Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f6eb7a-7d27-3473-a0e0-fae8a7a8b8ee.roa
File: 38f6eb7a-7d27-3473-a0e0-fae8a7a8b8ee.roa (raw, json)
Hash identifier: YbLECetNOoiyqJbKX2bXtbsr38nSakGlg3CNZ0Yq2eQ=
Subject key identifier: 44:24:76:DC:EB:4E:E9:5C:42:59:D4:4A:7B:6A:6F:78:2A:63:E5:87
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD5DB3F6293601CAE49BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f6eb7a-7d27-3473-a0e0-fae8a7a8b8ee.roa
Signing time: Thu 01 May 2025 16:21:10 +0000
ROA not before: Thu 01 May 2025 16:21:10 +0000
ROA not after: Wed 30 Jul 2025 16:21:10 +0000
asID: 22773
IP address blocks: 68.96.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:5d:b3:f6:29:36:01:ca:e4:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:10 2025 GMT
Not After : Jul 30 16:21:10 2025 GMT
Subject: CN=0a91c0c1-89ff-4725-8f22-8af95d4e8a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:9e:46:45:51:9d:e0:85:cf:42:6f:f0:80:
65:a8:b8:74:f2:cc:b7:2d:f5:47:da:00:6c:df:b8:
be:36:71:0f:44:f4:d5:0b:21:f6:e0:0a:f3:a8:ec:
23:b2:3b:e4:85:4d:71:5a:76:db:c1:b6:07:c7:be:
11:f7:8b:ef:c4:19:a2:09:94:e2:9a:89:20:ba:9b:
2d:0e:98:ee:6e:03:59:aa:e6:97:5b:38:ce:84:be:
3d:8a:8f:9f:b5:38:07:fe:44:1c:06:fc:78:c7:b2:
eb:d8:7b:4a:ac:02:d0:df:6a:1b:d9:a1:d7:86:77:
48:42:1c:f1:e9:62:f0:6d:ba:44:5b:25:1c:c4:7e:
06:db:b6:8a:38:33:6c:47:6f:a9:35:e1:b7:d1:7b:
fd:86:a8:24:fe:57:6f:4a:2a:0f:41:e0:62:17:cf:
ef:1e:18:de:8d:65:f0:6d:43:a8:26:79:46:73:1f:
5a:1b:89:3a:b0:90:ea:d1:00:97:26:7d:46:7a:bc:
1d:36:4d:23:58:6d:42:73:43:75:89:98:0d:fd:81:
cf:9c:45:47:35:8d:08:eb:a4:22:89:be:96:60:87:
4a:57:34:95:7f:1b:3f:34:c2:40:ec:21:3c:76:e3:
31:fc:b5:82:53:9d:61:93:77:ee:f3:02:29:76:b8:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:24:76:DC:EB:4E:E9:5C:42:59:D4:4A:7B:6A:6F:78:2A:63:E5:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38f6eb7a-7d27-3473-a0e0-fae8a7a8b8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.96.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:dd:05:8f:f5:60:b5:9d:39:d5:bc:6d:b3:93:29:6a:f0:e8:
71:9c:29:fd:f5:78:89:51:25:a6:fe:e2:20:f2:a6:35:08:74:
70:fc:a4:f3:b6:36:49:b2:27:02:42:7e:d4:75:56:65:0a:d5:
a8:fc:3b:eb:00:db:7f:39:01:c8:48:c2:d2:85:8d:a7:f3:f0:
c2:d0:d8:d0:22:58:c8:59:cd:fa:71:3a:d0:1c:99:51:8f:35:
49:a2:fd:cf:ce:b0:f5:d7:45:72:ed:ca:81:8b:7d:2f:13:5b:
9f:8e:48:ca:f1:13:d3:94:02:ad:f2:8b:b8:f5:f5:9c:5c:49:
9d:22:1a:60:da:48:1e:e6:31:49:7f:a7:f1:0f:85:e7:4f:af:
be:ad:1d:b5:d5:3c:7a:cd:b6:ca:d4:c3:03:ba:4e:f1:09:79:
b3:55:cd:07:9a:4b:67:fc:e6:fb:ee:73:a9:b9:d2:e5:52:f6:
4a:1b:bf:e9:28:33:7f:da:eb:2f:52:c6:d7:63:5a:10:47:e3:
e2:8e:fc:4e:ed:0f:c2:8b:7c:80:28:6c:42:a5:2e:e3:a6:47:
7d:94:40:ac:f5:11:57:ad:dd:b3:4a:84:d5:31:4b:7c:3d:91:
f8:30:33:44:4e:6a:a6:45:06:43:b7:0d:21:ad:2c:7e:2e:1e:
7c:48:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:07:41 2025 by rpki-client