Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ed700a5-c5f2-39ba-a23c-f56d71eaa970.roa
File: 1ed700a5-c5f2-39ba-a23c-f56d71eaa970.roa (raw, json)
Hash identifier: SPbVzmGh/8Wa0y+R12nSiK1pS/TOEddPT8eOFxLBLGE=
Subject key identifier: D8:F8:FE:9C:22:A4:C8:BF:85:99:BE:92:51:68:CA:DB:3A:DF:27:3E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE0BB35C0AF0C65E888A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ed700a5-c5f2-39ba-a23c-f56d71eaa970.roa
Signing time: Thu 01 May 2025 16:22:32 +0000
ROA not before: Thu 01 May 2025 16:22:32 +0000
ROA not after: Wed 30 Jul 2025 16:22:32 +0000
asID: 22773
IP address blocks: 68.228.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:0b:b3:5c:0a:f0:c6:5e:88:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:32 2025 GMT
Not After : Jul 30 16:22:32 2025 GMT
Subject: CN=586a4f2f-c3a6-42b6-83c4-52e377088d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:21:5e:a0:de:49:2e:d8:1a:4d:b1:6d:99:
6e:cd:88:6e:9e:30:c9:77:12:a2:0e:12:85:cf:80:
81:52:22:ac:69:3c:21:63:35:11:93:4e:bb:46:b7:
a7:e2:47:8b:47:1e:8e:84:f6:1b:1f:19:b3:ef:e6:
35:10:44:c3:f5:62:c6:74:d3:8a:1a:1c:13:f7:5a:
c2:cb:b1:6c:af:02:60:74:ca:9e:fb:a4:94:59:a3:
f0:5c:d7:e4:73:9d:7b:79:de:af:90:b1:36:9c:c2:
62:0d:88:44:c0:52:8f:3a:8b:df:c8:ee:81:54:10:
66:ce:7d:19:39:f6:82:11:e0:a9:80:2e:fc:e1:5d:
ab:fd:4d:a9:c9:fa:a8:30:aa:8b:9e:fd:28:2f:67:
d1:c4:d3:94:6e:fc:e0:75:03:20:c6:d2:b8:a4:5f:
ba:95:de:8a:bd:70:2a:1b:f9:dd:e9:2d:56:57:db:
82:5a:d5:f7:8c:e7:65:4e:28:52:35:aa:40:59:54:
a6:a9:bc:5e:ce:53:5e:bf:3a:b1:92:fc:57:a4:38:
16:fb:6b:b7:7f:1b:e9:19:f6:00:8e:b6:8e:a6:6f:
cd:e4:e5:84:cb:df:c2:2d:31:95:1c:9c:b7:41:e0:
3d:72:98:f9:37:12:d6:11:78:4b:87:12:18:77:ef:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:FE:9C:22:A4:C8:BF:85:99:BE:92:51:68:CA:DB:3A:DF:27:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ed700a5-c5f2-39ba-a23c-f56d71eaa970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.228.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ad:97:9b:eb:4e:52:4a:cd:75:54:14:73:9d:01:9b:b7:14:
3a:81:65:9b:41:7b:b2:5b:43:f7:7c:05:db:5f:11:eb:dd:06:
67:2d:c2:9d:7f:d6:a2:54:e6:92:12:19:0b:e4:3f:31:2a:62:
e7:b8:c5:05:7a:ce:15:57:6b:81:85:5e:84:5c:13:a3:a7:80:
0c:cc:fa:b6:03:5d:6c:d9:7b:cd:fc:2f:aa:15:e4:f0:73:f5:
ec:65:5a:90:20:47:70:9c:98:b2:4a:fa:b3:8c:dc:24:cb:b6:
45:bf:80:74:5d:6c:47:0f:43:5b:03:aa:78:3f:c6:64:18:cf:
ab:b3:a8:da:3f:5e:ae:b3:79:1d:0a:7d:ca:75:d3:52:6c:07:
81:25:cc:c8:0e:39:52:ac:df:17:27:23:f8:0a:8d:7e:1b:96:
6e:69:59:9e:35:f6:76:04:10:14:bb:c5:fd:65:e8:ff:ce:2b:
25:87:92:0e:66:bf:ce:54:36:d3:b6:fe:07:89:11:3a:31:4c:
4f:19:c3:57:20:16:57:48:1b:55:1c:8d:de:dd:9c:59:1a:56:
4a:a2:c9:bf:6f:35:42:c2:7e:3e:ab:8d:b5:90:2a:25:5c:4a:
35:84:b8:4f:4e:bd:5e:12:07:ff:36:2d:5e:c6:96:d2:1c:6a:
22:81:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:50:36 2025 by rpki-client