Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12a851dd-e1b9-309e-bad2-f2a9c2a66b8c.roa
File: 12a851dd-e1b9-309e-bad2-f2a9c2a66b8c.roa (raw, json)
Hash identifier: XVmXyCKT9x+i2plibv7UUVwL6laF4m8rg4vC4iuUsZ4=
Subject key identifier: 2D:81:13:9F:12:68:AA:AE:18:F9:E5:88:60:57:C4:DA:E7:D9:E1:E1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDB35BF132B550B337D7F0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12a851dd-e1b9-309e-bad2-f2a9c2a66b8c.roa
Signing time: Thu 01 May 2025 16:21:50 +0000
ROA not before: Thu 01 May 2025 16:21:50 +0000
ROA not after: Wed 30 Jul 2025 16:21:50 +0000
asID: 22773
IP address blocks: 68.106.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:b3:5b:f1:32:b5:50:b3:37:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:50 2025 GMT
Not After : Jul 30 16:21:50 2025 GMT
Subject: CN=173cb5d9-f882-4b80-a8f0-410f3c3aa7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:68:1a:d3:a6:6f:71:da:0b:99:fd:c1:c8:
78:58:b1:e2:e3:cb:56:9d:a7:a3:90:7b:dd:8b:b7:
01:dd:56:98:34:df:29:26:51:48:b7:6f:c8:23:44:
0c:ed:6b:ce:5d:cd:84:d1:71:27:09:19:51:5d:87:
fe:ba:c5:c0:2c:e2:11:1d:0c:5b:ec:ac:67:fd:f4:
40:9c:65:6b:1c:52:fd:34:2d:37:d9:1b:c8:d0:d9:
1c:3e:29:f6:00:96:4a:1a:c0:84:06:18:e7:ed:df:
dc:16:e9:8e:b3:af:d9:07:7f:2a:ce:22:cf:b8:b9:
cf:ef:af:82:33:98:b4:cc:f3:a6:d1:bb:ce:d4:de:
d4:be:be:27:93:89:12:1d:10:49:87:e7:5d:1d:8c:
35:c3:c1:41:fc:9f:04:28:0d:ce:a2:de:41:b4:d4:
92:1e:53:2b:ee:b0:be:8d:05:f8:f2:cb:38:0b:94:
11:f7:5a:97:22:c9:fb:45:c2:c7:f4:33:19:80:c3:
c7:ad:ba:0e:f2:06:65:3d:7c:71:41:a7:85:8b:cb:
24:55:76:40:73:69:4e:af:fa:be:5e:1a:18:d0:0c:
ef:27:c2:97:17:e5:05:d1:8a:01:ed:fe:6f:6e:85:
bf:3e:33:fd:65:6b:1b:a1:5f:ba:b9:af:4c:d8:a5:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:81:13:9F:12:68:AA:AE:18:F9:E5:88:60:57:C4:DA:E7:D9:E1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12a851dd-e1b9-309e-bad2-f2a9c2a66b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.106.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:fe:60:4a:5e:74:62:3b:62:96:ce:c0:9e:7e:38:c2:c7:c5:
cb:ef:ea:1a:76:21:e2:99:0a:ae:80:b1:b4:f7:3e:a7:ee:ba:
d1:07:63:32:0d:21:b5:99:96:54:1e:f9:6d:64:f4:70:44:43:
65:3c:55:d2:f4:a5:85:28:df:94:32:03:47:0d:e1:38:38:d7:
20:2f:2b:57:e5:86:c2:3f:c2:0a:76:6d:2e:da:b1:ca:a8:cb:
20:93:ae:60:b7:fe:8d:2e:5c:11:97:4e:da:d6:4d:95:54:b9:
5f:e5:88:cc:05:89:ad:23:98:bd:2b:07:3b:51:89:2d:c3:6a:
49:f3:34:fb:62:39:14:20:b5:b5:35:60:c4:f3:4f:52:f7:74:
1b:12:c8:59:f9:17:85:52:7c:25:2c:e9:90:f1:84:9d:26:a2:
10:3b:d6:f8:b1:3b:92:67:d8:20:d0:e1:8d:3c:ea:dc:ac:e2:
ed:6b:7d:e8:71:d7:c8:d7:4b:64:1e:80:ff:c9:b0:c3:d5:ad:
05:ef:5d:10:d3:47:51:6a:32:ce:c3:4c:ed:b6:da:cb:bf:ff:
74:0e:78:22:b3:07:13:91:b6:6f:4b:59:42:a0:f5:de:00:79:
44:df:f9:0b:39:5c:02:58:b1:a3:1a:b3:b8:4e:3a:f2:ee:52:
e9:99:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:10:02 2025 by rpki-client