Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bfd2fd25-e17e-3d97-b72e-38575e2ea852.roa
File: bfd2fd25-e17e-3d97-b72e-38575e2ea852.roa (raw, json)
Hash identifier: t43/rZoaZ1WVnD7YSUsg2mvZ9bhliJGn9PzgsMX55H8=
Subject key identifier: 33:80:7E:C7:25:60:D2:72:BC:ED:EC:C3:A2:79:A8:BA:99:F5:20:5C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEF231659F25952D0211E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bfd2fd25-e17e-3d97-b72e-38575e2ea852.roa
Signing time: Thu 01 May 2025 16:24:21 +0000
ROA not before: Thu 01 May 2025 16:24:21 +0000
ROA not after: Wed 30 Jul 2025 16:24:21 +0000
asID: 22773
IP address blocks: 70.176.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:f2:31:65:9f:25:95:2d:02:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:24:21 2025 GMT
Not After : Jul 30 16:24:21 2025 GMT
Subject: CN=2be544ca-d614-40f2-b183-26fa87481054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0c:f0:4b:12:77:9f:28:95:ae:fe:37:2f:75:
71:d0:34:16:5f:66:aa:2a:a4:d8:1a:82:a2:59:8a:
21:55:26:e5:4b:49:64:d3:a7:60:12:49:e1:4e:eb:
27:3a:70:f3:76:63:c4:23:f2:a4:0c:51:4a:93:b4:
09:5a:a8:05:81:34:05:7e:14:86:c2:06:a1:7c:ed:
ce:18:38:01:08:9b:cd:bf:6b:a8:88:26:e2:5a:f3:
3e:e9:20:8c:75:a9:16:84:07:13:d6:aa:85:22:dd:
4c:ab:b2:da:d3:22:b8:2f:7a:91:e3:68:db:2f:59:
ed:aa:ed:5c:24:28:aa:20:fa:26:7a:1d:c7:5a:74:
87:c0:bb:d2:ce:6e:a7:4d:ab:cd:8c:8b:73:9c:55:
c5:b5:07:d5:e9:d9:39:a2:94:a3:57:86:66:11:e3:
22:42:40:f2:8e:c0:cf:a2:3b:ff:32:aa:db:c7:f6:
9b:33:4d:8d:69:15:d1:76:cf:45:10:75:bb:c4:4d:
4b:e7:b8:90:c4:94:f0:58:fd:0c:4c:b4:d4:ac:af:
9a:76:87:b0:c4:ab:07:e6:ee:32:39:fa:53:0b:f6:
46:b9:8c:0c:81:2c:20:a5:03:bf:0c:b0:91:05:54:
30:7e:01:f2:c7:8d:69:c7:87:0c:f5:1d:c6:66:ef:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:7E:C7:25:60:D2:72:BC:ED:EC:C3:A2:79:A8:BA:99:F5:20:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bfd2fd25-e17e-3d97-b72e-38575e2ea852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.176.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:be:7b:9f:79:c4:b6:90:ef:b0:54:9e:45:e6:8c:f6:57:b5:
3a:1b:63:81:a7:ca:4b:c1:26:e0:de:40:73:5c:4f:85:53:55:
5a:34:1b:d4:32:27:3f:a4:ce:0c:d8:37:14:e8:ab:ed:5b:73:
74:80:0e:36:f8:2d:bd:b5:39:68:3f:43:3d:60:f3:db:a4:83:
b9:26:f8:04:f6:9b:07:58:fe:1a:4f:47:77:0a:04:cb:43:5d:
19:0c:5d:45:0c:7f:af:a1:76:36:28:6b:67:69:3f:4f:d5:9d:
7a:b7:d8:b4:52:3e:d8:d5:9b:ea:e9:03:6f:6e:96:71:8a:f4:
bf:a5:f5:84:c8:a9:f2:b4:76:79:b9:52:eb:1e:1f:24:3a:72:
20:ea:bd:c5:5c:f4:52:cc:b8:dd:76:df:bc:33:0f:54:0b:c2:
87:ec:fa:dc:01:da:f6:1d:8a:2d:07:9d:59:d8:49:40:c2:3b:
74:86:0b:5e:07:aa:fa:20:76:5d:85:6f:3f:48:ac:a9:6d:c1:
d9:59:db:b6:f5:75:f0:8a:1c:16:2d:09:ce:87:fc:1c:9c:6b:
2a:9b:dd:7b:1d:14:08:94:cb:65:10:c5:3c:82:f1:c1:48:66:
cb:f7:3f:ca:c3:94:e2:9b:88:76:da:8e:c6:fd:a4:29:df:ab:
4d:53:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:58:17 2025 by rpki-client