Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce22a915-1cb1-3061-a5a0-8f110e5ca138.roa
File: ce22a915-1cb1-3061-a5a0-8f110e5ca138.roa (raw, json)
Hash identifier: KgSE9gJelrcP1FlXJinjqcLqyNzULWAoLDxyEynHQLk=
Subject key identifier: B4:99:88:FB:2F:45:16:66:75:84:E6:20:61:2B:54:7D:0B:B7:1D:DD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2296A79E83962A9EE4300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce22a915-1cb1-3061-a5a0-8f110e5ca138.roa
Signing time: Thu 01 May 2025 16:30:49 +0000
ROA not before: Thu 01 May 2025 16:30:49 +0000
ROA not after: Wed 30 Jul 2025 16:30:49 +0000
asID: 22773
IP address blocks: 2001:578:8a4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 May 2025 21:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:29:6a:79:e8:39:62:a9:ee:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:30:49 2025 GMT
Not After : Jul 30 16:30:49 2025 GMT
Subject: CN=b67664ea-9b17-4172-a4ff-df5f62d9eec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:7d:8a:9b:7e:80:b6:28:00:66:ac:20:14:
2d:cc:25:35:62:d1:e6:cd:c7:30:38:35:8e:56:ad:
5f:59:76:29:37:55:7c:94:68:e2:06:90:a1:b0:45:
e4:5d:bc:5b:39:53:7b:cd:44:64:6e:51:41:9e:57:
a7:65:37:c2:68:4c:a7:f3:28:4e:9d:b0:91:6d:61:
2b:4a:79:78:32:0a:1d:65:b9:37:a6:88:69:35:33:
e9:de:fd:ea:73:29:f3:4a:58:b8:2a:e0:e2:5c:03:
a3:e8:e4:3c:06:22:e4:a9:7f:57:cd:c8:9a:6b:e3:
c3:04:e1:40:68:50:fb:bd:53:fa:75:c9:f9:0e:56:
eb:56:58:52:c3:35:97:63:4c:c6:00:c8:2c:f4:53:
03:28:e2:2e:e0:d2:8c:ea:49:aa:40:c8:53:65:11:
cc:cf:15:49:fe:8b:ce:13:11:54:a3:0f:49:5c:95:
ba:c8:ba:99:ae:05:de:e6:8e:56:99:6f:af:cb:74:
7c:81:45:fd:dd:bc:89:07:7e:ba:e5:f7:53:f0:f0:
a8:78:38:61:94:34:fa:9a:8b:da:11:5f:e2:b0:00:
68:57:a6:4c:56:94:26:fc:48:86:76:ad:c7:95:85:
70:5e:67:93:cc:32:a6:60:54:25:7c:97:a5:27:23:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:88:FB:2F:45:16:66:75:84:E6:20:61:2B:54:7D:0B:B7:1D:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce22a915-1cb1-3061-a5a0-8f110e5ca138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:578:8a4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:65:35:9d:a1:f9:f9:2a:af:ba:13:61:9a:18:60:18:de:6e:
69:77:bb:8b:90:0f:c8:88:c7:c6:61:85:fd:23:4b:0d:2b:cb:
c3:ca:2e:b0:86:f8:b3:fd:bc:eb:f2:4b:ac:2c:b3:9f:51:8b:
0b:5a:c2:93:8d:da:23:9c:3f:0f:82:e2:3b:53:fc:14:5a:ba:
7f:8c:86:f8:93:6b:57:c8:2b:ae:f4:6a:c8:a5:7a:9c:d3:db:
1e:f8:6e:3e:12:94:3f:53:27:3f:f4:fb:8c:ea:91:ac:9b:85:
62:c2:e7:f8:24:01:48:fe:25:5c:ff:ed:f9:df:3d:1e:2b:e9:
ec:32:03:ec:ee:34:c8:99:1a:cd:69:b4:1b:01:51:e0:24:7e:
52:47:8e:55:c3:6b:d4:f3:b2:ba:c0:24:40:68:03:0a:c6:32:
35:16:80:43:4a:0b:b9:cf:a0:2d:90:5e:b6:c9:89:82:48:04:
e9:ba:14:cb:cd:60:95:3d:39:65:44:7a:86:da:22:f0:7e:35:
8e:1a:16:c6:68:4d:17:e8:4e:51:08:5e:0d:3c:e1:ed:59:5c:
10:52:96:d5:84:aa:22:9e:62:37:2d:bc:3c:4f:48:63:75:19:
1b:7e:d7:f8:20:70:59:fb:f5:87:ea:0a:b7:27:94:d4:89:ae:
24:06:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:01:59 2025 by rpki-client