Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cca1e8e3-4e36-3b19-bac2-e24ec948bdc2.roa
File: cca1e8e3-4e36-3b19-bac2-e24ec948bdc2.roa (raw, json)
Hash identifier: J3eiZBdTh1xXAFWqb+rYLDE+BaZDOIWeRzcFzqMogO8=
Subject key identifier: 88:BB:9B:3D:4E:34:D8:5A:55:A3:53:FE:8C:D0:B5:6E:6D:7A:C8:6C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FAA720DB8B1F84608BDCC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cca1e8e3-4e36-3b19-bac2-e24ec948bdc2.roa
Signing time: Thu 01 May 2025 17:20:10 +0000
ROA not before: Thu 01 May 2025 17:20:10 +0000
ROA not after: Wed 30 Jul 2025 17:20:10 +0000
asID: 22773
IP address blocks: 70.189.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:a7:20:db:8b:1f:84:60:8b:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:10 2025 GMT
Not After : Jul 30 17:20:10 2025 GMT
Subject: CN=cb6562d2-32de-4926-89d9-0e17bf0ce40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:52:3f:c1:0c:3b:cf:cc:e7:48:70:ae:14:
45:23:fe:04:60:ec:e0:ef:09:8f:f0:7b:c5:63:72:
5c:cb:5f:24:c9:ef:95:24:d7:ad:12:64:eb:34:37:
22:29:0d:4f:19:7a:ee:79:00:3a:dd:2f:7a:7c:69:
65:05:52:9c:56:7c:22:1d:67:c1:74:08:fe:fd:cb:
36:fd:99:a0:a8:e4:19:73:0a:dd:93:da:eb:1b:e8:
4f:83:dc:23:07:60:b3:94:27:44:1b:65:c9:30:67:
ab:1c:30:3e:c7:a4:41:5e:33:75:4b:63:50:a2:64:
d2:e1:77:49:b3:e1:44:15:9f:fc:fb:77:d5:1b:b9:
80:a3:30:a0:a0:99:25:93:a1:5c:7b:38:0c:b1:71:
57:53:62:5e:f7:3f:ee:a6:cc:7b:2b:f4:23:84:f8:
bc:33:3c:5b:de:38:cf:16:5e:e9:dd:5c:b5:1b:e7:
57:e3:44:4b:83:9d:98:90:55:71:01:cd:a9:d7:c7:
ce:f3:b8:28:33:59:ef:c2:e2:8c:58:ff:62:52:87:
3d:78:21:32:fe:ea:17:5d:67:6e:73:35:98:3f:50:
17:dc:74:8d:34:ae:7e:2e:9b:87:4e:6b:e9:27:95:
0a:e2:e8:b2:79:64:90:7d:a1:a6:73:9d:f7:6f:4c:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:9B:3D:4E:34:D8:5A:55:A3:53:FE:8C:D0:B5:6E:6D:7A:C8:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cca1e8e3-4e36-3b19-bac2-e24ec948bdc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.189.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:8e:d9:be:34:c2:da:41:fc:a2:a8:68:da:d8:5c:44:df:5b:
cb:a1:5d:49:85:83:24:ac:63:7a:bb:7e:4a:43:4d:db:d3:44:
81:f9:67:60:81:4c:1f:38:e5:2d:8b:1e:a1:e5:8a:e4:e2:aa:
00:d5:b2:97:63:c7:44:c4:ff:4a:3e:ce:2b:c9:40:8c:1f:fa:
c1:b9:7f:7e:1f:0e:e1:19:24:7e:77:41:96:3e:08:b1:fa:06:
26:70:90:dc:54:d2:44:d5:90:0a:66:9e:e7:df:11:20:4e:d0:
4d:4f:e2:77:5c:6b:af:2a:67:09:bd:da:63:9a:1f:7f:3a:93:
89:55:c0:e2:d0:1a:1a:8b:b6:98:fe:b0:62:68:91:31:ae:df:
83:e0:d2:81:85:69:5a:c4:d8:cc:31:07:3f:bf:de:d0:ce:00:
8a:71:f3:c7:b3:68:29:1b:5d:db:c0:13:29:6b:fc:a5:c9:20:
34:84:62:3d:a4:ce:36:7a:90:a3:67:e5:84:e1:d9:c8:65:a3:
11:2f:76:5a:0b:f5:99:0b:47:8a:5d:01:53:82:0f:76:3b:be:
8b:eb:33:1e:69:84:a5:76:7c:51:ff:ac:d4:dd:b2:21:1d:7d:
b0:2a:b3:3b:b6:28:28:bf:81:7c:05:b4:b2:df:45:49:19:ae:
5f:1d:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:12:35 2025 by rpki-client