13:b4:11:d5:8a:9f:76:
5f:dd:73:e8:9c:f4:d7:e1:2b:5a:8d:0f:a5:03:af:
f5:4f:8a:55:ff:6d:42:0c:69:d3:a3:c0:95:db:95:
9b:d5:c2:f8:28:ac:63:66:f2:75:a8:aa:01:97:c5:
27:31:a9:d3:80:c7:95:55:94:c4:5b:27:be:1f:99:
d9:5c:8d:3e:d7:f6:7c:4d:db:cb:44:89:2a:a2:cc:
3f:90:35:fa:16:ee:52:c8:dd:c8:77:b2:df:9f:6c:
7b:77:ef:5f:c0:75:93:32:73:12:00:31:63:a8:2a:
73:14:67:dc:e8:60:f4:df:2e:af:58:ea:d2:41:e4:
a5:c9:68:7b:73:6a:87:21:34:7e:5e:d0:ed:dc:e6:
24:04:87:01:71:82:4f:ae:ae:c6:4e:7c:13:0d:08:
d5:9d:de:a7:26:2e:07:13:9d:3a:ff:b8:dd:4c:b0:
cb:ce:cc:dd:ca:a3:ad:b4:06:a3:3e:fc:3a:19:c7:
c5:31:aa:3f:94:d2:ce:bb:b9:55:54:37:ed:14:01:
3a:20:ce:97:fe:ef:86:57:56:f0:46:d4:33:08:c0:
81:77:71:9f:38:06:df:19:c2:01:20:fb:37:2e:bb:
87:8d:ff:13:84:15:f8:48:26:d1:3b:36:fb:82:29:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:3C:D7:7C:BA:8F:0D:1A:29:CC:50:63:E1:D9:08:F7:FF:F7:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5262fd7-3ea2-39ba-9d8f-aa2e98bc2351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:06:fe:f4:9d:8f:a5:ca:82:29:a8:55:f9:00:c8:c9:3c:0d:
34:40:12:35:e0:09:bb:62:32:cf:36:fb:7e:c1:b8:5c:dc:3c:
5f:94:84:86:6a:25:fe:9e:dc:30:29:50:ba:76:5a:44:83:cb:
50:5f:1a:6b:c6:17:05:06:41:9b:fc:fe:f6:6a:5b:e7:f6:8b:
2f:db:83:05:4b:3c:49:93:71:66:ec:42:e0:59:52:e1:60:28:
ca:9a:4c:e5:d4:2c:69:4c:3f:6d:90:ea:11:2f:1f:fc:4b:1d:
46:b4:9c:7c:34:66:96:14:c8:3c:85:71:79:d6:d7:51:9e:17:
be:ce:66:81:ed:c8:85:48:26:64:2b:09:13:aa:f3:1c:54:9a:
1e:86:99:ac:8c:99:f2:d0:e5:63:88:ad:0d:22:bb:45:64:d8:
a2:59:9d:f6:0d:45:1e:fd:ae:02:dd:3c:b9:9d:39:1d:c1:22:
6a:8b:0f:3a:fa:09:12:7a:93:74:5d:e3:b6:2e:a1:61:87:fd:
96:eb:50:49:05:6b:95:b0:91:1f:4a:12:c6:ed:6c:d8:0f:1d:
c8:cc:62:e5:7d:4c:94:40:c9:a9:a9:f1:2f:e5:5c:96:bf:74:
86:44:3c:3f:f0:43:a6:d5:d0:0f:16:82:24:57:a1:61:39:70:
0f:95:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:24:34 2025 by rpki-client