Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2c14f59-f5a5-3c7f-9aa6-ae1d27c5806b.roa
File: f2c14f59-f5a5-3c7f-9aa6-ae1d27c5806b.roa (raw, json)
Hash identifier: nw37MFjs8LoEPwQ1hbUxMITI9bc+Jpo6J93Di+HRZj8=
Subject key identifier: 22:23:6E:9B:56:EF:3E:B3:7D:35:42:FA:B7:96:39:80:36:BC:67:62
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCEE424405B6ECCBD95D60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2c14f59-f5a5-3c7f-9aa6-ae1d27c5806b.roa
Signing time: Thu 01 May 2025 16:20:17 +0000
ROA not before: Thu 01 May 2025 16:20:17 +0000
ROA not after: Wed 30 Jul 2025 16:20:17 +0000
asID: 22773
IP address blocks: 24.255.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:ee:42:44:05:b6:ec:cb:d9:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:17 2025 GMT
Not After : Jul 30 16:20:17 2025 GMT
Subject: CN=0031985f-5b3b-4fab-8805-589fbf23fbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:56:36:17:10:7b:f1:29:e9:c5:f7:90:42:
eb:ee:46:ec:07:37:f9:5d:9f:fc:36:e4:2b:ce:e8:
16:ba:61:a1:ba:52:8a:5c:df:16:ee:84:a2:58:cf:
0e:81:a1:8e:82:31:e1:18:b7:30:d3:70:7e:56:78:
a8:cd:7e:53:5c:74:c0:bc:0f:9d:1c:2b:e9:ae:c8:
ba:76:c5:69:ef:33:d4:9e:3b:2c:d7:8e:3a:dc:ee:
9c:59:9e:f4:a5:8a:5b:fc:73:9e:16:12:ea:87:ce:
e2:70:a2:32:a3:04:ea:26:4b:9f:d1:e2:78:c4:ee:
56:f7:a2:91:26:2d:6a:11:4f:ae:f3:32:b2:f3:c9:
00:bd:5c:16:2a:ad:97:77:c4:d7:f2:0c:c1:e4:72:
08:67:6e:41:e7:ad:c2:5b:27:22:ac:67:34:87:4c:
3e:84:8e:14:1d:49:53:81:16:7f:2c:0e:ae:99:be:
a8:96:92:ba:f5:bf:22:39:44:cf:eb:a6:71:c2:23:
6b:02:77:4a:8c:3c:5e:67:3b:4e:70:6e:da:55:ef:
b5:fd:a4:39:ea:15:be:ee:0a:5f:f6:37:28:dd:44:
6a:12:85:b8:93:7b:08:74:43:b5:6e:12:e4:26:24:
75:11:a1:3c:a1:8b:44:1c:53:22:d6:30:82:6d:74:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:6E:9B:56:EF:3E:B3:7D:35:42:FA:B7:96:39:80:36:BC:67:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2c14f59-f5a5-3c7f-9aa6-ae1d27c5806b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.255.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:98:16:06:28:04:85:90:1e:1f:f7:5b:44:fe:e7:89:a6:40:
ff:84:9e:ba:2a:51:53:f5:e3:15:75:8c:99:d5:9b:bc:b1:b3:
63:57:af:a1:ea:07:82:8f:6c:95:ba:af:28:ca:e1:14:ad:17:
0d:dc:a6:65:36:36:73:5a:92:03:7c:09:f9:75:1c:be:4d:c3:
44:7a:2e:24:f8:08:2a:4c:f1:45:ee:cd:5a:34:6a:cd:c0:ec:
0f:4d:cf:1c:42:40:25:90:e1:9f:a2:54:be:67:b2:17:46:86:
65:f9:f1:03:0f:e6:47:a5:3b:22:34:a8:a9:c1:8c:e4:0f:84:
db:af:19:f3:2c:f7:b0:f5:d0:cf:82:e6:59:4b:68:6f:36:cd:
dc:c3:c9:51:a4:74:03:4a:57:32:c5:f6:1b:3e:24:bc:24:79:
93:2e:f9:4b:30:c4:23:ae:0e:d7:bf:03:f9:2a:ed:8b:3d:90:
65:33:b5:b3:d7:33:33:b2:34:b4:1a:44:8b:72:ef:93:5e:b4:
29:75:78:d6:68:b9:d8:f1:86:c5:86:21:a1:ac:9e:66:ff:5c:
47:c3:d0:de:a0:a6:19:d0:bb:03:82:dd:01:98:82:13:ed:fb:
76:d0:6b:f1:7f:5d:44:96:82:04:41:0e:bd:39:53:29:f1:ad:
20:1f:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:32:42 2025 by rpki-client