Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3844b95-3025-3421-b983-e1d3b931207a.roa
File: f3844b95-3025-3421-b983-e1d3b931207a.roa (raw, json)
Hash identifier: pV08EIXYj4AqZg9JL+GUr5rwaCx8w7UaDPandY9JFDQ=
Subject key identifier: 5C:48:B8:53:55:8D:5D:BB:F8:29:8B:94:B6:3C:98:98:81:70:D6:9F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0E0F7E008DE3B875BC440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3844b95-3025-3421-b983-e1d3b931207a.roa
Signing time: Thu 01 May 2025 16:28:14 +0000
ROA not before: Thu 01 May 2025 16:28:14 +0000
ROA not after: Wed 30 Jul 2025 16:28:14 +0000
asID: 22773
IP address blocks: 72.223.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:e0:f7:e0:08:de:3b:87:5b:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:14 2025 GMT
Not After : Jul 30 16:28:14 2025 GMT
Subject: CN=84dd70f0-2be8-4640-b19f-9019a7120bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:29:9d:a7:4d:93:d4:a9:ec:07:e9:07:2e:57:
91:2b:ba:89:ae:3f:5f:c8:a0:91:1c:9f:08:d0:81:
2e:76:bc:89:42:1f:ae:2f:16:94:1e:5e:5e:55:96:
14:10:72:ee:ed:29:45:bc:44:b3:f1:2b:2d:23:10:
48:32:8f:3d:1f:88:7b:d8:68:61:8a:2b:9a:02:24:
a5:6c:0f:3a:41:3b:f5:3d:8c:df:43:db:a7:95:74:
74:7b:6c:22:48:b4:33:c5:56:d3:cd:33:18:4d:f5:
80:0b:87:d5:98:5c:c4:c6:58:dc:40:01:3b:c4:27:
67:15:bf:28:9a:a1:cd:96:65:dc:be:4d:3a:73:ac:
b8:67:35:74:6e:66:f4:02:0c:70:71:f4:8e:fd:39:
e5:d1:32:74:ea:c5:89:46:48:81:81:73:b5:fa:a0:
f8:c5:4d:a9:73:ab:5a:65:cb:b2:d3:2b:62:6a:c3:
7b:34:31:a0:e2:75:c8:c9:10:73:d4:26:57:8c:bb:
d5:5b:7d:91:0c:bd:91:09:ff:03:06:b8:21:8d:46:
7f:7e:51:53:c3:3e:a7:77:2b:25:fd:6d:04:9b:e4:
fc:ec:14:1e:1b:1e:bd:ad:d9:b9:5b:98:b0:c7:41:
4b:f8:92:c5:35:25:9a:2d:d4:64:08:ab:26:76:44:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:48:B8:53:55:8D:5D:BB:F8:29:8B:94:B6:3C:98:98:81:70:D6:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3844b95-3025-3421-b983-e1d3b931207a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:12:be:ad:08:b1:43:25:bf:f3:28:b1:50:7e:4f:8a:60:8a:
1a:ce:0b:b8:ab:50:3e:82:90:2a:a9:d5:c6:ef:c5:dc:bd:cc:
bf:83:eb:90:74:75:cf:7b:73:7c:8f:6f:3c:99:26:92:f5:99:
fd:03:e1:6c:1c:42:b2:67:9a:e2:80:66:2a:57:10:86:1d:a7:
ba:dc:eb:0a:0d:1b:23:97:36:ad:ca:8d:5d:02:02:ab:6a:5f:
f1:0a:1e:dc:bf:09:11:c3:25:26:0c:6b:01:ad:32:8e:d8:2c:
d4:91:86:1c:b1:6f:3f:cf:95:0f:6f:f0:3b:2c:85:4a:b1:e9:
b5:50:1b:65:2f:4b:d6:cd:6d:27:9e:7c:db:1d:82:29:9d:41:
a8:2b:3e:99:20:24:8a:2f:03:bd:f1:fb:98:02:3f:a3:89:70:
3d:77:ab:03:d2:48:1b:d7:1f:11:46:ea:c2:45:4a:72:52:bc:
43:6f:91:07:5f:19:a6:77:89:03:af:27:e0:8d:76:e5:5a:d9:
c3:72:77:75:24:b3:fb:7c:e5:be:2f:fc:5c:0e:96:f4:9c:c1:
50:4e:37:66:97:29:73:53:59:af:91:b9:0f:7c:4d:85:7c:91:
33:7e:85:df:31:32:9b:d0:3a:b5:76:ee:d2:cc:c6:f1:e6:11:
cb:b9:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:51:32 2025 by rpki-client