Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1fe7f34-8794-3f48-9382-ee031711f724.roa
File: f1fe7f34-8794-3f48-9382-ee031711f724.roa (raw, json)
Hash identifier: 4hrFsMld1ZCpr3sB8Y9oHIX4S8Jn+iKdRqqiYMA5WZI=
Subject key identifier: AF:12:2F:8C:D3:F3:38:45:54:D3:67:FE:6F:8A:56:A0:0C:15:2C:A4
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA89664C273DB1A8366D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1fe7f34-8794-3f48-9382-ee031711f724.roa
Signing time: Thu 01 May 2025 17:19:56 +0000
ROA not before: Thu 01 May 2025 17:19:56 +0000
ROA not after: Wed 30 Jul 2025 17:19:56 +0000
asID: 22773
IP address blocks: 70.180.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:89:66:4c:27:3d:b1:a8:36:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:56 2025 GMT
Not After : Jul 30 17:19:56 2025 GMT
Subject: CN=d90ebb95-3ae8-4269-995a-173a0e690248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:2a:4d:7e:9e:83:95:3f:9b:a4:f9:fd:8c:
eb:5b:6e:81:a4:25:e3:a0:3b:a8:17:13:b7:e8:02:
83:5e:4a:c6:fd:59:cf:d7:d8:87:ec:42:0a:fb:69:
e0:b8:0d:2a:3d:3c:e0:5f:6f:1e:97:2a:c5:ff:b0:
cc:0a:eb:ca:73:70:bf:94:aa:81:9c:8f:db:77:28:
da:9e:67:ea:05:43:39:5e:3b:f3:80:bc:20:0e:cc:
40:68:fb:4b:0b:c3:c2:e0:8c:ff:73:27:1b:a0:3c:
0d:1b:2f:b5:13:d6:36:af:bf:ae:35:e3:48:8a:51:
d2:33:0f:b7:7f:63:e8:8b:94:2e:7c:a2:5a:2b:88:
71:3d:ba:0e:37:50:37:0c:d8:55:7c:76:c2:35:cd:
69:01:26:b8:2f:5a:63:18:52:d2:e8:09:e8:20:14:
d8:aa:25:d0:82:d2:9b:d4:6f:41:83:42:8d:5d:fe:
b6:72:0c:54:53:8d:28:d6:96:eb:88:14:4a:7b:20:
89:a2:24:89:2a:d5:4e:0d:14:e2:80:a2:19:39:c3:
74:07:64:19:b4:bb:26:ce:62:89:c4:08:30:8f:8c:
b1:7a:88:f0:74:d3:3c:5b:91:bb:07:77:6c:a3:1d:
92:be:ba:56:7c:1d:6a:57:e3:99:96:fa:75:8f:05:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:2F:8C:D3:F3:38:45:54:D3:67:FE:6F:8A:56:A0:0C:15:2C:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1fe7f34-8794-3f48-9382-ee031711f724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.180.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:fc:72:ca:95:48:3d:7e:38:58:0e:11:e7:2c:a6:fe:63:f8:
b7:2b:37:95:b3:77:03:19:4f:70:d3:f5:97:bb:e5:aa:be:a4:
62:01:99:1a:f8:be:cd:20:9a:87:3f:b4:c2:32:67:0a:f8:ab:
3b:e2:a6:a8:29:ee:d9:aa:fc:c9:70:13:b6:75:74:c9:7a:c2:
bb:68:be:5d:76:f3:60:e5:db:d8:0e:7f:06:cb:a0:4c:71:8a:
9b:ba:6e:32:90:53:d0:75:55:fc:9d:e1:93:dc:1d:75:23:42:
a4:85:7e:f7:a8:fd:e3:b9:98:ec:91:a3:03:5e:31:00:17:2c:
42:8f:c7:e6:07:b4:74:aa:83:17:a0:df:99:a6:7d:da:d7:54:
35:35:df:73:39:1f:dc:02:76:64:4e:83:fb:18:94:1e:6c:1d:
bc:ed:4f:8e:40:ff:07:89:95:a8:c0:3c:51:54:7d:e5:6f:33:
a7:d5:b4:7b:9e:b7:a6:7f:bb:5f:12:a3:73:6b:c2:9a:2c:19:
fe:78:a2:78:80:0f:dd:15:f9:78:a4:07:54:c2:ba:9e:76:27:
b8:92:3b:fd:d2:2f:30:b2:00:12:69:08:6a:45:47:4f:74:aa:
7a:7b:c1:f1:09:27:d5:17:84:26:97:9f:e2:bd:90:67:c7:e6:
1a:60:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:15:45 2025 by rpki-client