Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b5f1470-d8ee-393d-b4b4-a10337c114d2.roa
File: 2b5f1470-d8ee-393d-b4b4-a10337c114d2.roa (raw, json)
Hash identifier: ceWRUI8IB1lzjJCS53mmcyK8Zfrb0CuQNR/07/CXInk=
Subject key identifier: 31:A7:12:DF:C4:97:2A:B5:87:47:B4:B5:1C:C2:94:5D:40:FD:95:AE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9F00BDCE50A5897008960
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b5f1470-d8ee-393d-b4b4-a10337c114d2.roa
Signing time: Thu 01 May 2025 17:18:44 +0000
ROA not before: Thu 01 May 2025 17:18:44 +0000
ROA not after: Wed 30 Jul 2025 17:18:44 +0000
asID: 22773
IP address blocks: 68.224.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:f0:0b:dc:e5:0a:58:97:00:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:44 2025 GMT
Not After : Jul 30 17:18:44 2025 GMT
Subject: CN=86dcc62b-7cf3-48de-8d44-ddb29f32b491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:e6:65:9e:a2:75:98:cb:27:e9:0b:bb:5a:
10:25:4c:8a:79:a7:fd:e8:9a:f2:a3:d4:c3:d7:e8:
7d:c8:f9:b9:93:f0:39:90:aa:f9:ed:a4:05:c5:01:
17:2f:43:cc:60:33:0d:09:a5:f0:34:92:49:15:0b:
9d:b9:aa:40:c6:32:72:ba:7f:d7:fa:b0:ac:ee:4e:
92:0b:a0:bb:88:16:5c:71:1c:a6:45:f2:49:d8:7a:
21:59:62:a0:c3:d3:d0:c1:28:7d:e9:24:81:b2:f0:
5c:c9:97:8e:d9:36:cf:49:da:49:8a:83:27:37:56:
ed:c1:88:d0:6c:35:cc:aa:59:bc:3c:88:8a:fc:20:
73:b4:64:a6:4a:9f:81:01:ac:15:59:ab:d8:90:be:
65:2a:ea:a3:8d:61:13:9e:20:56:80:2d:e2:80:23:
4a:a7:d1:43:20:5b:e6:8e:68:68:9e:4a:44:57:af:
94:0e:f9:76:92:9c:54:2c:3e:b8:b1:2f:18:af:b2:
94:cb:c1:e8:54:5a:1f:59:9b:2f:8e:a4:04:d7:12:
93:80:29:fb:d7:04:9b:ed:c2:6c:6f:2a:5e:16:92:
42:01:e2:3d:c3:d7:c5:8b:1b:4c:9d:12:e2:12:e0:
41:29:df:04:22:09:52:c9:9e:38:8a:c0:0a:f0:70:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:12:DF:C4:97:2A:B5:87:47:B4:B5:1C:C2:94:5D:40:FD:95:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b5f1470-d8ee-393d-b4b4-a10337c114d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:00:1a:a8:03:45:a3:83:a7:d2:3d:05:0f:4e:da:f0:5b:0b:
51:51:23:52:13:bb:52:72:8f:64:4e:84:59:aa:61:3e:87:54:
5d:7a:ab:dc:48:a8:a6:ee:2a:3a:0c:c9:90:5c:2f:5a:dc:4e:
0c:25:e1:1e:e7:e2:3b:0d:18:51:ef:86:b8:cc:03:bd:80:93:
2e:a2:81:2d:80:f2:70:ec:e1:9c:e3:0c:b9:80:9f:ff:60:f5:
18:59:df:25:bc:7c:7c:16:0f:cd:36:db:49:33:50:43:05:56:
38:9f:68:04:f6:67:e0:29:7c:df:ab:ce:6d:a7:41:07:a3:bc:
f5:50:77:6b:fd:c0:e5:dc:ad:47:ca:2a:88:d7:83:89:9c:bc:
e8:8d:4a:95:75:88:b6:f3:bd:ca:0d:8f:cd:2d:48:77:80:09:
bf:a0:3c:d3:67:cd:32:e9:83:a5:08:34:97:11:77:f2:2c:df:
d4:75:fb:81:8b:87:79:d1:98:af:59:c2:10:bf:5b:2d:04:16:
aa:cb:2f:65:cf:a2:17:ff:ec:3b:4b:19:ea:cf:79:b1:49:74:
42:f2:2a:c1:67:ea:4c:0c:45:9b:62:ae:28:21:b8:5d:1f:06:
49:2b:93:95:d9:93:9e:62:0e:3f:1f:5f:e3:46:f6:18:83:85:
ca:7f:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:55:40 2025 by rpki-client