Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7904c05-5f08-32ff-b4fa-3df2c9dbabc5.roa
File: f7904c05-5f08-32ff-b4fa-3df2c9dbabc5.roa (raw, json)
Hash identifier: vAUcC7O5WWHcehvUE3woDu2bgNTxF89iuzcZOZanSYA=
Subject key identifier: 1A:9F:50:14:F4:5A:8D:C6:06:5B:32:66:81:6B:CB:CA:12:98:1F:0A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0E389F78C5AA82BD436E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7904c05-5f08-32ff-b4fa-3df2c9dbabc5.roa
Signing time: Thu 01 May 2025 16:28:16 +0000
ROA not before: Thu 01 May 2025 16:28:16 +0000
ROA not after: Wed 30 Jul 2025 16:28:16 +0000
asID: 22773
IP address blocks: 72.223.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:e3:89:f7:8c:5a:a8:2b:d4:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:16 2025 GMT
Not After : Jul 30 16:28:16 2025 GMT
Subject: CN=c9438da4-1c52-45db-8029-3423ba2a8b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:3a:7b:01:7e:12:21:da:c5:ea:bb:30:be:
4a:68:16:49:22:ca:64:b1:71:a9:ea:f9:24:0f:3b:
b0:f9:81:c1:81:cb:22:2f:3d:c7:ed:99:4d:ef:c8:
af:54:08:e3:b5:78:aa:c8:83:d7:02:b7:b6:71:6d:
99:0a:a1:cd:bf:c2:f8:75:bc:28:2f:3a:49:30:52:
74:2b:93:29:ea:58:56:28:6e:6f:67:34:74:73:37:
a6:0a:48:c3:a1:a0:98:6b:fc:b4:a1:29:98:65:30:
1f:10:0c:36:a4:e1:d8:27:19:a4:71:05:48:37:fd:
bf:e5:cd:84:1c:74:5d:a2:30:c2:f2:ca:30:f7:40:
e2:02:c2:e5:6f:ec:35:05:fa:58:5b:66:aa:d0:8b:
3b:6b:c8:f2:61:39:4c:94:6b:d0:11:42:8c:17:11:
01:c9:0c:ee:e4:03:5e:f1:2c:bd:be:dd:fc:33:0b:
6e:b9:51:7e:2f:87:24:92:83:64:15:cf:2a:17:c2:
92:ce:41:d9:39:11:b1:b0:6e:14:c8:28:2d:60:43:
45:93:fa:21:b6:9e:15:7d:19:56:aa:eb:6b:07:31:
1b:6a:e7:b7:99:6e:b3:a7:5a:93:f0:4f:39:81:2c:
fb:c9:75:5c:7f:cf:1a:6a:1d:79:05:ca:97:93:78:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:50:14:F4:5A:8D:C6:06:5B:32:66:81:6B:CB:CA:12:98:1F:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f7904c05-5f08-32ff-b4fa-3df2c9dbabc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:14:25:49:a7:bc:32:82:43:c9:63:9a:4f:c0:f0:2d:a0:76:
9d:a2:bb:24:c4:59:fb:e6:8f:0b:89:b1:84:1d:25:55:7a:9f:
53:21:71:dc:5f:f7:31:73:18:d3:20:16:29:5b:e7:39:a9:56:
7d:d3:3a:6b:e5:ba:e1:4c:98:9a:76:a8:13:75:cc:3e:5d:b7:
e5:78:42:23:d4:b4:d9:a1:cc:64:07:a5:d9:f9:e5:0f:e3:32:
7f:6f:5f:12:f6:c0:79:92:19:80:50:fc:30:4c:74:11:1f:0d:
8d:a0:b8:55:66:dd:29:25:19:93:f6:ad:25:0d:fd:d2:9d:d1:
f9:b3:18:5a:39:92:f5:89:ab:53:80:ba:5d:d0:64:3e:e8:38:
0b:fc:9a:a8:21:68:84:e5:6a:21:b4:6e:ed:aa:b9:b7:ef:97:
ce:50:81:1d:a4:6d:59:0d:55:ec:cc:f9:30:24:90:fc:46:24:
ad:33:6d:4b:a4:d1:88:5b:88:35:1f:f7:85:24:f9:69:22:72:
a0:6d:c2:a4:6d:a9:9d:d9:7c:27:e5:49:d3:f7:4c:86:b1:8d:
df:86:34:03:a0:3b:b7:b1:b0:50:6b:15:4d:73:1b:fb:bb:a5:
87:ec:89:b3:ef:b9:bc:83:ac:fe:50:de:a8:79:ff:af:43:40:
8d:17:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:21:58 2025 by rpki-client