Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d69d4964-9f79-335e-ac22-7ac7eeedc8d0.roa
File: d69d4964-9f79-335e-ac22-7ac7eeedc8d0.roa (raw, json)
Hash identifier: AMY4a+k94Ti5v80RiylceQ1HbftQgZs8yBuVsJBKeMg=
Subject key identifier: BB:9D:AC:37:0B:B5:0E:A0:F5:67:7D:0E:79:D5:98:16:7E:A1:7E:0B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E01B83AE68E6A6615A3600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d69d4964-9f79-335e-ac22-7ac7eeedc8d0.roa
Signing time: Thu 01 May 2025 16:26:41 +0000
ROA not before: Thu 01 May 2025 16:26:41 +0000
ROA not after: Wed 30 Jul 2025 16:26:41 +0000
asID: 22773
IP address blocks: 72.208.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:1b:83:ae:68:e6:a6:61:5a:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:41 2025 GMT
Not After : Jul 30 16:26:41 2025 GMT
Subject: CN=2ffd73bf-f7b3-471d-8386-d9fec69ebf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:c2:ed:fc:1d:b7:f3:62:02:d7:a1:02:6b:
67:c3:04:b1:c4:8c:e8:82:be:8c:64:a7:a8:51:28:
fa:ad:f5:98:2d:70:6b:f3:1c:fb:c6:0f:1d:ea:d8:
38:f4:98:02:30:0c:b8:b6:be:f7:bd:1a:3b:d0:49:
94:2b:b8:a1:cd:e7:ea:8b:ca:79:4b:f8:33:13:77:
5c:6c:93:2a:da:45:02:7a:ab:d8:1c:43:68:c2:9b:
b3:b6:c2:b4:10:16:ff:12:7c:57:04:12:f1:c9:2c:
58:36:90:90:da:47:e2:50:11:3d:59:e3:17:e1:0e:
46:c4:25:ad:53:db:7b:71:6a:ee:91:d5:1a:57:b3:
33:49:5a:de:e9:10:c1:32:8b:72:97:50:8e:08:c0:
d9:c6:96:5a:1b:ea:6f:90:8e:d5:04:cd:56:e5:53:
cd:fc:a9:a8:0d:a2:dc:09:e1:85:63:03:b2:41:a5:
5b:0e:7b:05:b7:0c:91:75:3a:8b:c7:ca:2a:9e:64:
46:1f:ae:41:13:97:cc:9b:d4:cd:48:8e:7c:a7:7e:
33:bf:bd:dd:96:31:f7:0f:14:74:88:09:16:d7:67:
ae:9a:e6:45:52:f1:2e:81:32:77:f6:71:ac:c1:c9:
f0:aa:03:cd:ac:81:29:52:fe:04:68:11:83:16:22:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:AC:37:0B:B5:0E:A0:F5:67:7D:0E:79:D5:98:16:7E:A1:7E:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d69d4964-9f79-335e-ac22-7ac7eeedc8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:67:69:b7:a6:a0:32:07:0e:02:0a:e6:a5:f5:79:9e:de:25:
ec:f3:b6:2a:57:de:c6:87:81:f5:25:4a:98:a3:a8:c4:63:2e:
29:4e:57:04:3f:72:2c:8d:92:0a:12:ee:7a:62:3d:14:70:10:
82:ea:d0:99:fb:c8:8e:dd:29:d6:fb:2c:c1:99:3a:20:01:1c:
9f:cd:0f:ac:97:c2:39:2d:c6:10:00:f7:14:96:84:7e:f4:10:
8d:49:40:77:28:78:39:f3:4f:4f:8b:f4:7f:00:87:da:78:dd:
ac:43:4d:c9:d1:d5:9d:ed:04:94:22:c0:2b:86:ad:6b:b2:9f:
f9:2a:05:5d:45:f1:cf:62:a5:67:c4:ac:32:6d:39:a4:82:66:
db:75:a1:7d:e8:62:cb:d4:a9:8f:23:97:dd:bc:5a:41:f8:64:
4f:98:4e:96:e0:a8:25:59:65:5e:a7:cb:3a:9a:d3:e8:28:b0:
8a:7a:2f:73:ca:f8:07:41:c3:2d:46:58:8f:38:93:6a:15:48:
91:bc:ae:ef:ca:86:c1:be:4f:b2:ec:cf:31:8f:58:8e:8f:28:
3c:cf:6d:fb:6b:e3:e8:ad:5d:01:c1:ed:96:fe:11:10:62:02:
c6:2e:3e:ed:b9:2d:0a:74:67:10:d1:e2:7f:16:09:22:73:7b:
f8:fa:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:39:32 2025 by rpki-client