Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd113e13-7168-39b5-9e08-b116ca63a861.roa
File: fd113e13-7168-39b5-9e08-b116ca63a861.roa (raw, json)
Hash identifier: 2PQXVXT+WE4S46IkNq8N4nM+huAajkj3J4Q5U3iJ7us=
Subject key identifier: AA:54:21:3B:B2:CD:26:33:3B:05:20:AF:40:6B:9E:27:14:45:96:3F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E143913221E1BAC985EE00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd113e13-7168-39b5-9e08-b116ca63a861.roa
Signing time: Thu 01 May 2025 16:29:01 +0000
ROA not before: Thu 01 May 2025 16:29:01 +0000
ROA not after: Wed 30 Jul 2025 16:29:01 +0000
asID: 22773
IP address blocks: 98.167.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:43:91:32:21:e1:ba:c9:85:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:01 2025 GMT
Not After : Jul 30 16:29:01 2025 GMT
Subject: CN=413e704a-6912-4600-9dd0-6520d7fc4bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:68:da:ad:5a:f1:ed:5e:c8:b3:bf:d1:2a:
fd:61:71:c8:6e:5d:69:56:d2:6e:84:44:be:43:b9:
fb:77:1a:b8:42:39:9a:51:64:59:eb:8c:e1:bc:e8:
f8:23:a1:e4:19:b6:95:46:7b:e0:61:50:b4:b4:e6:
f4:cc:96:6b:26:64:78:ed:46:0d:25:b5:7b:98:c7:
44:fc:00:fd:c4:8d:06:72:e3:a1:88:83:76:4c:79:
2d:cd:d6:20:b6:8f:da:72:8e:f5:1e:1d:55:67:37:
af:27:84:05:a7:e0:50:e2:30:9d:89:3f:82:71:5c:
57:91:48:ac:b4:5b:12:44:7b:65:0d:83:fe:df:ee:
48:6a:e7:f8:52:43:d8:93:07:44:e9:f1:79:1a:cb:
22:35:48:1d:e6:d1:ba:7e:d2:07:9d:49:02:ee:92:
f5:d1:8a:ae:cf:fb:60:b2:50:71:7d:ac:e6:64:ac:
5e:55:16:f5:34:5b:c3:db:65:13:05:4b:bd:ca:0f:
d1:dc:c8:22:04:b3:b3:24:4c:1b:31:12:7f:c4:ff:
17:91:83:5e:15:ce:18:f3:6b:87:18:c1:f4:7a:a1:
cf:3e:05:f7:2c:71:83:d6:ca:a1:c0:f2:a6:e0:f2:
fa:45:bb:42:45:ee:b1:4d:0f:d5:be:16:22:af:8b:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:21:3B:B2:CD:26:33:3B:05:20:AF:40:6B:9E:27:14:45:96:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd113e13-7168-39b5-9e08-b116ca63a861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.167.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:39:8c:b8:0e:11:6b:1b:5e:a9:4e:f9:ee:eb:e0:54:df:b7:
ce:2d:63:b2:fa:51:ff:69:58:98:73:7a:0c:a2:53:56:51:0d:
68:16:0b:f1:93:73:66:af:24:fc:35:16:f0:77:cc:2b:12:d1:
c7:16:70:e7:ce:65:52:01:12:79:d8:1b:dd:7d:b4:b7:7c:82:
c1:81:80:5f:d5:0d:e0:d7:9e:30:22:5e:67:89:ae:82:5c:e9:
e1:c8:3a:46:f7:aa:b0:fc:4e:05:75:d0:75:56:bd:cc:5a:cf:
ed:70:7b:90:6c:6c:a6:2a:2a:80:c2:2e:5b:cc:95:be:20:0f:
ef:60:0c:56:9b:57:92:69:66:43:5f:7d:84:59:80:67:97:75:
33:fa:a5:82:87:26:71:53:84:60:a8:72:34:e4:ab:fc:aa:a9:
66:9f:bc:f9:04:d7:53:c1:4e:98:a9:68:62:6a:27:f3:df:09:
53:82:5b:63:7d:27:7c:e0:1a:9c:9e:2f:d5:2a:e7:6c:d9:b5:
ff:21:bb:fc:90:cc:7c:76:cd:25:a9:27:8d:db:92:e8:70:c8:
fd:12:cb:38:41:33:cc:a9:a3:e8:af:14:38:e1:7a:1d:fe:60:
94:a3:f3:9f:f3:8a:b3:9f:e4:47:de:de:c9:9f:93:ba:88:f2:
e6:73:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:20:08 2025 by rpki-client