Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd60f55f-62d0-36f2-86d9-8f06f6b7c662.roa
File: dd60f55f-62d0-36f2-86d9-8f06f6b7c662.roa (raw, json)
Hash identifier: MVQhYB6A75u6H2SMSLr4fOyzXegtZ8/D4gqJYR0CXFI=
Subject key identifier: 72:64:87:0F:E3:23:A8:76:A2:10:63:93:50:B2:67:55:E2:EC:89:AA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DF49FDFEF4BAB38095A140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd60f55f-62d0-36f2-86d9-8f06f6b7c662.roa
Signing time: Thu 01 May 2025 16:25:02 +0000
ROA not before: Thu 01 May 2025 16:25:02 +0000
ROA not after: Wed 30 Jul 2025 16:25:02 +0000
asID: 22773
IP address blocks: 70.190.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:49:fd:fe:f4:ba:b3:80:95:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:25:02 2025 GMT
Not After : Jul 30 16:25:02 2025 GMT
Subject: CN=8c7a31c5-dcb4-4bb7-8546-e51b109a8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:30:1f:55:c3:1f:98:42:66:93:f9:e2:36:
89:ef:63:d7:19:ea:30:3e:66:ce:e5:1b:86:d2:5d:
71:9f:f3:2e:04:0b:8a:d9:e4:91:43:52:ec:d8:37:
ac:3b:6a:a5:1a:23:73:cb:a5:16:54:a6:e0:81:72:
24:06:bf:19:21:96:a8:1d:a2:a2:35:a5:63:26:68:
fa:be:b2:0a:26:c2:a5:39:3a:28:a5:c2:eb:7e:08:
16:69:91:23:80:1c:62:ce:47:c9:b1:5f:9f:06:90:
46:56:07:a6:97:9f:77:e3:57:e3:e1:87:cc:f8:b4:
97:a6:07:7b:77:93:ec:88:1e:45:62:79:9a:2a:86:
f2:ab:68:28:1c:5c:dd:cb:ad:e7:15:58:3f:8f:ed:
e4:8e:04:6a:76:69:d5:33:03:33:04:b1:ac:b0:4c:
97:92:5b:a6:c3:05:38:e5:ca:f0:2a:c8:7c:06:4b:
c0:47:60:94:3c:f2:7c:00:f2:45:2c:1e:86:c7:2a:
36:a6:99:60:3e:c9:4d:a0:91:bc:f1:e3:89:2a:39:
12:21:fd:1e:c9:8a:a2:76:db:d3:23:a2:b5:5f:4d:
13:ce:86:66:77:cb:21:a9:38:00:3b:d8:57:c6:fd:
cb:41:2b:5f:b3:7d:48:6a:21:8b:2a:c9:18:8b:90:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:64:87:0F:E3:23:A8:76:A2:10:63:93:50:B2:67:55:E2:EC:89:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd60f55f-62d0-36f2-86d9-8f06f6b7c662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.190.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:08:75:9c:a4:85:0b:87:7a:5a:f8:d3:01:c7:70:08:d6:09:
0a:2c:5d:2c:b8:00:be:08:ab:6a:97:af:1f:34:b2:c7:1e:77:
e2:77:2c:2c:78:20:07:75:be:0b:34:22:cf:44:ac:95:66:96:
8a:84:4c:d2:90:1a:84:27:60:02:e5:ed:d3:5e:fb:c5:39:1e:
82:d1:ee:2a:97:c4:53:4e:69:90:12:5b:8b:38:55:14:75:75:
59:c5:d3:e7:99:dc:df:2a:f7:e3:46:17:ac:2e:5f:94:48:0b:
e6:e4:97:61:8d:22:46:84:07:f2:d0:55:05:28:78:cd:7f:f7:
ff:52:ea:fb:1f:92:46:c4:af:3a:76:4e:ca:25:66:6a:20:0d:
4a:30:4e:56:7d:23:98:f7:f9:a6:c0:d5:3e:90:b6:4b:19:12:
46:d0:2d:90:be:68:51:ea:13:90:cb:5e:f7:b1:9c:01:1d:ea:
e3:f9:32:54:88:f0:45:d5:50:00:df:5c:78:ef:b3:75:28:b2:
a5:c9:e6:38:64:cd:bc:9c:27:4a:d8:7d:d2:27:6d:2c:ee:03:
01:03:b0:a0:47:a0:71:b2:cf:d8:65:b1:b5:83:c1:37:0f:e2:
f8:88:49:29:0a:c3:4b:43:42:d3:38:05:66:26:34:50:23:80:
81:7e:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:22:44 2025 by rpki-client