Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe531de-d9d2-3d99-9dfe-1813ddc6cbd5.roa
File: cfe531de-d9d2-3d99-9dfe-1813ddc6cbd5.roa (raw, json)
Hash identifier: jJLteiBl0xM5SnRgJe4OfYJjbNz0b540+3vMb+sOngY=
Subject key identifier: 70:08:9B:B1:B6:E0:30:2A:49:99:EE:61:DC:D2:E9:4A:D4:D0:AF:C8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEF46BB6BF06D84CBB8D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe531de-d9d2-3d99-9dfe-1813ddc6cbd5.roa
Signing time: Thu 01 May 2025 16:24:22 +0000
ROA not before: Thu 01 May 2025 16:24:22 +0000
ROA not after: Wed 30 Jul 2025 16:24:22 +0000
asID: 22773
IP address blocks: 70.176.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:f4:6b:b6:bf:06:d8:4c:bb:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:24:22 2025 GMT
Not After : Jul 30 16:24:22 2025 GMT
Subject: CN=a0770fcb-0b6f-46a2-923d-0424d3c715b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:b0:8e:67:53:65:fc:a6:5e:b5:a4:f7:c1:
84:a3:fc:49:d2:52:80:a4:93:29:93:14:a3:ad:f4:
bb:cd:25:a3:c1:0b:5b:9f:63:93:dd:61:cb:73:5e:
cd:c9:2f:dd:43:e3:58:da:10:72:a0:54:40:91:d4:
bb:60:c9:6d:ed:23:02:25:da:1d:cc:b9:7e:33:31:
d6:f5:49:d7:5b:ef:1b:84:fb:09:74:22:30:4c:dc:
8d:1e:10:9d:3a:0a:42:db:2a:87:0e:b7:3e:d0:da:
9f:b4:48:65:50:d2:0a:3f:42:92:52:e7:d2:87:63:
3e:5f:c8:a5:e7:47:2e:56:a8:c1:d0:9d:8f:28:d6:
07:b4:ed:f6:0d:63:83:aa:20:58:84:3b:4d:6d:29:
19:42:4b:1c:ea:1a:02:48:dc:53:fb:a6:36:48:56:
fc:c5:d8:fb:24:aa:22:42:09:b1:be:98:bb:fd:48:
9b:2d:21:0e:a7:8c:42:a9:3b:8e:12:90:b3:27:98:
53:c9:9d:15:46:16:c7:5f:fa:f6:b8:15:60:6d:36:
c4:7c:89:85:33:a4:ca:7a:40:73:cc:be:aa:1f:09:
cc:48:f9:04:e1:18:12:8d:dc:55:23:05:27:85:2f:
50:19:af:d2:c5:eb:02:bd:a8:dc:10:7d:3a:4a:6a:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:9B:B1:B6:E0:30:2A:49:99:EE:61:DC:D2:E9:4A:D4:D0:AF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe531de-d9d2-3d99-9dfe-1813ddc6cbd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.176.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3c:f6:b7:ad:2b:1a:76:3d:63:2c:a8:21:72:3c:8f:2b:47:
a4:28:14:b3:b7:bd:61:dc:56:7a:cb:7d:20:80:9c:ad:55:ff:
47:ea:a4:b2:d8:78:73:41:ef:a7:c9:1f:88:1c:f7:dd:e3:bd:
53:fc:49:fe:5f:72:0a:55:36:cf:6c:58:74:5d:cf:9b:94:17:
51:b1:06:5b:d1:6a:9c:d2:eb:b0:a0:79:8a:f1:0a:6c:0b:12:
95:9a:a1:de:16:59:4c:6f:72:d5:8a:0f:a7:af:82:4a:0d:37:
99:95:7c:4b:18:3d:05:77:96:7b:96:91:0c:bf:b4:c0:93:dd:
93:ad:e5:f6:09:a4:6a:17:bf:9a:64:ba:c3:b4:15:6f:ae:dc:
5e:40:b8:ee:89:d5:48:34:42:de:f7:4a:93:12:2b:88:bc:56:
51:e0:35:2f:51:19:33:28:14:9e:ed:4f:ba:e0:e5:a1:e4:a6:
33:d1:78:03:a7:83:6f:d9:24:f2:b4:22:9f:7e:8a:9f:ef:0d:
f2:2b:34:e3:ea:0e:03:0d:7e:b7:20:13:57:9f:5f:6a:7f:a1:
d0:73:4d:e0:56:0e:84:24:7a:ee:c5:36:06:3f:57:b4:68:21:
5a:42:03:3b:8d:62:b5:e3:de:1c:eb:52:8e:17:c0:a4:be:9d:
57:39:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:05:44 2025 by rpki-client