Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef8a426f-e404-355b-a68a-ea0dccedafc2.roa
File: ef8a426f-e404-355b-a68a-ea0dccedafc2.roa (raw, json)
Hash identifier: gMyWZ5AcbqGnlQ0BJlScTm9q5tSQGYQ7nn7y/XACBwQ=
Subject key identifier: 8E:F8:A4:D1:38:1B:49:25:64:A1:A1:FB:E3:25:95:24:77:B7:79:38
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA34AA19A7D75855CAC9B0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef8a426f-e404-355b-a68a-ea0dccedafc2.roa
Signing time: Thu 01 May 2025 17:19:16 +0000
ROA not before: Thu 01 May 2025 17:19:16 +0000
ROA not after: Wed 30 Jul 2025 17:19:16 +0000
asID: 22773
IP address blocks: 70.170.90.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:34:aa:19:a7:d7:58:55:ca:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:16 2025 GMT
Not After : Jul 30 17:19:16 2025 GMT
Subject: CN=9968394b-2be0-4f45-818b-fea2c75f22d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:71:2f:cc:06:a6:f2:ed:14:1a:e3:e6:a6:
6b:92:17:70:65:80:7e:a4:7b:85:5b:e3:13:99:8f:
51:a8:25:3a:8d:aa:d9:11:a7:58:b6:31:fa:b1:06:
ce:61:cf:e8:36:cd:51:4a:96:ec:5f:69:7a:d9:d9:
be:1e:17:ce:43:56:a8:8c:3b:74:2d:3d:56:22:2f:
d2:b2:89:58:b2:37:b6:a8:18:05:26:a0:74:5c:17:
bb:47:2a:47:dd:37:36:31:f6:95:9c:a2:99:6a:80:
74:ec:0d:57:67:04:1c:78:44:7a:63:75:eb:bb:a4:
2b:ba:ae:a2:cc:af:e8:4e:61:6e:4b:d2:fd:28:e5:
2f:f7:c7:be:95:3b:42:fa:5c:32:98:5b:4b:7a:3e:
a7:88:88:f9:4b:50:56:27:b6:6e:aa:11:e4:bd:b0:
2c:8a:6c:c8:41:2b:f9:25:36:ff:d5:d2:9a:37:3d:
14:d3:72:f4:ce:a0:30:11:0b:e0:a2:8f:62:ff:df:
69:6a:51:a7:57:cd:52:d6:a2:01:05:69:de:69:ab:
2b:c4:57:62:83:5c:8d:48:e4:7c:a3:c7:19:9d:9b:
06:0d:8d:d3:67:ff:16:d7:ed:f3:ea:3f:20:29:e1:
e1:77:ba:dc:ca:bd:73:ad:b2:8b:84:c1:07:f4:9b:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F8:A4:D1:38:1B:49:25:64:A1:A1:FB:E3:25:95:24:77:B7:79:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef8a426f-e404-355b-a68a-ea0dccedafc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.170.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:17:1f:b8:ae:96:c8:17:5b:c5:65:e7:71:7f:00:67:d3:00:
81:4a:7a:f0:ce:f0:dc:53:0b:7e:12:65:e1:41:76:1f:d2:08:
80:61:d3:8a:33:2f:86:c3:0c:0b:2c:02:55:53:56:4a:a9:6c:
ea:1e:0f:29:9f:14:9a:21:4c:b5:e8:db:ab:dd:56:2d:ff:78:
33:82:4d:c9:f6:c6:d8:9f:df:27:9a:a0:8c:a6:4c:1c:2c:38:
82:63:74:9f:f3:d1:ad:fc:bd:d2:d9:87:11:00:e4:55:c2:3f:
65:ee:73:a2:3c:b3:ce:67:05:44:d5:bb:40:fa:e0:85:90:55:
8a:48:c7:66:1f:7d:c8:63:9b:e1:c8:5e:19:cb:23:8e:0f:a8:
b3:29:05:d7:3e:0f:db:53:76:e0:23:ce:e7:a3:0e:92:ca:fc:
db:3b:04:df:3d:2f:bc:53:a5:7f:62:10:48:27:a5:20:4d:d8:
ac:d9:aa:b0:53:9e:bf:b6:b9:26:fb:a3:14:b5:03:70:82:24:
17:0c:ad:e9:5a:dd:63:e1:6a:ed:c9:7c:c0:88:2c:8a:e2:fc:
ba:a6:80:0a:f0:4b:3d:d8:e9:68:46:e5:ec:ea:24:de:8d:6a:
53:b6:ed:fe:b3:3c:63:4c:e3:9f:14:a3:b4:f6:38:6d:29:52:
63:db:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:37:20 2025 by rpki-client