Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a8f7a9a-944c-3b1e-b122-e02dd9ce0d99.roa
File: 2a8f7a9a-944c-3b1e-b122-e02dd9ce0d99.roa (raw, json)
Hash identifier: mWl5qm8BwW4tRmfVzcSSI+j0145NoulebB9jGJXRelI=
Subject key identifier: DD:D3:EC:6A:08:94:3C:3E:BD:7F:16:1E:3C:B1:2A:75:F4:42:83:45
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA00881D6FEED9A4C28660
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a8f7a9a-944c-3b1e-b122-e02dd9ce0d99.roa
Signing time: Thu 01 May 2025 17:18:52 +0000
ROA not before: Thu 01 May 2025 17:18:52 +0000
ROA not after: Wed 30 Jul 2025 17:18:52 +0000
asID: 22773
IP address blocks: 68.224.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:00:88:1d:6f:ee:d9:a4:c2:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:52 2025 GMT
Not After : Jul 30 17:18:52 2025 GMT
Subject: CN=683bd476-fcc3-4613-bb06-89d1fe1fe690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:13:fe:a3:71:a9:49:54:af:7b:db:5d:47:
bd:92:c0:4d:44:bc:a7:41:e7:40:17:7e:1c:2a:79:
6b:a7:78:7d:87:fd:9c:f4:19:84:0d:26:2e:4e:a8:
c6:60:e7:94:fd:41:02:21:48:a8:53:37:61:a0:2e:
19:7d:1b:a9:09:1b:d5:b6:be:44:2d:b3:64:53:e6:
18:6e:67:34:95:c3:e6:8c:9a:87:a3:bc:dc:59:b1:
63:3e:e3:1c:00:51:30:99:79:db:12:f0:7b:7a:09:
64:48:c4:51:d3:5e:da:86:f3:54:4e:ed:69:81:74:
ac:3c:34:7f:47:b1:b7:ac:fa:8b:50:75:87:37:6d:
50:bc:e2:2a:42:58:10:77:d2:2e:6b:e5:72:83:43:
7a:8a:e3:2c:2e:73:42:89:70:4e:91:69:e4:e6:d3:
47:66:bf:83:26:43:df:26:64:5f:40:f2:dd:b9:99:
d0:8d:a1:c6:35:ea:e6:63:9c:d2:30:f3:e0:36:34:
56:70:9e:b3:c4:40:9a:9b:d8:73:dd:1e:0b:a5:01:
7e:b1:f1:df:5e:de:d1:7c:8c:57:14:09:9d:ad:bd:
ca:fa:6f:df:19:a3:ae:2f:61:18:77:89:7f:48:dc:
ed:d1:a3:7d:85:f1:ae:c1:f4:fa:a5:f0:7c:95:36:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D3:EC:6A:08:94:3C:3E:BD:7F:16:1E:3C:B1:2A:75:F4:42:83:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a8f7a9a-944c-3b1e-b122-e02dd9ce0d99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:92:e7:d0:18:fa:78:a4:4f:23:9a:02:6d:03:f9:50:97:a9:
95:f0:15:62:ba:5d:c9:3c:ab:4d:58:5b:65:17:f4:9e:00:29:
02:4e:bc:45:2e:ba:21:4e:07:3f:36:7a:dc:8c:5a:51:45:a7:
4b:46:98:cf:f5:ac:cc:e2:05:c7:7f:31:3a:3a:1c:d9:5e:9e:
69:85:11:4a:39:07:81:90:08:07:cb:b4:cb:0d:dc:b8:57:b6:
eb:b7:4e:1b:85:52:6f:6f:84:67:86:46:48:cf:de:a2:31:0f:
84:cb:41:cd:ff:ac:bb:18:b3:e0:14:67:3b:d0:41:fc:16:ec:
42:54:33:23:ad:a2:a2:13:4d:b8:ac:6e:0a:6d:28:a1:6e:4e:
20:49:31:dd:25:54:88:4d:ec:53:c9:de:bf:87:b2:f6:f0:77:
17:ab:cc:fb:7c:e4:c9:bd:53:fe:ae:3e:6d:3b:ed:e9:f5:c8:
a4:09:8e:84:22:de:47:00:22:17:3c:46:1f:fe:dc:0f:f7:30:
02:a8:9e:9e:1d:c2:1c:24:5d:df:f2:d5:d4:14:8b:f9:12:eb:
a8:69:bd:14:5d:4f:f3:83:b7:0a:c1:a9:50:ce:f5:e0:05:3c:
ef:ba:22:00:39:0c:33:2b:99:ae:7d:a9:0e:62:91:2d:70:b8:
56:b4:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:21:02 2025 by rpki-client