Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5ad62c6-d3ac-3022-bcc3-21a9b9dffbf3.roa
File: d5ad62c6-d3ac-3022-bcc3-21a9b9dffbf3.roa (raw, json)
Hash identifier: N/HgZd/J/C7KnnkgTu0DmBrwGmFUi6GE5PoCZIDiVJM=
Subject key identifier: 95:29:6B:F8:2F:F4:3F:DC:96:FF:91:CE:DC:7F:D5:CF:9C:78:A4:B8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E072B5C72010A838B83280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5ad62c6-d3ac-3022-bcc3-21a9b9dffbf3.roa
Signing time: Thu 01 May 2025 16:27:22 +0000
ROA not before: Thu 01 May 2025 16:27:22 +0000
ROA not after: Wed 30 Jul 2025 16:27:22 +0000
asID: 22773
IP address blocks: 72.216.118.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:72:b5:c7:20:10:a8:38:b8:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:22 2025 GMT
Not After : Jul 30 16:27:22 2025 GMT
Subject: CN=3452ac06-b6ed-4ff9-9487-6cd76e2c1cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:11:f9:c0:00:d1:c4:79:82:74:fd:90:69:
04:a3:09:9e:a0:aa:6f:16:9a:01:a6:49:f1:1b:14:
93:e8:9e:4a:cc:b5:0c:d8:2c:a7:1b:50:2b:75:64:
fa:f0:3c:f7:9c:56:91:44:4f:61:30:d8:62:4a:51:
b3:3d:d0:16:0b:ef:9d:a4:9a:28:50:65:cb:a1:d1:
f9:16:02:e1:44:d3:f6:7f:c3:3b:50:63:91:81:1e:
5a:50:17:c1:01:15:39:96:60:a9:b3:e3:59:28:b8:
cb:8e:a3:7a:68:21:47:14:9d:54:4a:70:ed:84:08:
eb:4b:fd:ec:1f:cf:88:9b:76:20:70:34:7c:b3:79:
c1:b8:f7:88:22:61:4f:f0:6a:f1:4b:85:6f:b6:07:
00:07:2f:25:92:54:9b:29:fa:9d:eb:ba:39:8d:05:
64:11:d8:bf:b9:9f:5b:ee:2b:23:af:bd:ae:a4:20:
1b:b5:ca:5c:57:0b:07:95:ee:ec:a8:5f:65:5a:42:
bc:f2:33:c5:9e:eb:5a:06:14:1f:e8:02:26:b8:c7:
3d:47:8d:bf:c1:c1:01:dd:43:ef:c2:ae:2f:65:d9:
a7:62:52:57:78:fb:0a:ec:5d:1c:ce:bb:3c:a8:b8:
4c:0b:e3:6f:f5:84:6c:46:9f:62:29:69:9e:3e:98:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:29:6B:F8:2F:F4:3F:DC:96:FF:91:CE:DC:7F:D5:CF:9C:78:A4:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5ad62c6-d3ac-3022-bcc3-21a9b9dffbf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.216.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a4:ae:b7:4c:24:ee:ce:af:e7:66:df:fb:f0:fa:66:23:8c:
1a:ee:90:68:f9:7a:15:c9:67:4c:bc:16:62:f4:d7:40:29:78:
d6:da:e2:c6:9c:08:57:ee:c1:30:27:b0:43:d1:e6:7c:ee:cc:
b4:1a:1a:66:d9:0d:b4:12:bc:64:4e:c1:b3:44:93:e4:93:9a:
1a:88:9d:33:86:dd:9f:d2:b2:ac:30:9c:29:1c:53:84:c8:d1:
56:fe:53:e2:4a:a6:f9:f7:a6:96:b4:ec:76:79:50:f5:90:9a:
1c:18:96:0b:79:92:9f:2a:14:4e:28:76:e7:df:bc:75:fc:27:
3a:f2:98:6d:27:8b:dc:d2:0e:e9:34:91:95:45:03:50:2c:73:
cf:67:2e:73:94:68:37:ed:c1:01:6d:a0:09:ca:26:7f:cd:11:
0c:45:b1:77:47:bd:82:e7:5d:39:eb:83:fd:5b:e2:2a:6f:53:
db:bb:86:79:f2:d2:6a:ef:a1:cf:6f:73:e0:9f:ac:e7:8b:49:
8c:70:6a:51:26:19:c1:5f:55:e2:31:78:5a:0a:44:26:38:81:
08:eb:fc:04:4b:5c:d6:4d:5f:e3:18:9b:5f:c4:ef:d9:3d:3e:
f2:75:a1:bd:6f:cf:db:8c:cb:5e:c5:e8:d2:6b:27:a0:b0:73:
5a:96:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:26:49 2025 by rpki-client