Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9a31e33-a191-3a19-a4e4-9581a46a9cc3.roa
File: b9a31e33-a191-3a19-a4e4-9581a46a9cc3.roa (raw, json)
Hash identifier: WCEELi6P628V024kJRqeqDG6vyUztK4fpm1OA75RgIg=
Subject key identifier: C7:42:35:8F:95:BC:FE:BD:71:71:92:1B:34:C0:3C:4D:11:A9:EC:1A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E078D46C05672D6FD9AE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9a31e33-a191-3a19-a4e4-9581a46a9cc3.roa
Signing time: Thu 01 May 2025 16:27:25 +0000
ROA not before: Thu 01 May 2025 16:27:25 +0000
ROA not after: Wed 30 Jul 2025 16:27:25 +0000
asID: 22773
IP address blocks: 72.216.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:78:d4:6c:05:67:2d:6f:d9:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:25 2025 GMT
Not After : Jul 30 16:27:25 2025 GMT
Subject: CN=5579e20a-2352-47a9-a8b2-57c68b82f55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:29:4c:75:6b:31:72:fd:05:9e:13:21:11:
1d:c6:95:94:69:b8:8f:ad:d7:62:66:f3:ad:5e:9a:
38:45:4b:31:8f:e6:32:86:c0:e5:bf:5b:66:bc:5c:
04:5b:cb:1f:f3:92:4e:2b:79:22:a8:3f:4a:78:db:
94:c5:51:18:bd:58:3c:2e:a0:ad:03:94:bb:82:bd:
92:4d:66:ad:7a:f1:dd:99:d7:6c:1e:3c:7f:d7:6d:
f7:9e:1b:8f:22:b2:46:7f:6f:d4:fd:cf:d2:c1:d2:
74:9b:52:c8:67:ec:96:62:0c:12:4a:3d:20:16:69:
39:71:06:ae:f7:c6:3c:0e:40:97:49:c6:e8:da:1c:
9f:7a:d5:79:ed:57:2e:52:76:5a:4d:39:02:b7:82:
2d:a3:d3:9a:c8:4d:89:15:52:74:ef:89:23:e3:43:
91:a2:75:7e:43:43:e8:be:16:f0:68:3d:56:5b:0b:
d4:82:bd:09:24:93:9e:aa:65:2f:7b:87:d1:9f:31:
e9:08:36:d8:77:73:d8:4b:f2:22:5d:54:09:30:a1:
03:12:87:06:73:78:46:84:53:84:4e:c4:62:98:19:
ca:4e:d0:40:de:6c:f7:17:cc:f8:92:0d:6f:2b:3f:
ec:76:f7:2f:b4:21:84:6d:00:3a:ca:9f:9c:44:97:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:35:8F:95:BC:FE:BD:71:71:92:1B:34:C0:3C:4D:11:A9:EC:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9a31e33-a191-3a19-a4e4-9581a46a9cc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.216.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:11:15:d9:6e:fd:fa:fa:ac:55:4d:10:a9:29:de:c7:82:a1:
2e:40:6d:b7:12:fe:9c:16:75:d2:5e:1d:19:7d:53:72:ac:95:
59:3d:63:fa:aa:8e:c4:e2:63:f2:c6:ae:72:79:27:09:b7:4e:
56:27:97:67:53:19:63:51:8d:60:49:7d:ae:3e:3b:e1:03:d7:
8a:4d:35:c8:b7:c7:84:22:e6:f5:a1:2a:b1:c0:2c:8a:c4:ee:
d5:29:e8:e0:da:13:66:85:94:61:a7:5d:b2:7f:fb:95:65:34:
47:e0:14:6f:1f:95:b3:96:48:6b:1f:67:88:27:a9:16:29:89:
c5:dc:c9:2e:8f:c0:4c:0f:21:03:47:3e:a1:8d:12:65:cd:d3:
42:f7:6a:3c:d8:44:3d:1d:16:c8:92:17:f6:0f:39:c7:0a:75:
9a:7e:cb:49:00:b4:7a:d1:83:8e:05:9e:4e:38:e0:70:ce:db:
da:51:6a:2d:25:9f:98:00:8e:29:f1:8f:6f:02:4d:bf:63:05:
d0:72:ce:23:4a:df:b9:a5:17:32:5d:5d:26:51:f3:eb:cf:42:
22:b3:89:38:13:db:04:18:5f:ef:6b:38:c8:71:3d:b5:89:5c:
6d:d8:ac:e1:ad:bb:cc:4a:37:e9:32:5c:8a:2d:26:e6:cd:e1:
ce:95:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:49:14 2025 by rpki-client