Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f47cfa9d-4554-365f-84de-ee7664c8fd58.roa
File: f47cfa9d-4554-365f-84de-ee7664c8fd58.roa (raw, json)
Hash identifier: p311WX+JoZ59Xst8MCDLhynV2RDxtghTevj1yOi6bdk=
Subject key identifier: C8:75:74:A1:A5:FF:2D:FC:CC:CE:F6:B4:F6:71:0E:4A:46:C4:D5:FD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA97F0EA03D73AB0CF4700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f47cfa9d-4554-365f-84de-ee7664c8fd58.roa
Signing time: Thu 01 May 2025 17:20:03 +0000
ROA not before: Thu 01 May 2025 17:20:03 +0000
ROA not after: Wed 30 Jul 2025 17:20:03 +0000
asID: 22773
IP address blocks: 70.189.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:97:f0:ea:03:d7:3a:b0:cf:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:03 2025 GMT
Not After : Jul 30 17:20:03 2025 GMT
Subject: CN=99aed6e1-0332-411d-94b8-d0cc15aa8da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:99:b9:c1:c6:25:cb:17:46:9c:36:f3:62:
5b:14:f8:27:f1:a0:c6:e8:25:f3:bb:f7:1d:94:79:
70:36:7b:86:27:ba:3e:69:bd:a3:3e:24:8b:82:4c:
69:51:43:44:65:b3:8f:d6:66:f6:46:f7:0b:14:d8:
90:64:50:cc:1d:75:7f:78:6f:72:14:c3:ca:dd:51:
f1:9e:0d:61:6c:e5:ec:7b:e5:39:d7:bf:e7:99:90:
cf:29:e7:c3:e0:68:d5:77:2e:6e:34:58:d1:b8:33:
03:af:50:e9:04:93:a6:ff:59:76:11:ee:b5:b8:36:
e5:22:fb:e9:f8:b9:89:71:33:7b:8a:1f:f7:bc:fc:
83:26:1c:94:02:17:86:5c:cb:03:30:c0:33:02:6d:
df:77:1c:87:8c:55:18:33:81:15:36:fc:39:dd:bf:
89:ef:19:83:d8:d6:5b:94:c8:c3:42:4d:9c:b1:df:
66:0d:8d:da:cd:e0:82:91:90:4d:17:46:cc:38:74:
61:e5:14:66:b8:47:0e:08:03:dc:dc:aa:c9:90:3c:
e5:72:41:4c:00:f3:3b:7c:3d:d4:d8:56:88:56:08:
a2:34:d5:60:99:90:f5:22:15:86:ba:85:1d:de:7c:
e2:3a:67:8e:02:10:22:6d:ac:fb:8e:37:50:10:f0:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:74:A1:A5:FF:2D:FC:CC:CE:F6:B4:F6:71:0E:4A:46:C4:D5:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f47cfa9d-4554-365f-84de-ee7664c8fd58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.189.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:51:b7:70:6c:ec:e5:54:cb:f7:14:11:b6:e8:93:7c:99:aa:
8d:7f:50:03:4c:ad:2c:fc:c6:5e:73:c3:3d:c4:51:87:96:98:
b6:6d:54:75:e4:5d:ce:01:a8:c5:8f:85:cd:2f:12:f3:da:f8:
d5:4a:46:f6:71:22:fd:e8:d2:62:97:2d:dc:43:5e:01:a9:c5:
8a:b5:ef:f9:94:c6:ad:10:1b:3a:a7:c3:c0:a6:9f:c6:39:96:
a3:a6:b6:14:ca:5c:c2:6d:40:2f:06:e2:fd:89:ae:37:16:8a:
58:8b:25:1c:17:eb:d1:63:0f:c9:32:4d:48:1d:7a:ca:ec:5a:
76:b6:d3:4d:59:a6:10:ce:41:33:46:15:5b:5c:bf:3e:11:63:
0d:79:ce:ad:ad:e4:bc:0c:f3:cb:c2:d1:f1:81:e1:3f:50:7f:
6b:5f:32:b5:ed:d3:43:21:6f:a9:d9:c6:33:c6:63:bd:a1:e4:
da:d3:ef:ea:cb:43:e7:3c:d4:da:c2:4f:de:fa:c5:51:f7:0b:
ce:ae:86:59:0d:67:f3:99:aa:fd:02:0f:f6:28:d8:33:80:60:
14:8f:98:81:34:33:3c:10:2b:32:9d:4f:8b:b5:29:4c:7b:f0:
08:f1:b9:88:3a:62:54:0d:56:b2:99:2b:b6:d8:7d:2e:79:16:
ce:03:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:42:54 2025 by rpki-client