Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bfaf8873-4c52-3f63-9ffe-e6ebe44cdf87.roa
File: bfaf8873-4c52-3f63-9ffe-e6ebe44cdf87.roa (raw, json)
Hash identifier: h1IPeWury+L0Y8bEt0b+DH85d+oqjE46fk7CxzsxLhE=
Subject key identifier: BD:FB:91:7A:7A:8F:CC:9D:A9:B5:59:12:B0:C8:36:D5:3F:3C:B3:B3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E010FB3E84B935C73DC900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bfaf8873-4c52-3f63-9ffe-e6ebe44cdf87.roa
Signing time: Thu 01 May 2025 16:26:36 +0000
ROA not before: Thu 01 May 2025 16:26:36 +0000
ROA not after: Wed 30 Jul 2025 16:26:36 +0000
asID: 22773
IP address blocks: 72.208.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:10:fb:3e:84:b9:35:c7:3d:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:36 2025 GMT
Not After : Jul 30 16:26:36 2025 GMT
Subject: CN=89641a2e-c0fb-4dac-8668-b8fb4d31b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:ce:7d:37:0f:33:3e:aa:0b:e9:29:40:8f:
bb:01:01:b3:54:63:42:64:a3:2f:82:aa:46:a9:80:
ba:0e:b5:1f:30:6d:4d:2e:e9:e6:ce:ba:dc:38:a9:
1f:dd:00:b0:6f:eb:f2:2b:af:5b:54:ed:55:60:44:
28:0b:3e:70:88:d8:07:c2:35:35:74:a1:35:15:99:
85:74:2b:0e:4b:aa:5c:58:90:fe:87:9a:7f:c1:a1:
4f:54:e0:9b:ef:27:13:bb:12:76:a1:be:11:21:f9:
41:93:4e:94:5e:93:c0:4e:2c:8c:f3:06:f8:73:00:
b6:c2:93:3c:07:37:9b:90:1e:ef:0d:0c:e1:55:76:
9a:30:95:5c:7a:61:4b:5d:8c:f6:a8:17:5e:cd:7b:
52:73:5f:7c:80:32:70:60:9e:fa:5d:a7:6c:e5:37:
d6:61:22:28:02:6c:4e:39:d3:f8:e3:08:0a:66:4f:
16:10:f9:18:5f:0d:75:ce:10:6f:32:26:89:1a:5d:
b2:d0:69:23:b9:ed:8d:59:f9:5b:68:de:e6:05:d3:
fd:07:09:ea:91:80:c8:09:4c:5e:6c:8d:6a:40:14:
d0:dd:77:9e:c6:e9:81:26:2d:1c:18:cc:f9:12:d0:
19:b0:54:17:c1:da:6c:50:8a:44:2e:c2:0b:47:19:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:91:7A:7A:8F:CC:9D:A9:B5:59:12:B0:C8:36:D5:3F:3C:B3:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bfaf8873-4c52-3f63-9ffe-e6ebe44cdf87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:09:32:60:cb:76:e5:a3:57:97:8a:f9:46:0e:66:3c:ba:e2:
d7:13:67:94:1f:4a:5d:0a:d1:53:42:0e:1d:44:46:39:d5:67:
f2:e0:68:51:bf:ee:0e:85:05:45:2a:f9:68:85:c2:81:80:10:
fc:38:19:a3:56:f2:1a:fd:16:c1:1a:82:34:e5:fd:a2:82:34:
b8:6a:a1:b9:2a:59:ee:1f:fe:2e:c4:a9:ea:8b:7a:bd:08:99:
7d:37:72:bf:3e:c3:1c:40:33:5f:dd:50:d4:b6:d4:81:bb:66:
3d:d9:97:55:a7:2a:e3:e0:7f:28:da:33:1c:2b:65:25:f0:69:
0b:7f:23:80:a2:38:31:0b:91:d3:74:49:2b:42:eb:5a:80:e6:
ee:d9:30:2c:26:a1:d3:e2:e2:c5:57:ec:53:8c:f8:1b:dd:da:
8f:75:73:a9:68:3c:b1:2e:3a:e5:69:f0:da:25:c3:c0:ea:a2:
6b:25:d7:53:e7:78:3b:13:45:29:b1:69:a4:b0:c8:fe:f3:9d:
c8:3a:30:7a:92:4c:92:51:cc:45:a5:d1:b7:b7:20:a3:91:5e:
5a:c5:3d:60:c0:a2:7f:a0:da:88:e7:8c:6c:bf:3d:9c:a6:ea:
72:2d:0c:14:d8:ad:fc:19:2d:ac:e2:48:0e:c4:72:91:90:49:
eb:2d:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:41:46 2025 by rpki-client