Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/497bc2ac-4b88-3158-a845-23e06b77f7c1.roa
File: 497bc2ac-4b88-3158-a845-23e06b77f7c1.roa (raw, json)
Hash identifier: 5O7fw16eZeQy+xiy4i04yzJxP4ALDoE3OM9MnJXB2+Q=
Subject key identifier: A5:9D:EF:BE:DD:AA:61:23:74:EC:13:D8:33:25:1E:B7:5F:48:FF:8B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA0ECEF8847E823EBF2D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/497bc2ac-4b88-3158-a845-23e06b77f7c1.roa
Signing time: Thu 01 May 2025 17:18:58 +0000
ROA not before: Thu 01 May 2025 17:18:58 +0000
ROA not after: Wed 30 Jul 2025 17:18:58 +0000
asID: 22773
IP address blocks: 68.224.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:0e:ce:f8:84:7e:82:3e:bf:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:58 2025 GMT
Not After : Jul 30 17:18:58 2025 GMT
Subject: CN=a901706d-d308-45b7-becf-d3ba4cdde1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:55:94:8f:c7:01:69:54:07:b6:54:25:eb:
a3:70:49:99:a0:32:8c:61:91:23:1c:66:39:e2:7d:
7d:94:64:c4:18:74:20:36:e6:77:ef:86:1b:93:1e:
42:ac:3b:a9:db:11:56:2f:d3:30:4c:a4:cb:31:e4:
4c:6e:76:b1:9a:29:d6:fb:81:27:02:b9:a0:e0:04:
39:38:3e:d4:f6:fb:54:f4:39:c8:c0:08:b4:be:22:
07:81:35:74:60:cd:2b:88:da:2e:6e:fe:05:a7:07:
9b:66:85:cb:f9:b7:41:f3:d0:13:e5:2d:e2:5f:fe:
0a:de:dc:fa:47:ab:3b:12:9c:b7:a8:c6:12:0f:00:
0f:1a:ef:50:84:d1:41:a6:19:ab:91:4c:e4:f7:35:
57:32:eb:86:79:a8:c3:19:e0:4e:d3:21:68:eb:c8:
8b:e2:9c:c6:f4:26:a4:ba:cc:38:1e:ea:36:08:79:
c7:4f:e1:67:65:70:55:b6:84:72:ab:ff:0f:75:b2:
fd:91:10:16:60:28:79:a9:f6:c0:95:48:c0:84:8b:
4e:b2:ec:84:65:fa:95:36:28:14:cb:1c:6f:10:65:
dd:25:a2:b7:fb:4b:77:77:01:41:3d:72:00:33:d4:
72:73:cc:05:0d:ca:d6:d9:26:53:2c:31:99:47:be:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:EF:BE:DD:AA:61:23:74:EC:13:D8:33:25:1E:B7:5F:48:FF:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/497bc2ac-4b88-3158-a845-23e06b77f7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:2d:4b:a8:0d:38:dd:0a:bb:ec:c0:2c:e0:8f:9f:fd:96:d0:
16:21:46:c5:87:54:cd:1d:f2:ba:30:f0:13:34:8a:08:e8:f5:
4c:27:a9:56:1a:0c:bd:35:21:5a:67:53:1f:ff:73:40:0e:4c:
02:76:94:54:2d:ce:19:55:5b:f9:9a:6e:ef:46:2f:7e:56:5a:
f2:3e:ab:9d:f2:cf:f4:c1:12:79:84:28:01:ba:ac:0c:71:72:
8d:08:51:39:a2:dd:22:e8:7e:ab:ce:96:de:e5:eb:4a:e5:f2:
d5:33:26:fa:15:cd:e3:ac:d2:a6:7d:4b:a8:23:6f:4a:40:f4:
bd:ab:0f:a1:7a:37:d7:eb:9a:99:b4:d4:eb:cd:14:52:db:23:
25:15:1a:63:ad:49:d8:68:7a:7c:bc:66:64:28:00:62:7f:43:
05:53:54:d4:9a:f6:4d:f1:b7:fd:ae:59:18:3e:57:14:c3:49:
86:70:52:3e:f2:fb:8c:5d:ae:bc:e5:dc:63:fc:4b:ba:2c:0e:
83:e1:56:69:ae:ff:6f:2c:5e:95:09:31:27:71:80:41:ef:e1:
06:7e:62:f3:76:0f:33:09:dc:cc:b1:7f:ba:25:a3:94:b7:d8:
b7:5d:85:87:23:1f:40:4b:d8:41:42:67:98:55:dc:82:85:62:
36:ff:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:42:37 2025 by rpki-client