Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce3d6ee8-7a7f-35e9-a007-a791f3a71a5c.roa
File: ce3d6ee8-7a7f-35e9-a007-a791f3a71a5c.roa (raw, json)
Hash identifier: 0RhZNJ3R/Vptk++1KsMyrt1XnlgZ+jjlHt09p98IAAU=
Subject key identifier: B7:F6:C1:F8:C0:1B:9F:A2:FC:B4:21:E2:20:DB:CF:E1:3F:43:7F:F7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA7EFA9CC11062CBD5BA40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce3d6ee8-7a7f-35e9-a007-a791f3a71a5c.roa
Signing time: Thu 01 May 2025 17:19:51 +0000
ROA not before: Thu 01 May 2025 17:19:51 +0000
ROA not after: Wed 30 Jul 2025 17:19:51 +0000
asID: 22773
IP address blocks: 70.180.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:7e:fa:9c:c1:10:62:cb:d5:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:51 2025 GMT
Not After : Jul 30 17:19:51 2025 GMT
Subject: CN=ff28dcf2-7aaf-4af5-ba57-550a4223588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:eb:f0:d1:be:d2:f2:25:06:9f:c3:7a:a5:
d3:29:f1:fa:f3:8a:3c:48:eb:5b:cf:05:f2:3d:03:
94:76:e5:92:41:98:77:f7:fc:59:e2:44:7f:34:51:
15:f0:38:ff:d1:0a:9b:3e:b5:68:6b:70:27:0f:0a:
4a:7d:c0:46:56:f4:8a:11:31:f9:91:13:8a:09:4e:
43:a6:13:9f:cc:1d:f8:81:21:17:64:0a:eb:ba:bc:
ac:7c:3f:c5:9e:79:31:1b:de:b0:56:09:13:03:de:
5f:19:42:8b:1b:5a:56:a4:e4:5d:6d:70:b4:eb:e0:
76:24:b2:5e:60:73:f8:0d:f0:bc:81:8c:a4:b3:34:
31:71:9c:05:1b:f0:db:52:88:6a:62:da:5a:ab:bf:
31:f2:e6:00:31:17:96:81:a1:d6:7f:e3:7a:1b:bc:
63:a3:ba:61:8b:01:8d:ed:e2:62:e4:21:4a:88:b5:
34:09:bc:07:e1:a9:e2:d3:cd:ef:e6:65:8f:97:df:
ea:56:c8:a4:54:cb:36:a0:17:09:d5:d1:94:16:68:
74:08:07:f1:76:64:68:98:e1:4b:e0:86:41:5f:48:
83:57:77:6f:cc:f8:d9:f8:67:18:ff:50:d9:72:87:
7e:2d:b9:51:5d:c7:4e:56:19:d7:fd:99:3d:14:26:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:C1:F8:C0:1B:9F:A2:FC:B4:21:E2:20:DB:CF:E1:3F:43:7F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce3d6ee8-7a7f-35e9-a007-a791f3a71a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.180.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:81:5f:1a:c6:a8:86:e8:41:a4:c3:a5:18:af:a6:5f:16:75:
f9:da:ca:df:60:66:e3:ed:ac:78:67:99:e4:a3:c8:e3:ed:4d:
57:84:a5:88:68:01:45:77:1c:87:7b:08:e9:35:3a:84:7d:91:
5a:80:9a:83:6f:cf:86:77:05:c4:84:06:c2:75:0c:76:dd:22:
84:9d:bc:58:9a:2c:11:e1:0f:56:2b:77:bb:f6:61:2f:3e:bc:
fc:29:47:78:2f:6f:40:4f:f9:93:96:31:3d:84:b1:ce:85:d8:
7e:75:fa:b9:0e:34:b5:46:1d:31:c2:3a:52:96:a8:ad:39:3a:
7f:98:2e:9f:5c:ec:66:90:e8:77:cb:67:22:e6:28:d7:9a:4c:
16:c4:75:6d:5c:a7:83:60:59:65:92:24:27:ca:31:50:07:d1:
0f:d7:31:87:75:c1:bf:2e:c1:46:5f:98:78:1d:b3:62:20:7e:
f0:85:1f:0d:ee:cd:cc:32:1a:a5:6e:b4:03:29:e1:c8:b0:30:
e5:c8:00:e1:d0:2b:59:2b:79:a7:57:5b:7f:20:3c:6d:68:2c:
e2:ed:54:8c:9d:46:06:a6:f3:a9:10:ca:9d:18:04:fb:be:cb:
76:52:02:8e:80:2a:1d:88:d3:cb:5b:f6:ed:65:33:c4:c8:6b:
1d:1d:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:11:03 2025 by rpki-client