Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/157d1bb0-f875-31fa-a62a-90d3de5a23be.roa
File: 157d1bb0-f875-31fa-a62a-90d3de5a23be.roa (raw, json)
Hash identifier: J2PVJiOjFRme5W9YLNGI+bd/5Y9FZ+fWVdKWq8Sde6E=
Subject key identifier: 3F:DC:A2:D9:BB:69:EC:91:4C:48:DD:8C:E6:09:61:C6:F6:6B:5D:D7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEB297F4E3284B84360F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/157d1bb0-f875-31fa-a62a-90d3de5a23be.roa
Signing time: Thu 01 May 2025 16:23:51 +0000
ROA not before: Thu 01 May 2025 16:23:51 +0000
ROA not after: Wed 30 Jul 2025 16:23:51 +0000
asID: 22773
IP address blocks: 70.171.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:b2:97:f4:e3:28:4b:84:36:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:51 2025 GMT
Not After : Jul 30 16:23:51 2025 GMT
Subject: CN=546bae44-3266-444e-afed-7258e278d4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:50:36:b4:4f:d8:99:94:68:8c:1d:cc:98:
bf:23:01:a4:c7:81:67:e3:bd:fb:e7:fc:e7:89:89:
4c:09:0e:49:ba:6a:08:1a:ba:00:c2:54:9f:65:93:
77:af:0c:13:03:4c:14:01:b5:f1:df:6e:29:98:2b:
7a:2e:da:e0:42:14:a2:d4:06:2f:20:1e:db:bc:5b:
84:54:08:fb:56:8e:54:52:b4:d0:4e:3b:6c:d5:10:
7b:bf:86:4b:ac:8b:b5:88:21:5a:2f:05:2b:5a:f3:
da:30:dd:59:94:8b:fa:10:7a:a2:31:c6:91:b3:f9:
c2:67:42:48:19:a2:cd:18:89:22:01:b2:22:8d:f5:
29:ce:0b:e6:06:59:f4:9e:3f:1d:8d:4b:25:a4:00:
56:bf:3a:e9:f1:3c:b1:5b:ac:d4:67:54:7d:a0:85:
89:45:63:41:96:ea:79:85:16:74:68:c4:a4:c4:2f:
0c:99:50:49:75:85:33:26:0a:d0:07:73:6a:9e:94:
b0:f1:81:52:4f:44:1b:4f:92:28:9c:35:8d:c9:2f:
3a:66:61:1f:ae:19:cf:b5:78:f5:da:3f:e6:10:ca:
1d:3a:03:79:76:c9:d0:c9:e4:6e:63:15:ae:86:60:
f3:ef:13:5b:85:fd:99:a8:61:54:39:41:d2:3e:5e:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:A2:D9:BB:69:EC:91:4C:48:DD:8C:E6:09:61:C6:F6:6B:5D:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/157d1bb0-f875-31fa-a62a-90d3de5a23be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.171.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:40:3e:38:95:4a:f8:07:15:f2:1b:27:6b:99:ce:4f:64:cb:
2b:a2:2b:53:a8:3f:ae:0c:af:84:8f:38:7a:a0:01:b9:f9:26:
ad:6f:2b:90:8b:6d:73:92:5e:fd:87:f9:92:30:79:22:91:89:
ff:6b:17:b9:53:11:ee:7a:bd:16:a0:36:9d:15:6e:8c:8e:27:
c0:34:ed:72:c5:dd:73:6e:ff:8a:38:5b:5b:0d:94:73:86:e8:
82:3d:01:ee:f6:4e:45:df:d5:de:1f:7b:37:b6:8e:de:8f:91:
f3:bb:33:bc:6f:a9:9b:05:2a:ec:ed:67:18:ef:80:0a:0b:96:
d6:2f:c7:f1:e8:c3:2e:0e:5a:68:ec:a2:a7:7a:57:c8:77:78:
ae:34:bc:75:c7:5e:25:64:27:75:e2:19:19:53:3c:c9:24:8c:
e8:32:7e:e3:c5:12:2b:76:65:f7:3e:cf:f7:a2:d3:3f:ad:6a:
3a:8c:cd:e2:d3:4e:51:56:7f:2b:bf:f0:96:5d:dc:fd:30:88:
4b:43:9c:60:4a:45:18:65:2b:78:bb:c8:75:9b:34:a8:b4:96:
a5:72:36:1e:6a:9d:f4:6d:e4:99:13:da:7a:6a:57:6f:aa:3d:
c1:d1:8b:87:70:f6:e6:da:cf:21:c3:07:d7:e8:ee:53:ef:c8:
8a:60:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:33:52 2025 by rpki-client