Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb895b23-1af8-34b5-9f59-30a73676411e.roa
File: cb895b23-1af8-34b5-9f59-30a73676411e.roa (raw, json)
Hash identifier: 8ga601B39uWylklilIM4FMvnieiN5DPIEal5qAneueE=
Subject key identifier: 63:A2:42:48:26:64:12:4E:BC:C1:49:0B:29:0E:73:64:5C:F2:67:06
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FAEF8A8AD522CE75619D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb895b23-1af8-34b5-9f59-30a73676411e.roa
Signing time: Thu 01 May 2025 17:20:44 +0000
ROA not before: Thu 01 May 2025 17:20:44 +0000
ROA not after: Wed 30 Jul 2025 17:20:44 +0000
asID: 22773
IP address blocks: 72.203.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:ef:8a:8a:d5:22:ce:75:61:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:44 2025 GMT
Not After : Jul 30 17:20:44 2025 GMT
Subject: CN=2729dec7-bb5c-4a6c-b222-2a4bc3691f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:64:f1:00:c7:4d:a5:89:fa:24:c2:f6:00:
59:a3:21:b0:27:94:db:bf:e5:1c:f4:d4:09:ca:f2:
69:2f:9a:55:87:f3:42:2e:ff:92:52:dd:5a:03:8d:
8f:44:ba:90:1b:da:1c:bf:f0:22:1b:cf:bf:72:89:
29:5f:8b:fc:1b:43:a4:58:de:00:7a:09:7a:b4:80:
14:8b:eb:c8:03:24:df:2b:16:69:0b:8a:2d:0f:db:
fe:6c:3c:97:7b:c5:c4:96:90:5a:5a:6d:da:cc:11:
09:f2:f9:f1:b9:d2:e4:bf:11:b6:53:67:e7:1f:ad:
68:9e:f4:d6:fc:07:6e:71:60:67:5a:a2:b5:eb:b6:
38:78:86:2c:d3:f6:5e:4d:10:13:bd:33:f5:c6:84:
ed:58:9c:a6:51:9f:3a:6a:5f:01:cf:86:79:d5:ad:
fe:64:84:44:bd:8a:eb:f1:01:00:7c:21:eb:d8:8a:
c3:16:6c:cf:6f:c6:76:23:3a:40:9a:47:cb:0c:90:
96:a2:f4:2b:b5:55:cf:ac:32:01:65:8b:cf:a0:7f:
b5:47:cc:a8:54:0f:d5:1c:78:52:35:c7:58:99:43:
b6:5b:9d:48:cb:4d:ad:92:08:ba:59:bb:bc:df:d6:
45:a5:20:69:46:c7:c7:be:02:34:79:20:ad:30:a4:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A2:42:48:26:64:12:4E:BC:C1:49:0B:29:0E:73:64:5C:F2:67:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb895b23-1af8-34b5-9f59-30a73676411e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.203.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:18:fb:6e:b5:aa:43:65:30:bc:97:11:be:e5:4e:e9:93:a2:
6d:7b:67:f2:19:84:a4:fd:02:9e:64:a8:6c:2d:f8:d1:1d:b5:
ee:31:50:46:25:d0:8c:d5:71:ca:16:1b:f8:34:ed:a0:9c:86:
3c:cd:2d:bd:e5:c0:a4:69:13:24:9c:de:00:4f:2f:ae:02:60:
97:15:eb:42:51:3c:5b:41:4c:27:7d:69:c7:fb:7f:83:08:8b:
34:90:b3:bd:f1:01:e9:77:b3:bd:69:93:03:82:b8:54:4f:25:
14:df:5f:c7:30:d1:aa:17:25:84:6a:95:be:fb:89:b6:85:e2:
86:c8:f5:ee:ce:59:49:e2:c8:bc:f4:1c:27:2b:7f:15:f8:90:
fa:66:32:d9:e5:46:03:c3:12:3b:c8:7a:96:e3:f5:e1:33:4c:
e1:fb:75:a7:0c:5a:27:ed:07:05:dd:17:b4:2c:d0:3d:0a:8d:
3b:46:30:a6:91:ce:56:2f:80:f9:f1:57:45:fa:b4:ba:dc:29:
6c:73:91:cf:bf:9d:79:7e:16:73:9b:96:0c:22:02:87:a6:5e:
4a:ab:1f:6f:ba:a7:6a:75:c3:12:d9:37:5b:f7:06:f7:18:b0:
62:32:a0:57:05:3e:49:6b:e7:65:76:17:ba:48:49:47:15:e4:
c9:87:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:11:05 2025 by rpki-client