Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d833c41a-18ce-357c-ac0f-d98c7bea0637.roa
File: d833c41a-18ce-357c-ac0f-d98c7bea0637.roa (raw, json)
Hash identifier: KRTJV5uA2W2PyaTyLq2b7B1S6OKMNnvA+VEhC+hqCTI=
Subject key identifier: 41:20:92:DF:7F:8B:40:A5:A5:2B:7C:80:55:9F:1F:AE:E0:3A:DB:80
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DFE7CB615265993E83E1C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d833c41a-18ce-357c-ac0f-d98c7bea0637.roa
Signing time: Thu 01 May 2025 16:26:17 +0000
ROA not before: Thu 01 May 2025 16:26:17 +0000
ROA not after: Wed 30 Jul 2025 16:26:17 +0000
asID: 22773
IP address blocks: 72.206.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:e7:cb:61:52:65:99:3e:83:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:17 2025 GMT
Not After : Jul 30 16:26:17 2025 GMT
Subject: CN=8c85bd97-1bf0-478a-95b4-fb87758169d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:18:1c:d8:bb:a9:7b:5b:95:17:f4:4c:0b:d2:
e0:4f:94:d1:9a:f4:bb:57:3d:f1:16:22:0b:d3:2d:
f7:a7:fc:8d:a5:7e:87:b7:41:df:4a:97:9d:37:b2:
da:2e:28:f8:fe:cd:27:95:45:c5:ff:b6:a6:23:fa:
65:c0:00:2b:41:4d:22:4c:60:1f:95:a3:09:a9:0b:
5a:3c:d0:87:c0:43:88:9d:fe:ac:0b:94:f6:85:f6:
56:4c:bb:8e:2d:46:4d:1c:08:93:d3:f9:cd:3e:49:
a5:41:5f:47:13:e9:59:82:55:6f:c4:ab:b1:47:93:
2e:12:f5:8b:e7:49:c7:55:5d:bf:a8:99:35:6b:f5:
fc:f9:ca:5e:1c:f0:bb:d9:07:98:f9:cb:07:86:0f:
34:ca:5f:b7:69:57:27:b0:72:60:3c:f8:2d:df:83:
a5:a2:89:55:7f:1b:cd:f9:60:93:fb:be:db:e1:19:
e1:71:9f:93:ff:bb:6a:0b:74:98:6b:b6:31:1c:e6:
e1:c6:e5:5a:32:c0:32:c3:97:36:08:eb:ff:5d:67:
b9:a6:ba:e7:39:80:dc:ec:17:3a:a7:66:e7:b0:42:
5e:9e:f0:d6:19:7a:3a:fc:16:bb:45:17:71:e3:a1:
32:0c:9d:09:7a:38:8b:da:be:33:f3:1e:b2:9b:f3:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:92:DF:7F:8B:40:A5:A5:2B:7C:80:55:9F:1F:AE:E0:3A:DB:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d833c41a-18ce-357c-ac0f-d98c7bea0637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.206.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b2:f1:53:61:b8:cf:84:b4:d1:a8:e5:9e:3c:8b:ee:7f:3d:
94:da:5c:4a:f6:b7:ae:07:6d:80:d4:b0:91:7e:14:86:c5:80:
1d:6a:ed:a9:3c:e0:3b:7c:5f:85:9c:ca:61:1e:06:e4:cb:40:
49:cb:da:08:80:4e:3b:b2:1a:f8:4c:9a:65:9e:e3:54:fd:e8:
e3:bc:2a:5c:58:c7:cd:f0:4a:1d:a2:03:77:8d:72:68:47:87:
03:b4:95:05:50:ae:f4:95:06:01:7b:26:14:72:25:92:ea:9f:
57:0d:90:2f:3f:2c:a4:5a:78:09:01:fd:22:cc:6d:ff:79:41:
b5:00:eb:f1:ec:0e:9d:0c:da:c4:17:67:0c:23:1a:10:6f:20:
19:3a:60:bf:47:fc:fe:9e:86:b6:7a:9c:bd:b0:f8:75:55:a2:
27:40:11:13:eb:93:62:52:92:ae:cf:7d:7f:f5:5d:bf:df:d8:
b8:ba:b2:fa:5c:d4:1e:a6:ca:85:01:62:2e:6a:1d:80:8f:ce:
a1:a3:d2:f3:67:b5:97:f8:1e:ba:54:93:54:6e:1f:91:ee:7b:
0e:09:b6:f2:9a:b5:af:a9:ba:6e:4d:05:c5:47:16:b7:65:11:
bb:1a:a8:df:67:bc:10:5a:61:4e:5d:66:2a:0e:13:59:77:08:
29:86:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:07:32 2025 by rpki-client