Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee84ad5-e986-34cf-b31c-e792609347d0.roa
File: dee84ad5-e986-34cf-b31c-e792609347d0.roa (raw, json)
Hash identifier: xcl/mg66JEbhqcfuJezOhFH0A2dx5LvhyyT145WYQ64=
Subject key identifier: A0:18:4D:43:A6:D7:5A:66:FF:C1:2A:1E:38:17:CF:17:C6:90:BD:A8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA66C210E7495FF632D1C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee84ad5-e986-34cf-b31c-e792609347d0.roa
Signing time: Thu 01 May 2025 17:19:40 +0000
ROA not before: Thu 01 May 2025 17:19:40 +0000
ROA not after: Wed 30 Jul 2025 17:19:40 +0000
asID: 22773
IP address blocks: 70.173.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:66:c2:10:e7:49:5f:f6:32:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:40 2025 GMT
Not After : Jul 30 17:19:40 2025 GMT
Subject: CN=6d7d7b1f-e6a6-4370-a947-098f1a8aa215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:3d:b2:32:34:c0:94:be:b2:fe:51:38:27:
58:fb:4a:88:6a:f8:43:d7:17:25:9a:38:29:0b:bf:
ae:be:58:9f:3f:b6:7a:13:77:80:ec:20:82:c1:f7:
28:3f:c4:71:cf:17:30:71:f8:45:e6:b0:80:ce:bd:
06:8b:32:b3:c1:5a:23:16:d8:b6:90:53:d1:77:2c:
b2:3e:f7:6d:c5:75:8b:68:45:2a:81:4a:14:bf:0f:
37:13:ef:3a:30:16:53:c9:53:09:de:39:4c:36:37:
24:10:ad:73:f8:e0:cc:64:8c:55:d2:aa:0a:25:bd:
4e:07:16:c1:59:eb:bd:ff:e4:6a:73:af:45:1b:98:
32:2c:7d:07:00:0f:38:53:0f:a9:31:fd:6e:9d:b4:
d3:53:eb:4f:26:72:4e:a2:08:51:dc:04:e6:93:4e:
e3:32:d0:60:ef:bc:e0:2e:f7:e2:f1:2a:5d:30:b3:
38:b0:4e:e6:0e:5c:fb:82:ac:b9:ef:39:c4:b2:7a:
43:4e:be:c6:b3:61:61:b7:7e:67:d4:2a:99:be:13:
50:a0:5e:7c:a9:6f:b5:89:96:6c:17:3c:a9:89:55:
3c:74:9d:41:07:b9:60:85:68:54:a4:e6:f2:51:f6:
d2:0a:dd:09:52:d8:6c:4b:e2:79:d8:a3:90:33:dc:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:4D:43:A6:D7:5A:66:FF:C1:2A:1E:38:17:CF:17:C6:90:BD:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee84ad5-e986-34cf-b31c-e792609347d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.173.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4c:22:fb:7a:98:22:74:a3:ad:1f:6f:26:5e:8e:07:11:84:
09:89:29:37:24:d5:24:c4:87:ab:81:a5:be:d7:52:13:15:31:
14:27:85:36:a9:a2:4f:a5:8e:f4:a1:d3:c9:4f:11:42:6f:2d:
4b:41:0f:b9:c2:2b:1f:ed:10:64:ff:d2:99:d0:a5:90:63:3f:
62:e9:23:5f:08:5b:a3:16:e1:09:82:23:14:00:e4:86:57:20:
2e:22:e6:2c:4a:c9:c7:14:7c:6b:25:a5:8f:b3:cb:82:ee:44:
a1:29:f3:56:27:2d:d7:41:4a:3e:d8:65:73:07:c9:0b:72:cb:
63:5e:86:9c:3c:71:60:3c:a4:ff:c4:8d:16:1c:57:61:2c:5b:
a2:5e:7c:c5:ca:fa:8f:8b:91:05:12:ec:18:65:fd:a3:2a:17:
de:3b:ae:02:31:73:7c:17:c4:0f:52:c0:b6:f3:bb:6b:e7:85:
9e:79:de:e2:05:d5:8b:fd:66:9b:c0:d4:20:4d:57:9a:b6:97:
ea:e7:28:5f:74:41:f6:7c:a2:fa:5c:90:ad:17:69:1a:b6:ef:
0f:aa:68:6c:80:cb:e1:ac:6c:47:09:e7:c8:5d:5b:2c:31:a4:
f1:e7:3d:d2:45:c4:c0:ad:cc:78:83:91:d0:dc:97:0d:8c:24:
bf:5f:a0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:33:46 2025 by rpki-client