Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfba6970-3d92-3aef-9af7-3abd042946b4.roa
File: cfba6970-3d92-3aef-9af7-3abd042946b4.roa (raw, json)
Hash identifier: PkLcxpsHYwWOHXfxArhy1Pr3XRSRtspI7KWwLRpn3Pc=
Subject key identifier: 0E:AC:3E:9A:A4:C3:C3:4C:34:FE:CB:71:CF:0E:33:2C:30:5B:13:BB
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0882FB88E65E001405410
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfba6970-3d92-3aef-9af7-3abd042946b4.roa
Signing time: Thu 01 May 2025 16:27:32 +0000
ROA not before: Thu 01 May 2025 16:27:32 +0000
ROA not after: Wed 30 Jul 2025 16:27:32 +0000
asID: 22773
IP address blocks: 72.217.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:88:2f:b8:8e:65:e0:01:40:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:32 2025 GMT
Not After : Jul 30 16:27:32 2025 GMT
Subject: CN=064145e9-c713-421f-97d9-6c7c8321900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:b0:32:2e:02:7e:e1:c5:49:67:cc:09:1f:
03:f0:ba:ff:2c:f2:0d:b6:83:f8:50:72:af:77:bf:
3d:ed:25:c1:88:9c:6b:b2:04:b4:fb:ff:ee:18:48:
4f:cb:ce:fc:27:be:8a:0c:23:4a:dd:c7:0c:6e:91:
06:72:0a:60:26:a5:37:88:30:f1:88:01:98:6c:9d:
63:2b:24:83:f2:c1:a8:73:67:80:23:86:64:76:4b:
8a:4e:00:12:34:7a:2c:63:6f:ba:5d:3a:81:c6:37:
80:63:f6:bc:58:ad:1c:06:9c:28:00:91:7a:ba:03:
e8:b3:d3:d0:0f:c0:82:6b:dc:a8:97:5f:3b:8d:ee:
ae:d9:69:e3:db:fc:09:a1:63:27:f9:08:07:69:95:
97:5e:12:38:c3:f7:d0:2d:34:42:e2:92:d1:3d:31:
b9:23:ff:e3:36:86:99:63:67:81:5d:48:c8:d9:8e:
59:b1:7a:56:e7:9e:29:be:24:52:d9:13:06:10:f8:
43:bf:eb:3a:62:e6:71:3c:c7:1b:c9:1b:11:42:58:
00:02:26:5f:fa:ca:af:30:64:49:51:a6:67:d4:8b:
03:1f:58:f1:43:d8:6e:cc:e8:be:88:2d:de:00:bc:
d5:f3:02:f4:ae:96:e0:60:cd:65:bd:8e:be:e0:1d:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:3E:9A:A4:C3:C3:4C:34:FE:CB:71:CF:0E:33:2C:30:5B:13:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfba6970-3d92-3aef-9af7-3abd042946b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.217.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:3f:cf:d1:24:e5:f2:50:d7:92:2e:b4:76:15:b0:58:58:92:
62:c4:57:18:7e:36:bf:20:71:b2:c4:5d:21:6b:49:8e:44:ba:
5b:51:5b:ae:ba:31:dd:4c:01:ed:6c:2c:b1:d0:4f:08:e6:78:
e9:8f:c5:6e:cf:f3:62:49:c1:3e:12:b5:7e:dd:1e:d3:e7:23:
e7:8e:c0:f5:d8:03:81:33:8f:83:a6:89:03:7e:24:ed:56:e0:
2f:9c:ad:62:a0:24:8a:9c:66:19:ab:70:5c:7f:a0:fd:4b:35:
f5:21:8a:00:19:ff:24:95:a1:d2:9f:dd:dd:3a:38:a9:a8:44:
d2:9a:fc:6c:6e:b9:be:f1:4c:af:7f:da:04:67:cd:39:c7:4a:
c7:ae:50:99:4f:4d:48:c3:68:52:3f:46:16:61:c4:e8:5f:6f:
7e:89:02:9f:65:10:a3:d1:20:65:70:91:3e:21:67:8b:b5:ea:
38:89:80:89:6a:2d:5c:3c:0c:1c:07:f3:f7:2d:87:66:1a:c3:
96:ba:7a:c5:eb:43:56:41:94:56:58:4e:13:25:1e:77:56:ba:
27:b7:b3:e3:3d:5e:63:88:d8:18:1c:ec:7b:9c:cf:a8:9d:a3:
44:1c:2c:92:a8:68:96:21:82:e5:52:df:d0:4b:38:d8:ef:cd:
ae:0e:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:17:41 2025 by rpki-client