Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b859c15b-dd1f-3677-a220-3f376f19cd00.roa
File: b859c15b-dd1f-3677-a220-3f376f19cd00.roa (raw, json)
Hash identifier: 6xA6dC/bs7D0WPNTXHsSpUE+C3c+fp3byvkESrxsRC0=
Subject key identifier: 22:8E:0B:9D:25:EF:BD:44:34:30:52:94:A8:01:21:27:25:66:98:F1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E138C847CD2F55FDCE1980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b859c15b-dd1f-3677-a220-3f376f19cd00.roa
Signing time: Thu 01 May 2025 16:28:56 +0000
ROA not before: Thu 01 May 2025 16:28:56 +0000
ROA not after: Wed 30 Jul 2025 16:28:56 +0000
asID: 22773
IP address blocks: 98.167.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:38:c8:47:cd:2f:55:fd:ce:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:56 2025 GMT
Not After : Jul 30 16:28:56 2025 GMT
Subject: CN=41ec229c-4b0a-4afb-a190-be61acb6548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:4c:4d:2b:63:aa:2b:82:89:c0:c1:9d:da:
0d:cf:46:28:eb:84:c9:30:e2:1b:3e:a8:e5:a1:e9:
b8:a7:32:61:19:4e:ac:f7:a1:d3:41:8b:98:ed:25:
46:62:65:4d:fa:fc:45:1a:f0:33:fc:16:bb:e0:14:
60:18:8b:ab:63:98:87:c6:b4:16:80:e8:25:02:36:
2b:b9:30:6b:59:20:c5:71:ef:03:08:f3:60:3e:7b:
e1:f5:ca:47:98:8f:76:a1:60:12:e0:be:11:6e:c2:
fb:4f:e1:83:92:0c:1d:c1:7d:91:0d:88:04:fe:8e:
48:d6:9a:7a:72:b2:ac:58:25:da:10:45:4d:60:77:
50:75:cf:8f:f5:3d:9d:44:59:c5:d9:a3:8a:b4:90:
c1:64:26:0f:6e:e7:6d:24:ea:05:f5:cf:f9:46:f8:
3a:67:aa:bd:ef:c5:f5:7e:37:9f:51:40:b1:5d:49:
47:36:84:ce:8a:e1:3b:fe:01:a5:6e:ad:34:af:f0:
21:f4:d2:50:4e:2e:e8:90:98:1c:93:54:dd:ee:15:
f9:2d:38:81:2c:52:05:d9:49:14:7a:0c:cb:5a:aa:
10:ec:ad:51:b7:11:f0:dc:58:30:f9:59:75:05:f9:
81:ac:09:d2:ab:82:95:b6:b0:04:6f:1a:23:cd:0f:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:0B:9D:25:EF:BD:44:34:30:52:94:A8:01:21:27:25:66:98:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b859c15b-dd1f-3677-a220-3f376f19cd00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.167.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3f:82:10:4a:47:1f:75:73:4a:0a:0b:c6:4a:9f:bc:0f:01:
37:a6:d5:1f:51:44:41:8e:e7:9e:77:45:e1:c2:2d:f2:ee:4f:
e7:31:94:ba:2d:da:64:cc:56:61:15:05:e5:78:d7:5b:da:6f:
ff:31:8a:d9:eb:5c:df:1e:a5:da:d9:97:33:71:2a:66:6a:56:
ec:23:eb:94:a2:9c:eb:44:50:50:1c:4d:a2:63:86:04:7d:c6:
e6:be:80:b1:62:36:2b:84:53:da:1e:d0:90:37:da:fe:2e:99:
25:34:a3:79:74:98:0c:95:22:b9:c2:81:ca:5b:d1:6a:1e:d1:
1f:b6:f5:03:0f:78:d1:56:2c:46:5d:2b:67:b5:52:8b:f3:89:
28:3c:b8:ba:15:b0:87:0e:62:ee:55:ca:ea:9e:1b:4a:9f:48:
e8:33:d7:07:a7:eb:aa:55:3c:8c:f8:f0:53:a9:3c:ed:91:90:
24:1f:17:76:2c:3f:6c:73:5f:14:19:46:53:5a:13:22:bc:ea:
60:c4:1d:ea:13:9f:24:21:98:03:57:a4:d8:5a:28:c9:24:f5:
54:b2:c5:60:e1:9b:e7:71:c3:5c:fd:7a:65:4b:bf:64:2b:ce:
00:aa:43:c2:ec:77:89:62:2d:31:70:06:2e:4c:70:10:ca:17:
ec:61:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:01:14 2025 by rpki-client