Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cda039a8-8f37-3fb3-bc7d-b7959fc6ea0b.roa
File: cda039a8-8f37-3fb3-bc7d-b7959fc6ea0b.roa (raw, json)
Hash identifier: aG5fd1488JoIzigT4hXIlxX1X/9p6Fk8B1h98IkZczE=
Subject key identifier: D3:D0:C8:0A:1E:0E:FD:4A:4C:29:28:50:F2:AC:29:9D:A9:DD:C0:87
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DF105EE8EBBA7D206D0F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cda039a8-8f37-3fb3-bc7d-b7959fc6ea0b.roa
Signing time: Thu 01 May 2025 16:24:35 +0000
ROA not before: Thu 01 May 2025 16:24:35 +0000
ROA not after: Wed 30 Jul 2025 16:24:35 +0000
asID: 22773
IP address blocks: 70.176.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:10:5e:e8:eb:ba:7d:20:6d:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:24:35 2025 GMT
Not After : Jul 30 16:24:35 2025 GMT
Subject: CN=4158ae7b-f0ea-4125-9c5b-0fe0301718d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:35:2f:58:3b:17:4b:8d:37:da:11:35:d4:
e6:31:81:ba:04:34:ea:09:f6:81:2e:29:0d:f3:90:
54:6a:c8:b3:04:e5:bc:c8:94:be:63:41:ba:ce:a4:
83:eb:fb:14:b7:d4:c8:49:90:2e:2f:06:0a:7c:0f:
82:ae:66:df:20:1c:9c:e0:cd:27:04:5c:51:ee:63:
f5:3d:de:be:d0:f0:0f:4f:85:2e:03:0a:24:de:53:
78:03:c8:e2:40:20:ea:80:59:15:c1:5c:1c:3d:cd:
01:2a:e7:2f:50:97:10:99:3a:1c:11:c9:a5:15:e0:
7a:55:4f:55:3d:93:00:cf:f3:23:70:3f:6c:3c:95:
49:48:1a:5a:95:b8:15:57:de:a9:15:bd:c0:45:9b:
2d:cb:35:83:c5:15:4b:53:67:58:b7:95:31:91:36:
fc:17:b5:64:bc:fb:f1:81:a1:63:ec:d2:ac:c4:e1:
19:4e:8c:b3:43:13:81:ac:52:14:b5:b4:f6:6d:3a:
61:f8:e0:b8:97:d8:af:f9:78:15:9a:c5:94:f9:d2:
ba:9b:54:13:fb:88:e0:94:d0:0f:2a:13:1a:e9:ed:
ed:83:a7:b0:22:b6:ae:da:8b:90:47:ad:4e:b3:d9:
31:98:c6:0d:dd:7e:70:75:9e:0b:a2:69:b8:b1:ec:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:C8:0A:1E:0E:FD:4A:4C:29:28:50:F2:AC:29:9D:A9:DD:C0:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cda039a8-8f37-3fb3-bc7d-b7959fc6ea0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.176.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ec:05:7c:d7:b4:e6:7e:88:fd:16:2c:85:67:cf:92:08:76:
a7:24:cf:a3:67:41:1c:3e:a9:ba:d3:3e:78:55:09:3e:7a:ee:
cf:92:8b:1f:8a:76:6a:ed:cb:dc:51:43:6d:e1:d7:eb:fd:d7:
03:b1:f9:e3:d0:57:c4:4c:47:1c:b2:2b:08:d9:b1:fd:f3:08:
85:4d:48:36:8f:cb:a7:cd:49:0d:8c:16:bb:22:eb:de:b0:f5:
24:b8:1b:15:35:e7:7a:b5:8d:a8:2c:83:87:be:4d:8e:4b:d8:
b0:2e:a5:fe:c4:6b:70:7d:2b:82:5c:ae:45:ea:c4:a6:a6:82:
38:17:25:04:91:53:9b:46:9f:00:ff:12:41:67:0a:93:bb:f3:
16:74:bf:10:9d:19:54:bc:16:51:fe:4f:c9:46:5b:b9:77:3d:
43:e1:5c:37:f2:d3:a7:cc:17:99:a8:00:f5:49:11:ea:ef:f1:
52:7a:5c:71:b9:ad:38:d7:c9:be:d3:48:39:d4:5e:a7:b6:c8:
5f:52:99:44:c0:88:58:dc:c7:c5:0d:0f:5a:6c:5c:0b:48:d8:
99:cb:69:0e:80:30:41:6d:b2:5c:3c:9f:ec:de:f4:2d:8b:ae:
7f:8a:f8:29:71:82:66:24:0e:55:34:ef:b1:87:9a:2c:81:8a:
c7:74:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:25:53 2025 by rpki-client