Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c61f0b-a404-36df-b7a6-bc52c9e0e05f.roa
File: 42c61f0b-a404-36df-b7a6-bc52c9e0e05f.roa (raw, json)
Hash identifier: 1rRLgjIUNtEr0sv2ipAsJrKR8j234F9dREyEu6Xw+MY=
Subject key identifier: DB:DD:96:69:B6:2A:06:F9:D1:A1:21:0F:66:7B:73:F8:A6:5E:5A:78
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9FD044479561ED604CB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c61f0b-a404-36df-b7a6-bc52c9e0e05f.roa
Signing time: Thu 01 May 2025 17:18:50 +0000
ROA not before: Thu 01 May 2025 17:18:50 +0000
ROA not after: Wed 30 Jul 2025 17:18:50 +0000
asID: 22773
IP address blocks: 68.224.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:fd:04:44:79:56:1e:d6:04:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:50 2025 GMT
Not After : Jul 30 17:18:50 2025 GMT
Subject: CN=7937e5c9-6b21-414b-ac46-e87fa40081ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:ff:36:3e:24:1e:de:35:9e:72:6c:1e:41:
3a:43:a6:bd:f0:b1:8c:b7:99:2d:06:52:06:8b:ea:
91:d6:0a:c9:34:87:85:c4:54:fb:f0:83:fa:3d:7e:
26:6f:1e:0b:2a:10:68:46:a2:d8:85:de:a3:37:00:
d5:3f:69:2e:26:99:f9:5c:52:cf:51:7b:ea:7d:60:
c9:04:a5:94:3b:8b:c3:d4:b1:bf:5e:5c:c3:51:93:
95:d4:b3:13:6a:ac:73:ba:e1:8f:4b:5d:ec:7f:f1:
f7:87:c0:f3:74:40:27:fa:7e:aa:1d:b6:17:93:0f:
51:1c:40:02:aa:3b:fe:03:2c:e0:2d:5e:f9:84:78:
b4:f5:79:e3:0a:ff:8e:9b:9e:c1:bf:32:0d:95:ff:
1b:9d:89:65:c6:79:2f:aa:e8:26:f5:61:13:1b:34:
44:75:00:bd:d7:1b:17:7d:b3:88:76:15:35:97:f4:
38:12:0e:33:d9:60:f3:cf:ef:4d:d8:c3:26:bc:c1:
77:23:9c:a0:1e:f1:4c:05:5a:e0:da:6b:99:a2:d0:
f2:0b:78:e9:83:3c:e8:6f:9d:36:18:ba:01:61:2a:
f9:bd:66:6a:30:20:20:43:25:27:03:c5:98:16:39:
41:9d:e1:b7:fd:6c:1d:c8:de:ea:a2:7a:01:aa:28:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:96:69:B6:2A:06:F9:D1:A1:21:0F:66:7B:73:F8:A6:5E:5A:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c61f0b-a404-36df-b7a6-bc52c9e0e05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:b4:6a:17:55:74:9f:36:c3:66:9b:85:39:e7:ae:c8:19:75:
2f:ae:63:12:5e:1b:90:0c:ee:74:8e:d7:f9:f5:96:26:fa:29:
61:c2:75:4a:e0:b8:3d:50:c6:33:60:b0:09:17:d2:b2:4b:8b:
d7:84:9e:cf:99:2b:d5:53:f2:10:1f:28:79:9a:ab:b1:73:40:
b3:3b:23:ce:03:db:2a:55:fa:2e:7c:6f:10:55:76:39:f6:df:
15:51:7e:e1:29:1f:5c:30:f0:05:f8:a4:2b:23:78:06:9b:47:
d2:e7:58:45:be:3a:e4:83:a0:e6:29:ef:3a:4c:f8:59:a6:8b:
15:18:90:7a:15:c3:7f:38:5b:79:b5:da:41:bd:bc:b5:30:d6:
d1:3f:61:74:56:e1:bf:ac:97:fa:40:c2:64:4f:cc:f6:f2:96:
dc:35:90:84:0e:7d:bd:77:9d:7b:51:b7:b9:65:c7:84:77:a1:
34:bd:d6:ce:88:e9:c2:f2:a8:36:75:4f:4e:ea:31:1e:33:37:
4a:c7:d7:a0:4e:0d:13:5e:90:a1:de:12:03:00:d2:3e:24:fc:
6c:5f:55:75:60:40:49:9f:d0:87:3c:7e:84:00:c9:3b:8e:f8:
fa:fa:9c:2e:95:5a:82:8e:1b:b2:2f:6b:83:28:84:4c:79:8e:
cd:b1:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:10:07 2025 by rpki-client