Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d99370e5-d6fc-320f-a5df-204deea1e317.roa
File: d99370e5-d6fc-320f-a5df-204deea1e317.roa (raw, json)
Hash identifier: sVnpmKaxAXcblS1TfJDyVprx50cxMG1Gk1OspP8OKGM=
Subject key identifier: 55:BF:CE:A0:F1:52:60:25:7B:DE:8F:7E:41:7B:C0:1D:02:42:47:29
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA52B56FA15751C5B15A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d99370e5-d6fc-320f-a5df-204deea1e317.roa
Signing time: Thu 01 May 2025 17:19:30 +0000
ROA not before: Thu 01 May 2025 17:19:30 +0000
ROA not after: Wed 30 Jul 2025 17:19:30 +0000
asID: 22773
IP address blocks: 70.173.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:52:b5:6f:a1:57:51:c5:b1:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:30 2025 GMT
Not After : Jul 30 17:19:30 2025 GMT
Subject: CN=2bcf1679-8d32-4cf4-afc1-ced22313b10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:72:47:7c:cf:63:53:2f:10:4b:a4:31:dc:
76:29:15:8a:64:bf:59:78:d5:a1:6b:d4:2c:5f:1b:
15:2b:fd:cd:a8:6d:9f:ad:59:18:00:ed:b5:1a:4e:
a7:b2:20:ab:fc:ff:a7:cc:14:a0:f3:be:8b:64:c2:
aa:7a:4c:b1:e1:65:e2:25:9c:75:de:08:c9:17:c2:
ae:0d:8c:e5:25:47:95:83:db:ee:24:ef:fa:41:bf:
30:11:a5:ff:c1:97:54:e4:a6:92:39:c2:55:ee:40:
22:06:fd:b5:1d:df:95:bd:ed:e6:fd:db:fd:66:d3:
00:97:7d:09:72:71:2f:4b:84:ff:1a:c0:7b:ae:b2:
12:97:09:8f:29:41:87:d0:f7:c7:6a:58:23:ad:8f:
70:57:93:d9:d9:4f:a1:89:72:5e:e5:6b:17:fd:d1:
b4:0c:70:1d:d1:82:0f:98:d0:4e:9e:db:5f:74:c0:
e7:32:ee:59:1b:60:14:ed:c6:13:61:28:41:8d:71:
88:2a:bd:6d:3d:d4:5c:b6:fa:17:58:49:ca:8b:b8:
45:4d:cd:40:c0:f5:83:c9:26:60:9b:bb:af:47:be:
a5:13:8a:bb:a6:2f:51:50:c7:4a:ed:10:1b:60:53:
28:9c:a5:ee:a4:38:e2:16:43:29:ce:fe:4c:24:cb:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:CE:A0:F1:52:60:25:7B:DE:8F:7E:41:7B:C0:1D:02:42:47:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d99370e5-d6fc-320f-a5df-204deea1e317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:7f:85:40:9e:08:ff:7f:8e:d1:80:a9:a4:dc:94:88:81:c0:
20:c0:67:25:31:34:1b:ed:22:03:be:97:b0:f4:5f:96:9e:4e:
75:83:3f:5f:4f:6a:0e:ea:ac:99:ec:fb:53:18:c9:de:e9:fe:
2a:57:0b:21:66:ee:94:54:25:71:df:6d:79:0f:72:f4:9c:f1:
b2:dd:0d:80:2b:85:fb:7c:3c:7b:2b:6f:10:9b:cc:05:8c:b3:
de:18:da:b3:1a:b2:80:45:c0:29:ce:84:0b:a8:9f:3e:4b:e7:
2b:1b:70:82:bf:64:ed:82:79:61:50:b7:11:28:0f:32:f1:4a:
88:42:bd:e6:89:df:7f:b7:bd:c0:2a:3a:93:9a:4e:6f:1a:b0:
ee:13:7a:46:f7:d5:63:44:9d:91:7c:58:3e:2c:30:26:c4:98:
2e:db:f8:14:3f:d7:7e:46:46:df:79:c5:fb:57:0c:0b:0b:fb:
da:9c:da:e7:94:a9:74:c0:ef:44:de:7b:aa:c2:43:80:53:66:
e5:3f:7e:e7:f9:b2:e8:de:0c:5d:53:6c:78:5b:82:3a:16:80:
a2:73:a6:c0:53:23:a1:41:14:dd:b9:4d:0e:b7:20:76:a5:45:
bb:b4:51:4f:28:29:fd:72:24:18:4f:4b:a7:32:3b:da:01:43:
cd:84:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:31:42 2025 by rpki-client