Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/388f4b6f-bcf8-33ab-9663-e2ca5842dcb3.roa
File: 388f4b6f-bcf8-33ab-9663-e2ca5842dcb3.roa (raw, json)
Hash identifier: jzNWFQb50K/Z3OG4VgIhhK36gk4XJ/TENnNv3/rTY7Q=
Subject key identifier: B9:3D:B1:A7:20:A6:7F:81:92:1B:66:FE:8D:D7:78:E4:51:9D:09:03
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD8EAEC993D3322B03C900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/388f4b6f-bcf8-33ab-9663-e2ca5842dcb3.roa
Signing time: Thu 01 May 2025 16:21:33 +0000
ROA not before: Thu 01 May 2025 16:21:33 +0000
ROA not after: Wed 30 Jul 2025 16:21:33 +0000
asID: 22773
IP address blocks: 68.99.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:8e:ae:c9:93:d3:32:2b:03:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:33 2025 GMT
Not After : Jul 30 16:21:33 2025 GMT
Subject: CN=2e3b5380-9dc3-45bb-a8f2-f4db8f251ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:97:1d:cd:fe:3f:53:cc:d2:68:38:cd:83:
be:61:4f:29:88:95:78:cb:66:76:b3:9d:f7:47:42:
35:19:47:3c:eb:76:d3:95:54:78:0a:47:ee:97:31:
ff:ac:8c:96:bd:ed:2d:ca:37:68:ce:9f:d9:01:ef:
9e:b7:a5:b3:63:ca:68:4e:79:76:8d:61:0f:18:af:
99:68:ad:45:4a:16:ef:a7:ca:24:ed:8a:7d:6c:23:
78:8e:92:a2:c4:64:a4:28:3c:fd:85:40:b4:35:fc:
d2:a0:71:b4:37:43:9b:8c:ae:0c:ce:1a:92:4e:ff:
13:0e:16:47:61:e8:15:3d:3f:b4:24:f7:c8:d7:38:
88:8d:0f:62:e0:af:20:fa:b8:21:bd:ac:35:ff:e2:
5a:29:03:fc:cd:d6:c0:03:b6:6b:c4:c1:75:55:90:
6a:3c:a6:18:2d:77:ef:7e:ba:81:f7:01:14:e0:53:
1d:9c:91:66:8c:f0:59:35:2d:01:45:69:12:af:c1:
06:63:8f:98:fe:75:74:cf:87:99:9f:7d:b4:5d:08:
f7:2a:33:90:e6:f6:cb:67:c1:0c:a7:c0:98:2b:5b:
ae:6c:80:5f:22:3c:13:71:cd:f9:2a:03:f9:fa:6f:
e0:c6:7d:75:a4:1f:35:c6:f6:27:41:04:ec:7c:9d:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:B1:A7:20:A6:7F:81:92:1B:66:FE:8D:D7:78:E4:51:9D:09:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/388f4b6f-bcf8-33ab-9663-e2ca5842dcb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.99.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e5:68:20:05:2b:6f:13:43:4b:91:9d:24:0a:9a:e9:46:d9:
90:98:8e:44:83:ac:08:5d:7b:7e:70:93:07:fb:12:86:64:cf:
e3:b6:10:60:c4:98:0f:a3:68:c5:ee:61:24:5d:07:07:f8:eb:
30:53:0b:6b:ee:5b:1f:48:66:71:78:18:ea:c1:a4:60:c8:b9:
f9:89:fd:c8:89:20:1b:0a:79:9a:c0:e3:5d:f4:96:dc:bc:d6:
18:6c:fc:e8:9a:de:01:fd:24:4f:1c:f4:2f:00:f2:6e:c2:0a:
b2:72:74:51:83:6d:b4:d4:81:a5:ca:43:0a:6f:6e:a4:5b:ad:
57:ab:55:33:9c:a5:4e:90:94:ba:42:89:5f:70:ce:83:5c:21:
85:92:f9:52:fe:ea:ab:21:da:45:e9:4c:28:57:d3:9a:f1:aa:
38:3f:b9:2b:25:81:e9:bf:07:59:4a:ca:f7:d0:2b:49:9a:bb:
cd:bc:b7:0d:ab:6f:7a:b7:c7:f1:91:a2:f7:47:8f:c5:c2:90:
7b:05:29:c3:d3:b8:d6:e4:07:26:65:a6:61:15:e3:7f:05:ee:
27:a2:6c:18:a6:79:32:01:46:5f:37:48:0f:39:1d:7b:a9:e3:
f5:2e:84:7e:52:08:f7:2c:27:01:78:be:b9:ec:f3:ce:17:6d:
18:ae:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:00:43 2025 by rpki-client