Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d50366fd-3761-32d8-9e26-8e8f6111492f.roa
File: d50366fd-3761-32d8-9e26-8e8f6111492f.roa (raw, json)
Hash identifier: K1zrikBLnqAhKshgVcMzECA1pbSrEP3xP+ZN+BDr9Hc=
Subject key identifier: 8D:6C:55:53:F7:16:4A:A1:7C:1C:57:12:EA:17:40:CF:42:3C:DC:2C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA5C51811057AABF45C2C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d50366fd-3761-32d8-9e26-8e8f6111492f.roa
Signing time: Thu 01 May 2025 17:19:35 +0000
ROA not before: Thu 01 May 2025 17:19:35 +0000
ROA not after: Wed 30 Jul 2025 17:19:35 +0000
asID: 22773
IP address blocks: 70.173.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:5c:51:81:10:57:aa:bf:45:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:35 2025 GMT
Not After : Jul 30 17:19:35 2025 GMT
Subject: CN=b386124a-4aa3-4756-99d4-900ace19186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:94:87:9d:e2:85:d0:6d:a1:f0:6c:ff:91:
bf:db:c4:2b:73:4a:08:79:a2:ad:30:0e:b4:a9:e4:
87:52:03:eb:9a:b4:4c:4e:0b:ef:e2:36:6d:03:1e:
ad:c9:22:0d:c4:14:62:5a:08:01:d4:3a:b0:b3:f3:
3e:4d:26:42:dd:53:20:ed:4c:85:3f:c1:2b:e8:97:
56:a8:4f:72:4c:80:a0:ae:22:b1:3d:05:a6:c3:88:
be:f7:35:a6:4f:17:13:90:61:a2:3f:db:0c:02:46:
e6:74:87:bc:09:ef:53:96:c4:b9:3c:97:27:91:39:
5a:44:dc:2c:02:b2:f9:84:99:03:d1:6f:41:00:88:
f8:1d:b1:22:b4:f2:c0:e7:9d:80:11:38:18:9a:5d:
48:57:ab:5a:8c:d9:45:ca:fe:1d:57:72:1e:f7:53:
ce:d0:95:c1:67:5c:c9:2c:fa:4a:94:5a:f6:cb:c1:
d9:9c:77:ee:b5:e9:c8:f0:3f:1c:fa:9d:2e:73:ab:
86:4f:45:f0:3d:68:56:30:28:eb:b2:7b:14:d3:f5:
38:a9:73:36:fe:97:e7:69:17:95:51:73:c6:47:a5:
08:0e:8b:5a:ca:24:5b:f4:f4:56:ed:06:25:ee:32:
8a:25:99:e3:04:9c:e1:04:3f:6b:f7:f1:a5:28:81:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:55:53:F7:16:4A:A1:7C:1C:57:12:EA:17:40:CF:42:3C:DC:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d50366fd-3761-32d8-9e26-8e8f6111492f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:8e:b5:c5:6d:b1:89:34:6d:49:a2:d0:a9:89:95:12:f3:49:
18:88:68:43:29:86:84:b8:1c:0c:3e:d6:a2:ac:ac:96:cb:ba:
9a:b9:ed:ae:61:b9:7d:c5:a0:ed:01:a1:ad:0b:f2:75:93:00:
78:e7:d3:9e:9b:81:8e:e0:78:f3:ab:b5:1d:14:0f:2b:c3:d3:
e6:21:63:fb:34:57:82:54:77:f6:09:7f:01:d3:93:12:85:44:
06:b1:71:80:01:bc:4c:7a:0d:be:0f:4c:25:a4:be:5a:56:7b:
af:6e:88:61:b6:cc:20:69:29:1a:31:68:1c:66:a2:9a:2c:4a:
f5:ee:c8:8e:1c:97:d7:61:a2:36:68:3b:03:f9:7c:e3:48:52:
40:ac:36:6b:ee:2a:10:27:c6:bb:8d:b1:9e:fe:96:73:87:80:
d2:5c:6e:52:d9:50:1b:a9:79:b1:5e:ef:20:b0:91:9d:63:94:
0f:4c:1f:37:8f:9f:c2:8f:e0:c2:eb:a6:95:ea:78:0c:39:a8:
5d:c1:d3:ee:e1:66:c7:e0:fb:3c:06:cb:58:ae:a5:de:9f:65:
fb:86:45:c2:10:1d:a9:f7:6c:e1:62:8b:8c:78:bf:a0:de:63:
94:de:50:35:2d:4e:8e:3f:0b:a7:12:b2:5e:3a:45:ca:17:a8:
a6:98:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:57:15 2025 by rpki-client