Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3503ed0c-fa8b-36d6-a8b4-79896aa3ec42.roa
File: 3503ed0c-fa8b-36d6-a8b4-79896aa3ec42.roa (raw, json)
Hash identifier: zWOpKu8DE4mQiiL1s2GTH/RhdjJ70KZLTTsKJx8dkD8=
Subject key identifier: 20:8C:76:A9:42:90:12:AE:78:0E:E6:3E:8C:93:D0:22:08:A9:D2:46
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD3E7064EDA7D33AF8E540
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3503ed0c-fa8b-36d6-a8b4-79896aa3ec42.roa
Signing time: Thu 01 May 2025 16:20:55 +0000
ROA not before: Thu 01 May 2025 16:20:55 +0000
ROA not after: Wed 30 Jul 2025 16:20:55 +0000
asID: 22773
IP address blocks: 68.3.84.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:3e:70:64:ed:a7:d3:3a:f8:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:55 2025 GMT
Not After : Jul 30 16:20:55 2025 GMT
Subject: CN=5da3bad1-b389-4120-bc57-1509aa210136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:0e:66:e4:3a:49:ee:1a:f4:97:c0:5b:06:
fb:18:13:42:ac:05:53:7c:d8:9c:04:2f:4c:90:d5:
1b:cc:b0:e2:df:61:cf:96:94:79:74:a3:4a:e5:4b:
92:e9:eb:8b:93:19:d5:a4:0f:b6:b9:92:89:60:87:
ce:4b:4f:ee:15:cf:50:fc:40:d3:0f:f5:8b:13:cd:
2f:07:ed:f6:83:08:45:28:da:fa:24:bd:30:aa:d9:
db:0e:36:94:b0:3e:ed:cd:25:7f:54:52:db:05:25:
ac:9f:d2:8e:57:f2:7e:99:5e:7c:62:26:42:4e:57:
e0:44:38:22:ed:66:25:3d:03:77:7d:d7:31:12:7e:
81:2e:d2:15:f6:f6:68:f6:2d:2b:f9:3a:07:60:0a:
be:c7:80:35:26:ad:0d:7b:0c:16:b8:19:53:05:d5:
c2:85:d0:8a:73:c4:5f:d6:98:e6:6e:5a:bf:bf:a1:
b9:c6:40:32:48:e3:f6:98:59:4d:20:28:d1:fd:e2:
a2:11:8f:21:3a:30:31:78:14:9f:e9:4b:78:36:0a:
02:56:d7:23:07:a8:1e:a5:24:76:23:30:f0:b5:ff:
6c:23:51:b0:40:3a:a3:02:35:1c:f7:c7:f1:c3:39:
5f:70:4d:7e:3c:d7:8f:dc:52:a0:08:06:a6:6f:d3:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:76:A9:42:90:12:AE:78:0E:E6:3E:8C:93:D0:22:08:A9:D2:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3503ed0c-fa8b-36d6-a8b4-79896aa3ec42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.3.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:59:0c:65:dc:bb:a6:69:a3:a7:3b:22:bd:4f:71:a0:93:68:
42:8d:83:fd:fb:8e:7e:bf:c3:6b:ad:69:a9:77:02:37:c0:a7:
d4:df:4b:c5:6a:4f:89:af:70:77:11:ba:6e:e7:9f:92:b5:15:
bd:e3:8f:38:d1:d0:22:17:b1:7f:5c:79:ef:e1:b8:ae:64:aa:
9d:53:53:f2:b9:9e:70:dd:3e:66:9c:31:84:fe:4a:7b:20:46:
a5:a4:57:c7:96:b2:73:d7:6d:7e:e9:96:49:2e:80:e2:7b:02:
10:9f:ee:88:55:72:5a:3b:1f:41:ff:69:6d:1c:80:ee:04:f5:
12:ec:d6:bb:c3:c3:f1:21:a9:28:4c:77:e4:29:f8:8e:fb:ff:
c3:0c:6e:b8:b5:36:4f:e4:a4:c6:6e:6e:76:e2:55:df:8f:5b:
6a:81:48:1f:24:89:7e:61:90:d0:74:6d:2c:bd:e0:4c:5e:d8:
28:b8:40:72:85:c0:16:2b:44:30:60:72:0d:c7:9e:18:64:b8:
ec:d0:a5:d7:6e:a3:77:3e:fc:41:39:cc:e7:c1:47:de:02:40:
a9:98:82:91:64:79:0b:82:d3:06:a9:5b:de:9e:73:b7:e4:b9:
b0:0e:7d:0f:f2:3a:b6:da:a8:58:e4:fa:46:31:f7:a4:9c:39:
ed:d7:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:41:35 2025 by rpki-client