Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d621b4b4-a40d-3534-8782-a3e6eaf1ac63.roa
File: d621b4b4-a40d-3534-8782-a3e6eaf1ac63.roa (raw, json)
Hash identifier: h8dgpo2V6Ihd9/3gDsZrZt34ek9FJgdpQWg5rgKMMDs=
Subject key identifier: 69:8D:8C:86:6A:29:9F:B0:90:67:A4:08:26:CC:80:B7:3B:6E:E8:0A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DFB5A2A6B5930B4154D980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d621b4b4-a40d-3534-8782-a3e6eaf1ac63.roa
Signing time: Thu 01 May 2025 16:25:53 +0000
ROA not before: Thu 01 May 2025 16:25:53 +0000
ROA not after: Wed 30 Jul 2025 16:25:53 +0000
asID: 22773
IP address blocks: 72.201.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:b5:a2:a6:b5:93:0b:41:54:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:25:53 2025 GMT
Not After : Jul 30 16:25:53 2025 GMT
Subject: CN=4951ca7a-407f-406f-8e50-692e6de3a66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:9f:eb:0a:20:df:94:d8:3b:47:df:fc:fe:
0b:d8:42:9f:40:0b:7c:0b:55:2f:09:91:8a:bb:2a:
cc:22:1a:1b:e5:05:e0:e9:38:67:e5:44:68:64:fa:
9d:8f:af:aa:2e:0c:99:0f:cd:9f:e8:fc:7f:fb:c7:
6b:4c:35:9f:96:9b:2e:9f:6b:f0:dd:d5:27:1c:c6:
3e:cb:a3:83:b8:71:18:6b:99:9f:3c:8f:8a:40:f9:
1b:3e:59:7f:13:7c:66:27:77:b8:06:62:56:15:7a:
e9:b5:0e:72:76:cf:c2:71:80:f0:6e:ce:25:40:dc:
e1:32:3a:7a:df:19:6f:e5:4e:6f:99:f5:a3:e6:84:
d8:6c:a8:33:65:ca:f3:18:33:5a:12:98:1e:78:81:
b1:4a:05:9a:93:69:60:a2:13:55:71:55:c4:a7:46:
73:85:07:f9:5c:07:da:d7:67:53:87:46:fb:53:d3:
ad:a4:07:0f:fe:de:86:af:91:84:7f:30:e2:73:86:
7a:cc:e6:eb:ee:a8:3b:fc:a0:ff:a1:f7:62:86:45:
53:24:13:c6:b3:a0:2d:5b:88:7f:ac:98:95:e4:2f:
90:1a:8b:dc:6e:17:2e:86:0c:fd:ac:82:3c:bd:f8:
85:41:39:a7:13:d4:8a:0d:3c:cc:85:dc:67:a4:57:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:8C:86:6A:29:9F:B0:90:67:A4:08:26:CC:80:B7:3B:6E:E8:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d621b4b4-a40d-3534-8782-a3e6eaf1ac63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.201.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:79:26:4d:03:2d:a1:d7:b6:a9:0e:40:62:15:48:0a:82:34:
fc:a0:0b:9c:49:5a:ec:60:32:94:f3:f2:12:8b:a9:5d:a1:c8:
30:77:fa:29:04:39:bc:cd:16:82:de:8b:b3:c8:47:f4:b3:96:
ac:10:c8:bf:1c:c2:b8:c7:10:09:d6:84:af:f4:ad:8e:cb:c2:
3c:62:b8:05:60:0a:f3:0c:93:b4:ef:cb:ef:fa:63:73:5a:37:
9b:a6:7f:2b:12:d2:81:7c:14:64:aa:85:3a:d2:74:d8:13:2e:
3a:d5:56:3d:41:de:96:c8:b8:73:c6:a4:ab:03:11:e1:9a:98:
06:54:07:0a:b0:4b:06:2b:d7:44:1d:44:f6:2c:73:47:1a:3a:
28:fc:5c:a1:a0:cf:fa:57:35:ca:00:58:e4:02:aa:9c:bb:7f:
2a:d9:d9:9c:99:d3:70:c3:7d:77:d8:77:32:bd:1c:63:fd:83:
66:40:c5:95:90:d6:60:39:6e:0a:8b:c4:16:fb:c1:3e:c0:09:
b6:e2:28:8d:a0:f3:3c:77:0e:f3:33:54:4c:11:a1:98:5d:96:
9d:d9:8c:0a:d2:74:ce:56:43:24:75:6f:24:0f:13:3a:e8:19:
d7:09:d0:dc:5c:7b:f0:de:47:16:9a:e4:f8:0e:c2:20:8b:7e:
33:5a:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:12:08 2025 by rpki-client