Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcf8d911-f60a-3da0-9b3c-afc4fccc6bc1.roa
File: fcf8d911-f60a-3da0-9b3c-afc4fccc6bc1.roa (raw, json)
Hash identifier: 4l0Pbq61gED03aj88+PvBgz83qYw83sUVmQ60BYVnXs=
Subject key identifier: 33:B1:E8:62:DE:54:25:15:C5:11:51:0D:03:A4:3C:52:99:23:89:3C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0EAEBBE05BF4E590364C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcf8d911-f60a-3da0-9b3c-afc4fccc6bc1.roa
Signing time: Thu 01 May 2025 16:28:19 +0000
ROA not before: Thu 01 May 2025 16:28:19 +0000
ROA not after: Wed 30 Jul 2025 16:28:19 +0000
asID: 22773
IP address blocks: 98.161.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:ea:eb:be:05:bf:4e:59:03:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:19 2025 GMT
Not After : Jul 30 16:28:19 2025 GMT
Subject: CN=3e8e6534-fa4a-44cf-be2b-f18af14dccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:26:47:db:b2:a7:89:d4:0e:0f:c2:98:a9:
89:95:bc:bc:e2:da:23:ae:84:0b:42:3d:c1:1a:6a:
09:f4:3c:a4:8e:e6:54:58:a1:e7:6c:ed:fd:17:04:
49:67:4b:8d:18:c5:eb:4e:4b:4e:7f:bc:0e:67:c3:
83:e1:2c:ee:ca:53:a0:3c:e7:0c:a5:37:59:56:08:
76:7d:4a:7e:f7:58:43:82:95:b1:30:ae:ea:25:6e:
8e:1e:bb:5d:3f:9f:ff:43:a7:a1:8d:6b:00:d6:9d:
75:fc:b0:31:c4:35:5d:8e:6b:c9:3a:b5:98:dd:f7:
8a:81:f9:99:63:4a:d5:34:d0:cd:bc:14:c5:b4:e3:
38:ce:f9:bd:2b:13:0f:5b:c3:8a:55:c9:b6:53:d7:
03:d4:d9:a1:28:45:b1:9f:b7:c5:fd:8d:af:d0:68:
11:ff:75:eb:80:68:e7:b5:36:79:f8:79:09:4f:f7:
b0:9f:f3:7e:20:c3:46:18:76:b3:6a:da:b4:8d:c5:
ce:53:d0:b8:fc:76:d6:e4:46:f9:e4:aa:f4:d2:e8:
48:31:13:d5:f5:87:01:07:fc:c7:6e:2e:95:03:ac:
84:2b:9d:f0:67:e2:f7:96:f4:3d:fa:2d:a9:02:71:
e5:a9:6b:f5:b5:32:8c:8a:43:97:cb:83:db:be:4d:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:E8:62:DE:54:25:15:C5:11:51:0D:03:A4:3C:52:99:23:89:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcf8d911-f60a-3da0-9b3c-afc4fccc6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:87:9a:02:32:e8:f8:00:41:3b:55:16:b6:e2:1b:60:28:eb:
63:46:59:b4:c1:41:6a:66:7a:a5:68:4c:9d:46:91:8a:c2:96:
8d:0a:57:78:69:2b:fd:80:b6:6f:9c:81:07:37:a6:b3:cc:c3:
b6:05:e9:e1:2e:34:3b:35:5b:c4:7d:fc:38:23:c4:61:fa:26:
d0:bd:d7:67:fe:75:3c:98:fa:d1:c9:f1:e9:8c:ae:c5:21:49:
dd:d7:24:e8:59:fc:75:68:40:ea:e5:93:56:88:1c:27:a6:45:
15:ee:95:c3:ce:3b:87:40:58:87:73:88:2c:16:5c:2f:d5:2e:
73:8b:e7:d1:11:bf:90:40:d2:12:61:7d:74:30:8c:11:9b:b4:
de:a6:14:6d:c8:c2:62:11:12:85:af:c5:9e:1a:e0:d0:dc:40:
f0:bd:ee:22:99:56:7b:a0:c6:40:a6:23:45:19:78:cb:ee:48:
3f:28:fc:e5:30:dd:37:fc:c4:e2:25:19:64:cd:6d:04:6d:f6:
48:aa:d0:53:f8:6c:75:6a:77:b8:e9:a7:8c:36:06:bf:77:10:
b6:25:e6:ba:53:ca:54:4a:74:4b:3d:cf:6d:c0:a2:39:e3:c8:
66:85:44:40:cf:8b:69:a9:cf:80:85:93:ca:3d:7d:d4:a7:17:
16:be:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:10:45 2025 by rpki-client