Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ed6c540-2b5a-3fa2-816f-a4c745bceb34.roa
File: 1ed6c540-2b5a-3fa2-816f-a4c745bceb34.roa (raw, json)
Hash identifier: Ukv7OtHC9ZnsLx8nM1crN8ELl1NcyDa/V2ZkXNjLRIw=
Subject key identifier: C1:6D:C8:98:F9:5A:D8:C3:7F:4D:47:BF:F1:A1:8E:51:4D:09:C5:B5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD36BA163874B97F625880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ed6c540-2b5a-3fa2-816f-a4c745bceb34.roa
Signing time: Thu 01 May 2025 16:20:51 +0000
ROA not before: Thu 01 May 2025 16:20:51 +0000
ROA not after: Wed 30 Jul 2025 16:20:51 +0000
asID: 22773
IP address blocks: 68.3.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:36:ba:16:38:74:b9:7f:62:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:51 2025 GMT
Not After : Jul 30 16:20:51 2025 GMT
Subject: CN=53434ad4-6a1d-4de8-83c8-1dcb88eac587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:e9:99:06:94:33:d2:44:a1:39:d4:1c:06:
b5:57:b5:fb:63:d3:d2:ae:4c:d3:f2:7b:58:06:a1:
7a:46:11:5b:6d:01:e1:a5:a1:26:f3:ee:3c:85:12:
e0:e3:2c:00:bd:f4:cf:6f:95:a8:b3:c7:43:4d:a0:
aa:60:d6:da:3c:40:ca:f9:c5:c7:0e:19:4c:3e:07:
35:eb:0a:22:c3:d8:ed:bc:04:6a:7d:dc:95:e4:ac:
3b:b7:84:75:6d:29:55:cb:05:e4:66:d5:fb:6f:3e:
fa:bb:af:82:7c:15:e5:3a:84:24:77:3d:36:2d:67:
41:a1:dd:52:7d:f5:24:04:de:79:83:89:43:7e:a0:
6c:3d:e9:09:51:9e:ed:3e:f4:2e:a8:51:ba:ac:c7:
40:1f:4c:40:17:fe:e8:dc:c7:18:a0:27:3c:90:ec:
2a:1c:67:99:fc:5f:35:94:bc:3a:ed:c2:d5:69:b9:
e7:63:75:3e:fa:99:5c:95:00:a4:f4:6e:63:04:b2:
10:37:34:07:17:7a:2a:d1:a8:37:e8:67:e7:96:f4:
df:49:b4:b3:35:e3:19:17:2e:2c:26:74:20:ea:de:
4a:ca:35:62:e1:eb:ee:6b:83:24:e2:3a:44:a4:28:
58:15:ba:76:4e:1b:d2:9f:7d:2e:8f:42:be:ff:e1:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:C8:98:F9:5A:D8:C3:7F:4D:47:BF:F1:A1:8E:51:4D:09:C5:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ed6c540-2b5a-3fa2-816f-a4c745bceb34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.3.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:93:77:6b:fd:17:1e:b6:6f:b9:98:ab:19:69:16:da:65:53:
c5:f4:47:49:a3:5c:d6:a2:58:04:9f:e6:c2:4a:96:97:6c:ba:
da:3e:89:5b:a4:34:73:30:c6:5f:fd:46:50:91:9c:83:b4:52:
cf:1c:c0:42:cf:7f:49:79:3b:de:6d:08:82:cf:4b:56:01:b8:
aa:0a:8e:81:a7:fa:16:4d:78:3f:b4:ca:3c:b2:3f:19:d7:93:
05:56:d1:1e:81:a5:7a:59:47:ce:75:cc:22:4c:e2:f3:b9:20:
7a:15:eb:55:70:47:e6:b0:6e:f4:68:4e:e7:b4:9f:4c:56:4e:
92:49:67:4d:f9:2f:4f:f2:38:01:f6:1e:12:6c:30:fb:17:fc:
1c:09:ff:b7:8e:3c:ea:90:fe:16:3d:6a:0c:e6:7c:51:5f:b3:
31:cb:a9:95:e5:93:bb:b8:5e:37:ad:37:d1:cf:84:08:75:c2:
f9:14:45:67:66:7a:74:e7:8c:14:2f:98:5f:39:35:e3:17:73:
96:62:bc:9b:c1:7d:52:fd:5c:f7:73:ca:f7:d2:d4:38:6b:03:
0f:d8:76:16:f0:c8:53:65:47:ed:25:61:b2:1b:be:cc:a6:ac:
d3:93:17:cd:85:72:41:fb:ab:f7:0c:cd:4a:30:71:d4:2e:07:
be:41:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:00:16 2025 by rpki-client