Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca2a7226-f118-37af-ac57-8f7a53654a76.roa
File: ca2a7226-f118-37af-ac57-8f7a53654a76.roa (raw, json)
Hash identifier: 9ZgdqOUrxpbgIzxI0GeVZx7OQbEWUWrsrgzzikgEsU4=
Subject key identifier: A3:74:D0:A0:71:35:B0:2E:E5:F3:10:50:AC:65:72:6D:0D:23:10:8E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA7F4EA87D0ED1CC244200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca2a7226-f118-37af-ac57-8f7a53654a76.roa
Signing time: Thu 01 May 2025 17:19:51 +0000
ROA not before: Thu 01 May 2025 17:19:51 +0000
ROA not after: Wed 30 Jul 2025 17:19:51 +0000
asID: 22773
IP address blocks: 70.180.140.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:7f:4e:a8:7d:0e:d1:cc:24:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:51 2025 GMT
Not After : Jul 30 17:19:51 2025 GMT
Subject: CN=9c338abc-c9cd-4314-bfc3-cbdba55e408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:f4:7e:a6:a5:8a:53:97:e6:1a:f1:f9:81:
04:ba:22:9c:75:57:c9:c6:bc:a6:3d:23:59:2c:74:
0c:f6:b1:21:fd:a1:9d:93:4e:0c:85:8c:6c:94:a7:
dd:97:9b:6e:c1:83:d9:39:09:a5:6b:50:54:d8:00:
89:b2:2f:54:c4:3c:05:61:30:95:ba:ea:4c:0d:ed:
05:9f:2e:1d:3b:17:bf:c4:73:04:69:33:e7:9c:6a:
e1:79:5d:90:90:a7:7d:8c:b1:8d:b8:49:d5:e0:29:
f2:c1:9a:ae:a4:7f:ae:2c:2f:51:78:1f:c5:fa:4b:
ee:f3:b9:da:55:59:97:a6:62:79:b1:23:bc:52:a7:
2b:43:50:4b:f3:bd:a7:55:6a:ce:08:53:b4:3a:27:
a7:12:bb:6e:76:19:ec:1b:c4:46:46:3a:aa:4b:ff:
14:e2:22:ea:90:2f:f5:f5:a2:f1:8a:a3:0b:ff:f9:
2c:6f:d9:22:96:65:c9:c8:b3:fb:be:3f:26:c3:8a:
7b:5f:40:fe:c8:2f:aa:10:12:e6:df:c5:24:18:ad:
cb:20:16:b1:53:47:de:d0:22:4c:a1:43:ce:89:0e:
e8:61:c3:d4:a0:22:43:05:73:7b:cc:90:57:e9:c4:
cb:00:d5:29:00:d3:62:ca:cc:f5:07:ec:a5:c9:a3:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:D0:A0:71:35:B0:2E:E5:F3:10:50:AC:65:72:6D:0D:23:10:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca2a7226-f118-37af-ac57-8f7a53654a76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.180.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:55:77:4e:80:70:7b:dc:67:fe:f7:9a:6b:46:75:7c:09:52:
e9:92:af:2f:8c:9d:07:10:75:bd:03:b5:f1:ed:7c:12:7c:2d:
73:2a:03:a4:1e:32:10:86:0f:91:97:14:dc:d5:3d:e2:99:d1:
b9:43:dc:09:e1:9e:2c:09:91:87:5d:0d:f6:d6:18:d6:46:cd:
ae:a2:04:47:13:88:81:b1:47:db:67:99:62:ed:2b:88:a2:28:
30:9b:05:a0:3b:f9:0b:c4:31:c7:fb:9b:ba:6f:55:d3:c2:11:
c7:6b:0b:fa:51:dc:4b:88:64:48:68:88:14:34:d0:50:81:1d:
f9:df:0c:98:92:cd:9d:3f:60:f4:e0:08:3f:a7:14:2c:6c:66:
3e:ba:6b:0d:a9:85:ab:f4:c1:fc:96:94:61:2f:2d:67:2a:ed:
73:02:59:46:5b:c9:77:b4:b8:60:90:30:35:7e:1f:7b:96:aa:
cd:41:56:e6:ac:2d:ce:93:18:cf:6c:59:92:62:1c:95:43:68:
02:68:3f:2b:33:54:6f:b0:61:78:da:36:3f:7f:aa:89:dd:f0:
49:92:9f:88:06:6a:84:c8:e6:bc:e6:e8:24:24:d6:a9:6b:f3:
1f:56:82:14:cb:ff:32:13:6d:57:08:ff:e2:9e:55:60:2b:e4:
5c:23:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:09:13 2025 by rpki-client