Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32cbb7a3-0dfc-3b70-b412-529ec48bf20e.roa
File: 32cbb7a3-0dfc-3b70-b412-529ec48bf20e.roa (raw, json)
Hash identifier: GvJBb2C0rvzPNtaP3x7zYbikcma4emLsKULiXCcLOAg=
Subject key identifier: A3:5F:FF:7A:24:6A:98:AC:C2:D9:F8:64:04:7E:AB:07:EF:BA:67:69
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDD1981AE541B567450E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32cbb7a3-0dfc-3b70-b412-529ec48bf20e.roa
Signing time: Thu 01 May 2025 16:22:04 +0000
ROA not before: Thu 01 May 2025 16:22:04 +0000
ROA not after: Wed 30 Jul 2025 16:22:04 +0000
asID: 22773
IP address blocks: 68.108.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:d1:98:1a:e5:41:b5:67:45:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:04 2025 GMT
Not After : Jul 30 16:22:04 2025 GMT
Subject: CN=66ace66d-93d2-4ec9-9dfc-9174c4939231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:c2:2c:ce:db:64:c7:87:91:41:b5:8e:f0:
6d:aa:53:6c:b0:98:4b:aa:05:42:64:c3:d7:d2:e8:
6c:57:33:a3:04:23:89:66:71:d8:dc:3b:57:f6:5d:
a0:de:42:a1:52:3f:7e:00:68:1b:d4:51:08:8b:4a:
ed:9e:6f:46:9a:bd:6b:c7:30:77:ed:03:70:71:4c:
83:f3:09:5a:1a:2d:fb:84:a2:07:82:77:aa:8d:50:
2c:ff:7f:be:89:a0:51:15:9f:25:10:13:1e:77:3a:
c0:6a:8e:11:ca:be:a0:eb:6b:eb:fc:a2:f4:ab:f0:
28:36:ac:ab:e8:2c:3d:b3:fc:5d:ec:80:c7:76:92:
9a:99:c5:05:de:47:4a:41:85:d3:3c:49:03:ca:09:
cb:20:77:d0:9c:79:2d:d5:07:24:07:7e:89:14:3d:
5e:fd:c3:65:78:28:91:02:9e:c9:d7:ac:4e:80:78:
c8:12:0a:65:23:60:f9:bd:e2:d4:23:02:60:8f:4f:
fc:d8:d7:35:e1:de:76:20:6d:2b:c7:da:8a:7c:0d:
c2:07:39:1b:f1:62:42:1a:0b:8a:bf:4e:62:56:5e:
d7:0e:f6:58:e6:4e:7c:df:42:da:81:24:50:fe:6f:
c3:b6:1b:4a:12:ac:37:52:34:d2:77:d0:ed:6a:0c:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:FF:7A:24:6A:98:AC:C2:D9:F8:64:04:7E:AB:07:EF:BA:67:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32cbb7a3-0dfc-3b70-b412-529ec48bf20e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:84:1d:2b:b4:0f:a7:19:2f:1c:5b:99:4e:d6:aa:d0:b6:62:
65:6b:17:94:4f:55:49:60:b1:d4:26:f7:5e:93:c7:4f:08:f8:
ea:80:53:1e:94:e3:62:a5:00:5f:7b:29:7f:c8:b4:ef:13:52:
e8:fa:f3:a2:b0:9f:51:0c:00:54:0f:4a:0b:2e:89:78:1a:4b:
6a:67:de:69:a8:41:e3:75:e6:30:0e:00:ac:b2:eb:a3:a5:2c:
be:3f:b6:1f:4e:f8:60:4b:5c:da:ad:23:98:e7:21:af:03:13:
99:b5:c0:28:48:d1:87:67:71:d7:5f:50:e0:65:41:61:82:14:
9b:99:39:19:f5:a9:07:ed:9e:66:f9:a5:ea:89:91:31:ab:b6:
24:ba:4e:5f:62:ee:a8:aa:bd:8b:3a:7a:38:6b:1e:e7:15:85:
c9:f2:94:46:fe:3a:5a:f5:5c:e2:06:4f:c9:91:4b:0e:37:ce:
25:4a:73:c4:3a:3f:f0:8d:64:34:58:4f:7d:e5:35:92:a6:11:
d0:32:46:1a:b5:8b:a7:40:77:20:4a:36:c9:fb:bb:85:60:9b:
13:5d:af:55:e0:89:c9:b1:ab:3c:29:50:ac:fe:fb:54:29:c2:
73:31:d1:83:97:25:61:ff:87:01:82:84:50:a7:40:d8:ad:22:
54:3f:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:22:04 2025 by rpki-client