Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee9d670e-d79e-380a-a81f-7d8e9075128a.roa
File: ee9d670e-d79e-380a-a81f-7d8e9075128a.roa (raw, json)
Hash identifier: 327OxT9XjmdO6P94dhm9z+N6dMt+Hfo2KZVjE9CvLSo=
Subject key identifier: B9:41:20:22:28:04:44:D7:45:81:EB:69:9B:1C:2C:C3:4C:93:34:DE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FACEA585532D935E6E17B0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee9d670e-d79e-380a-a81f-7d8e9075128a.roa
Signing time: Thu 01 May 2025 17:20:29 +0000
ROA not before: Thu 01 May 2025 17:20:29 +0000
ROA not after: Wed 30 Jul 2025 17:20:29 +0000
asID: 22773
IP address blocks: 72.193.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 22:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:ce:a5:85:53:2d:93:5e:6e:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:29 2025 GMT
Not After : Jul 30 17:20:29 2025 GMT
Subject: CN=5a6ad2b0-7cd7-459b-83ae-9e8ece127c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:af:e6:32:40:cf:f3:78:b2:00:3c:c5:b6:
b2:8a:f4:39:03:7a:85:94:1e:9b:cb:c9:f6:28:a9:
fc:74:fa:0f:62:3c:5c:38:ca:c7:59:21:1b:e4:6f:
ef:77:4a:b7:db:f1:99:0e:b5:d5:aa:24:01:ef:d8:
06:df:cf:94:c5:31:93:83:58:53:cd:95:60:cc:2d:
bb:11:93:68:20:3c:11:f8:32:21:22:ec:a2:cb:f5:
c5:02:2b:30:f3:b0:84:4c:5c:2f:e2:a7:35:c6:4c:
dc:79:5b:d9:a8:fc:54:57:aa:fb:76:66:53:3a:70:
f5:0e:48:7a:b4:6a:92:69:81:8b:bb:11:e2:c7:07:
35:31:4e:58:8d:f8:41:39:cb:63:19:f0:ad:95:a5:
8a:6f:29:75:40:a4:dc:31:1d:07:56:53:40:3d:45:
61:a7:ea:d8:63:46:49:1a:72:73:f6:b3:2b:94:39:
9f:66:8c:e8:02:bb:96:36:bb:75:fc:e5:91:33:dd:
66:0f:73:00:ef:24:29:b7:d4:b3:f9:9e:38:f9:a0:
b3:64:92:32:b0:91:46:e0:29:f1:2d:28:37:bd:8e:
f9:25:0a:1c:db:22:8e:d3:b0:f3:6d:64:38:85:9e:
5f:0a:02:3a:76:17:fa:0d:e5:a9:70:b6:05:bf:5c:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:20:22:28:04:44:D7:45:81:EB:69:9B:1C:2C:C3:4C:93:34:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee9d670e-d79e-380a-a81f-7d8e9075128a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.193.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0f:9f:93:22:10:01:0c:57:9d:e1:02:4d:54:5a:da:c0:82:
d8:8f:33:6c:f5:f0:7f:80:93:a0:24:a3:8d:38:07:ca:6a:f3:
93:ef:94:86:d2:ea:bb:07:32:e9:1d:9e:b2:b3:49:2e:95:c6:
95:be:e5:59:77:a9:a5:31:51:e3:86:ae:72:d6:ff:62:a8:31:
04:95:fa:4c:00:e1:db:71:71:8c:73:85:7f:18:11:28:6d:db:
84:b2:fe:e1:a4:b6:3e:0e:3c:ca:78:d7:45:c8:0a:ae:c9:3e:
c5:7b:a5:51:4c:f5:8c:ea:01:5d:fb:4d:f6:a4:88:f8:61:c9:
24:56:93:e1:fb:9a:c0:e2:a0:21:61:fb:28:7d:e6:65:82:18:
47:2f:5c:d5:f0:b0:43:bb:ec:4d:c6:6e:f5:23:b9:a9:7a:fd:
2b:37:00:49:81:29:5c:f4:b9:41:b2:23:2f:5b:2c:3e:0e:0b:
fb:c9:6a:3e:d4:72:ad:9a:c8:44:c5:fb:2d:a6:77:34:2e:fa:
cb:c0:06:3f:8b:bd:9e:07:56:40:a8:61:9f:55:2a:da:b8:15:
d9:f4:e4:21:b9:2b:a4:4e:fa:e2:90:41:c5:ef:74:22:45:f3:
7c:75:40:05:89:0c:15:e8:9e:38:94:82:f4:52:e5:d9:a3:4f:
28:8b:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:23:23 2025 by rpki-client