Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/932a1f76-5b45-3c70-8fdd-519bef71fa65.roa
File: 932a1f76-5b45-3c70-8fdd-519bef71fa65.roa (raw, json)
Hash identifier: b1UkkULGKaEI1dyP7gAMra4oipMojDMJp+RW/Zqy9vA=
Subject key identifier: 26:9C:C5:CF:92:B6:D5:90:2E:36:57:91:0A:06:FC:16:3A:2E:4E:41
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E16C0EB6F419FB12799D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/932a1f76-5b45-3c70-8fdd-519bef71fa65.roa
Signing time: Thu 01 May 2025 16:29:20 +0000
ROA not before: Thu 01 May 2025 16:29:20 +0000
ROA not after: Wed 30 Jul 2025 16:29:20 +0000
asID: 22773
IP address blocks: 98.171.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:6c:0e:b6:f4:19:fb:12:79:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:20 2025 GMT
Not After : Jul 30 16:29:20 2025 GMT
Subject: CN=648f4b1c-5d06-418d-8706-3ecd9fad1ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:a4:ca:9b:14:52:d0:40:8e:6c:14:36:3e:
6e:f0:9b:f4:76:b3:fd:cc:68:42:ae:0b:1d:a2:ed:
34:52:7f:dc:23:aa:59:e0:31:06:ad:8d:87:57:5f:
38:14:60:95:b5:9d:cb:08:6e:85:7e:87:5f:b1:09:
4e:40:b7:25:33:14:56:8e:82:57:16:42:08:23:25:
a8:32:6f:f1:c5:89:99:52:7f:f3:e1:af:33:8a:08:
0a:ef:ef:0a:4e:7c:a7:cf:14:f7:32:8f:9a:14:5b:
6d:e2:39:91:ba:1f:45:cb:52:fe:6b:3a:6c:ea:29:
0a:42:ae:08:6f:a9:9d:36:4b:1e:a3:08:1f:d7:1b:
6a:10:41:cb:da:84:50:49:71:64:52:68:7f:7d:54:
0f:bc:ad:f6:b5:14:82:28:5b:23:fd:75:03:9c:a6:
63:06:c9:94:2f:18:4e:7f:1d:e2:7e:59:75:47:55:
44:06:e4:e2:c2:be:d3:6a:27:1a:2d:88:d2:ce:4d:
bd:6c:ea:da:66:79:25:b4:a4:35:59:6a:9f:7c:db:
45:f0:03:52:00:f3:89:2c:e1:d2:93:f0:f7:bc:1e:
78:fd:46:a5:71:75:2f:7e:c2:f8:e0:da:a0:87:e5:
2d:63:3a:d8:88:3e:48:ae:47:10:03:05:8a:3e:af:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9C:C5:CF:92:B6:D5:90:2E:36:57:91:0A:06:FC:16:3A:2E:4E:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/932a1f76-5b45-3c70-8fdd-519bef71fa65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.171.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:31:10:6a:b2:dd:29:e6:9f:bd:f7:b0:20:79:34:1f:d0:d5:
c5:1d:cf:a8:95:73:70:b9:dc:d5:02:6b:71:e6:2b:90:ad:20:
c2:b7:e6:a6:18:33:f4:39:d9:50:e0:e3:2e:cb:22:f8:be:61:
47:39:04:b9:55:39:e9:55:00:3f:41:84:a4:36:28:40:05:e9:
31:c4:b5:26:8c:79:e2:55:94:b5:1b:16:5d:56:96:31:16:89:
2a:b2:53:db:20:92:e2:09:c8:85:07:5f:56:86:40:e9:1a:c8:
e6:a8:a8:c4:ed:61:b9:80:1b:fe:65:26:a7:a4:8d:30:85:61:
14:be:5c:85:49:17:97:a3:8c:ae:4d:69:45:fb:4f:43:a7:b2:
72:ae:44:87:4a:16:0d:4e:76:b4:d3:ee:ed:bd:87:b6:fd:ae:
b0:78:30:4c:93:16:c0:2f:08:ae:40:43:db:ee:17:30:8f:2f:
9e:1f:34:d9:0d:de:c8:9e:d9:ed:e9:73:16:73:14:3e:f3:02:
9a:c3:39:68:ce:db:4c:90:cf:bd:2e:5d:0b:64:77:03:6b:8b:
ef:61:24:7e:be:d3:4f:56:3d:56:a2:73:49:0a:88:67:30:33:
e5:22:d8:34:ae:0a:d5:b1:0a:12:47:31:f1:29:1f:d3:3e:8f:
57:57:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:43:46 2025 by rpki-client