Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd391f48-368f-3e52-96eb-4fb1c1b81268.roa
File: fd391f48-368f-3e52-96eb-4fb1c1b81268.roa (raw, json)
Hash identifier: M80N8GS10F0rAcPuKqTj02+qhNDDA6r7voUO1fbA1+E=
Subject key identifier: 3B:3E:45:9A:EA:0B:A8:2A:E2:C6:66:AE:05:A1:3C:F0:8E:A8:23:F0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0F91FA3649D269D973F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd391f48-368f-3e52-96eb-4fb1c1b81268.roa
Signing time: Thu 01 May 2025 16:28:26 +0000
ROA not before: Thu 01 May 2025 16:28:26 +0000
ROA not after: Wed 30 Jul 2025 16:28:26 +0000
asID: 22773
IP address blocks: 98.161.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:f9:1f:a3:64:9d:26:9d:97:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:26 2025 GMT
Not After : Jul 30 16:28:26 2025 GMT
Subject: CN=0f4fddb2-e248-4900-a90f-e9573870fa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:3b:76:31:14:7f:d2:b4:bb:bc:f4:64:5e:
72:0c:c0:52:7e:8a:1e:ce:e7:16:c1:4a:b4:fe:e9:
85:de:48:23:84:bb:c9:d0:6d:62:44:bd:5c:63:5a:
0b:32:50:21:ae:14:7b:cd:b3:e2:a4:91:bc:44:cf:
dd:95:89:3e:bc:c6:7d:b4:76:3d:60:dd:bb:67:04:
99:22:f4:3d:29:44:5b:e0:32:82:6a:ad:5e:0b:fa:
41:ef:e1:76:38:f8:12:87:74:db:bf:74:05:dc:d7:
e7:61:0f:28:23:b7:b0:a4:fc:fc:d5:ee:99:1c:80:
18:47:a0:a9:4a:85:dd:f6:ac:39:c7:76:74:ab:90:
e9:68:c2:1c:b4:66:0c:4e:88:cf:66:0a:ac:68:18:
df:09:ce:2a:83:d8:67:78:03:e7:f2:1c:06:df:3d:
2c:2f:da:2b:f6:be:67:39:3d:d7:9b:b4:3c:6e:40:
47:74:8a:e8:39:d1:c0:b0:e2:1b:61:70:7c:08:49:
64:6b:77:91:d1:f0:0b:56:2a:67:22:23:2b:8c:30:
a4:68:79:a5:35:3e:33:b9:67:2e:ad:fa:1d:ce:6d:
d4:04:66:83:99:04:5f:2b:1c:d3:b8:99:77:5f:1c:
73:61:56:74:34:08:7f:7b:93:c2:87:80:d4:81:6a:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:45:9A:EA:0B:A8:2A:E2:C6:66:AE:05:A1:3C:F0:8E:A8:23:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd391f48-368f-3e52-96eb-4fb1c1b81268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:e4:fc:66:77:db:31:e7:c4:f0:47:ba:7b:5b:e0:27:82:ea:
ef:77:61:d4:87:09:05:91:73:d4:a7:ae:d4:f3:29:bb:a0:35:
f0:f4:da:ed:71:89:f6:67:58:c6:8b:d4:c8:90:94:89:4b:ab:
96:c0:54:12:f1:a7:56:52:8f:72:0f:0c:83:9d:18:93:1d:a2:
5c:ae:75:63:eb:0a:4b:bd:97:19:27:7f:12:13:92:c1:26:87:
bb:1d:c6:b2:cd:08:0a:21:12:3b:de:6e:8c:be:56:76:be:a6:
06:1e:9d:f1:c4:14:ce:fe:45:72:ac:15:df:0b:45:bc:0c:1b:
82:20:8e:b1:4f:eb:ef:8f:bb:f5:94:42:58:fa:f8:3c:6b:e8:
b1:61:6a:0d:2a:d6:3e:bf:13:57:b0:41:77:7e:96:99:70:60:
0d:7b:91:82:7d:78:ea:ef:25:a9:6e:4a:94:a6:44:fa:bd:85:
f5:51:06:81:7e:29:1b:1b:a8:0f:ad:11:9b:23:5f:c1:21:34:
a1:d6:01:14:94:19:cf:eb:bc:df:b7:ea:c1:76:61:21:92:54:
ec:c8:98:d6:22:d9:43:ef:fa:3f:ba:2e:19:7d:aa:24:f0:b2:
f1:a6:c0:3a:b2:0b:97:24:c2:93:12:00:76:2d:56:8b:07:9a:
ae:8d:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:57:59 2025 by rpki-client