Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2cebf8f-1f62-3b0f-9646-d06afa2d3c5a.roa
File: c2cebf8f-1f62-3b0f-9646-d06afa2d3c5a.roa (raw, json)
Hash identifier: Xgkqsv4+E/ii+Ps4sf7/s/gckcvkLKq31tdZVXisn5Q=
Subject key identifier: F2:E3:3A:66:CE:B4:41:90:50:E3:01:13:BC:E5:49:EA:4F:BC:5C:4F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0D3180BBF9B65E4D0B380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2cebf8f-1f62-3b0f-9646-d06afa2d3c5a.roa
Signing time: Thu 01 May 2025 16:28:08 +0000
ROA not before: Thu 01 May 2025 16:28:08 +0000
ROA not after: Wed 30 Jul 2025 16:28:08 +0000
asID: 22773
IP address blocks: 72.223.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:d3:18:0b:bf:9b:65:e4:d0:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:08 2025 GMT
Not After : Jul 30 16:28:08 2025 GMT
Subject: CN=af19ba4c-5135-4433-b971-3a6dce16ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:87:4d:ef:2e:e1:db:24:ba:32:e2:8c:b7:
bc:c1:ad:81:bb:22:4a:34:5e:29:e7:41:1b:46:31:
7e:b9:5f:0d:d4:4e:22:8b:8e:f2:4f:09:45:fa:e5:
37:51:e0:eb:8d:99:5d:7b:a9:32:13:58:27:48:c4:
99:00:ce:00:5b:16:61:a6:1c:d8:26:27:73:21:5d:
0a:47:08:48:62:bf:50:70:63:82:5c:5b:99:df:8d:
9c:95:ff:f7:86:39:5c:ac:04:c9:0f:ce:82:26:01:
46:9b:9a:59:aa:4e:90:0f:2d:5d:ef:0f:71:dd:d2:
18:24:bd:d2:9d:54:38:1a:54:ee:46:c4:19:70:a6:
fc:05:40:bd:4c:dd:db:86:60:f4:34:16:9d:5b:bc:
f4:17:e3:ed:70:04:aa:54:13:0b:84:43:b8:c3:72:
fd:2a:0f:c4:bc:c3:e8:00:e5:68:75:9c:70:02:83:
62:13:c5:63:6b:0b:75:90:70:02:66:d0:87:25:b3:
63:2a:a7:bb:94:77:ac:4b:ba:3c:0b:8a:a8:89:d6:
32:38:fe:c2:93:34:24:7b:8d:4c:ad:43:68:6c:a7:
b8:d2:ac:86:08:b3:49:c3:0f:54:ee:a4:61:dd:8b:
a9:db:62:f6:bb:a7:a1:cf:a9:b0:d0:04:38:0a:8a:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:3A:66:CE:B4:41:90:50:E3:01:13:BC:E5:49:EA:4F:BC:5C:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2cebf8f-1f62-3b0f-9646-d06afa2d3c5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:32:11:7a:86:44:64:80:cf:bd:ae:f2:f1:07:7c:d6:da:cc:
c9:44:29:41:aa:7a:53:1e:3f:eb:e9:4e:af:ab:6b:33:9c:52:
88:96:f4:73:d9:af:30:0f:92:7c:d8:66:a1:6d:2a:61:1f:df:
03:ce:5b:18:70:1b:b6:ba:5b:0f:a6:e4:60:13:ad:b8:12:12:
32:a8:76:b1:56:37:2b:09:ae:59:25:45:b5:2a:c9:ff:ce:6a:
dd:3e:29:58:0c:a5:35:20:03:03:a4:0a:1f:84:42:6d:19:14:
72:71:2c:89:4e:ad:6d:f9:60:4c:32:ec:3a:6d:33:cd:b8:cb:
9b:77:5a:82:22:ce:ab:71:94:a4:7b:b1:a0:09:da:37:9e:b7:
ea:a3:96:3d:14:6c:ee:e3:bb:e2:60:50:9d:ac:56:cd:00:25:
57:5b:2c:25:43:c2:5d:90:ca:59:bf:94:99:83:e6:49:86:19:
5f:6a:ab:16:8f:f6:ec:e8:57:33:a7:6d:de:c9:19:7c:2c:67:
fb:42:a9:4c:73:3f:52:32:96:1c:93:d7:ad:ee:ef:b0:23:81:
32:de:7b:c2:98:5a:b6:15:bc:6e:7f:21:8a:e5:5e:6f:d8:69:
02:b0:43:b6:55:5a:6d:3e:c0:59:58:bd:51:5a:7c:61:5c:16:
53:f3:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:21:00 2025 by rpki-client