Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dd78856-3c2e-33bf-982e-11f35f98d646.roa
File: 3dd78856-3c2e-33bf-982e-11f35f98d646.roa (raw, json)
Hash identifier: kAj6ia8yfqfctk729JvroPGBDf8z1r8CK1Ad2/hUfyY=
Subject key identifier: 85:25:36:0D:E4:C4:00:5E:65:83:47:A6:15:95:80:46:88:80:A0:1F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE47708FFF9FCEABB71C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dd78856-3c2e-33bf-982e-11f35f98d646.roa
Signing time: Thu 01 May 2025 16:23:00 +0000
ROA not before: Thu 01 May 2025 16:23:00 +0000
ROA not after: Wed 30 Jul 2025 16:23:00 +0000
asID: 22773
IP address blocks: 68.231.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:47:70:8f:ff:9f:ce:ab:b7:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:00 2025 GMT
Not After : Jul 30 16:23:00 2025 GMT
Subject: CN=2b8732db-1f47-429c-9ab8-d3154c8db736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:7d:3a:93:a9:de:72:0f:58:74:0f:55:b9:
c8:98:e5:f9:34:dc:84:41:44:d6:14:8c:02:32:fd:
c2:ba:47:0e:2f:88:52:7a:d7:19:42:5e:3a:12:e0:
c5:ad:f8:f6:cc:49:18:e9:e7:9b:35:59:dd:8f:ed:
fc:6e:4a:3e:5b:2a:8d:75:17:81:27:c2:0c:30:af:
62:8c:cc:45:93:db:3b:c5:55:ba:e8:98:0a:bf:96:
5e:c1:68:72:58:4c:16:e8:fb:75:82:fc:02:59:14:
15:a1:81:9f:83:f2:90:fa:9b:fb:38:bc:c3:d2:9b:
11:85:f2:c7:b9:13:bd:f1:80:11:db:0c:b8:8e:c9:
31:bd:e5:7b:42:00:d6:90:dd:f4:e9:4e:3f:6e:b3:
6b:ec:54:bb:1c:c3:cc:47:27:1a:11:58:54:38:42:
67:f2:73:39:8c:02:4a:79:5a:0b:f3:5c:e0:c6:60:
a1:48:b8:c3:a7:74:38:34:cd:38:a2:e4:69:f0:29:
bc:66:b8:81:30:88:ad:fe:a2:6b:47:3a:d9:f5:bb:
80:73:f6:f8:56:fa:e1:7d:f5:de:b8:5e:ca:57:e8:
90:10:8d:dc:3f:64:ca:e1:19:0f:ef:bb:00:2e:a1:
45:43:e6:a6:16:f8:56:67:79:c4:2c:ab:98:3c:3b:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:25:36:0D:E4:C4:00:5E:65:83:47:A6:15:95:80:46:88:80:A0:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dd78856-3c2e-33bf-982e-11f35f98d646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:0e:15:f0:32:68:bb:b5:8f:97:9e:85:75:91:15:48:53:5e:
43:ec:96:6a:26:65:00:87:1e:28:d9:21:6b:86:52:e8:cc:dd:
a3:a9:84:0a:33:61:09:9c:1b:1e:1b:4c:00:5f:f7:8a:23:7b:
8f:fc:c8:61:84:a5:a8:57:10:9c:b8:48:63:8d:14:1b:f7:d9:
e7:cb:50:3b:dd:e0:8f:94:e4:c4:bc:24:41:f6:03:23:64:ba:
8f:d4:9e:fc:3b:60:ce:56:36:3f:77:73:5d:d6:b9:73:1e:a6:
db:fc:2f:5c:ed:ad:83:f5:68:26:32:d2:2e:a0:21:e9:1e:70:
07:c7:52:b7:8c:cd:2c:1d:18:47:0f:a4:03:97:00:df:ef:ad:
44:fd:7c:05:8b:f9:07:55:c6:8c:90:60:81:8a:99:f1:1c:93:
b7:71:fa:d8:3b:da:6c:af:7c:65:15:40:ff:60:db:04:1c:f2:
f6:b4:9f:b9:f8:84:03:13:22:d0:db:c1:9e:0d:f4:40:24:af:
32:1a:e3:3c:57:fe:67:b2:41:20:f6:f5:4c:39:39:83:8b:83:
94:78:eb:72:90:24:f0:24:a9:cc:fd:27:f5:2e:5e:4e:a4:27:
66:de:c6:b4:5c:92:bc:1c:e9:8f:11:fb:fe:bc:35:0f:1c:d0:
fa:67:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:32:31 2025 by rpki-client