Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e65dbe5c-0c2d-3b2b-a4f8-62a1d66b8640.roa
File: e65dbe5c-0c2d-3b2b-a4f8-62a1d66b8640.roa (raw, json)
Hash identifier: bUgn5fASCSHji/iwKQtCALUbnNGJfy+8Ko0eQtUnDiU=
Subject key identifier: 20:EC:84:89:79:E2:5B:89:05:B3:9F:12:58:DB:B6:38:1D:83:96:B0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DFDBDECFD66171BAE4DAC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e65dbe5c-0c2d-3b2b-a4f8-62a1d66b8640.roa
Signing time: Thu 01 May 2025 16:26:11 +0000
ROA not before: Thu 01 May 2025 16:26:11 +0000
ROA not after: Wed 30 Jul 2025 16:26:11 +0000
asID: 22773
IP address blocks: 72.206.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:db:de:cf:d6:61:71:ba:e4:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:11 2025 GMT
Not After : Jul 30 16:26:11 2025 GMT
Subject: CN=5cfc7543-707d-4d4a-8d8e-f0bd179ffe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:b4:1b:99:d7:16:12:86:e3:ed:e7:55:31:
7a:64:cd:b0:9d:87:81:f1:c5:97:67:d5:88:70:eb:
57:3b:96:96:0f:d0:7f:21:3c:7d:01:c4:1c:54:66:
3f:d1:2d:ec:73:0e:06:ab:2f:78:1a:01:00:bf:9d:
a6:b3:82:db:da:05:f1:3a:76:8e:79:42:ed:34:50:
74:2e:bc:0d:33:25:86:4d:0e:52:bc:2a:29:eb:1b:
cc:06:7d:0c:5e:d2:57:73:b8:8c:26:b3:2a:d0:4f:
00:bb:ac:71:99:61:12:a3:75:69:18:d5:54:03:d2:
81:b9:5d:21:f2:4c:6d:18:de:c0:46:f2:f9:8d:e2:
83:3e:ab:20:0b:c9:4d:43:62:3d:5d:ee:7f:c3:23:
84:65:24:b6:a5:98:4a:e9:40:b7:ef:ce:24:94:1b:
be:78:19:f6:61:00:e5:a7:08:79:92:5c:bc:53:6e:
ba:a8:8d:69:31:ca:60:5e:fd:ca:3b:6e:2b:ef:56:
78:0a:7a:4a:64:94:0d:98:10:6a:bc:dd:00:76:e3:
e7:e4:fa:02:70:14:2b:3f:68:72:49:34:22:38:8b:
ae:fc:9f:67:79:31:dd:dc:25:86:69:d1:cf:c9:37:
e6:18:fe:fd:ac:e3:50:99:a5:61:00:4b:90:c7:21:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:84:89:79:E2:5B:89:05:B3:9F:12:58:DB:B6:38:1D:83:96:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e65dbe5c-0c2d-3b2b-a4f8-62a1d66b8640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.206.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:6c:99:56:dc:df:e1:a6:50:5a:8c:27:58:52:82:71:40:06:
04:5a:4e:ce:f6:3a:b0:d9:d3:23:17:63:c2:d3:f4:4b:f7:5c:
7c:c9:86:1b:b0:ae:9f:9e:62:b3:13:05:0d:a3:b8:bb:1c:65:
20:10:b0:aa:c3:4b:a5:77:d2:a5:9f:99:64:42:8c:ba:b1:c9:
96:da:44:4f:49:d4:31:00:b7:46:e6:1d:ca:d7:c3:51:6f:41:
73:e7:4d:ac:65:34:16:da:34:14:a0:1d:b7:b6:59:64:3b:23:
4f:74:e1:0d:c6:ef:fb:79:2b:68:73:95:4a:08:9c:ab:ab:56:
bc:ca:7e:28:e5:ca:40:72:3b:aa:66:83:0c:32:95:81:0c:c4:
10:3b:12:12:1a:b9:41:9c:2a:75:74:e9:dc:97:bf:99:1e:49:
b9:31:40:d2:7d:4c:b9:b6:60:3b:d6:15:75:35:b8:35:1e:6d:
96:a9:e7:1d:1f:0b:e5:71:d2:43:95:c3:32:c9:e5:fa:70:e4:
8a:86:ea:07:e1:8f:97:57:83:81:6c:26:f2:b0:c4:50:cb:56:
4d:97:55:b4:85:73:bf:60:e1:fe:7f:e7:d6:88:25:27:2c:a5:
36:62:7d:90:dc:10:be:6b:c5:86:b2:5d:2e:02:0b:0d:59:d8:
03:bb:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:31:06 2025 by rpki-client