Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b39cc3e-ebf0-3bed-a1e5-c2fb04871a9c.roa
File: 4b39cc3e-ebf0-3bed-a1e5-c2fb04871a9c.roa (raw, json)
Hash identifier: S3acJ25O/PsmZbFHwQiql1IAMi3vgEpWlnbKUo/9YWI=
Subject key identifier: 3B:85:19:35:A9:A5:33:E5:23:10:7D:D6:55:25:15:06:B6:96:89:CE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE15EE365ECAC0B953F680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b39cc3e-ebf0-3bed-a1e5-c2fb04871a9c.roa
Signing time: Thu 01 May 2025 16:22:37 +0000
ROA not before: Thu 01 May 2025 16:22:37 +0000
ROA not after: Wed 30 Jul 2025 16:22:37 +0000
asID: 22773
IP address blocks: 68.228.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:15:ee:36:5e:ca:c0:b9:53:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:37 2025 GMT
Not After : Jul 30 16:22:37 2025 GMT
Subject: CN=3169b709-c59d-40f5-a420-53100053ee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:ed:b8:d2:8a:e7:27:c0:97:1d:72:f8:d2:
a6:28:b4:59:19:40:ec:65:21:84:02:0c:19:c3:c7:
17:13:fd:b3:1c:fd:46:e7:60:12:5e:65:11:62:b9:
0d:e7:8d:4e:9e:44:99:3b:c8:ee:62:51:42:7e:c9:
21:5c:b9:f1:00:98:dc:3a:85:c9:8f:74:5b:c6:3a:
c1:d9:9b:a7:e8:95:8d:0d:3d:ca:b2:23:54:4d:d0:
60:1e:49:9d:4f:db:8d:94:0f:42:9c:42:06:c6:bf:
21:9a:46:3b:1d:78:aa:fe:51:5c:39:47:79:0a:54:
8b:9d:20:73:3a:b2:8f:6d:8e:c1:bf:f7:a4:1d:ba:
93:c7:11:63:eb:35:e6:81:33:02:82:b9:95:9b:6d:
58:91:88:fc:85:df:27:66:d0:a0:91:6f:2a:94:43:
cd:00:d1:a2:a4:20:2f:0f:37:af:70:ef:4c:3b:e9:
6c:3d:38:71:18:ff:04:4f:8f:85:87:3b:7e:7c:e7:
4f:b1:43:40:18:b3:be:3e:a3:bf:ff:e1:9e:22:f5:
f5:f9:de:00:10:0f:da:64:6f:73:18:37:c6:78:2f:
58:cb:5b:8b:dc:3c:02:12:ef:de:e8:61:47:9f:81:
e9:8e:22:e2:1b:79:94:fe:4b:57:ad:0c:21:11:1f:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:85:19:35:A9:A5:33:E5:23:10:7D:D6:55:25:15:06:B6:96:89:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b39cc3e-ebf0-3bed-a1e5-c2fb04871a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.228.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2d:81:69:3f:86:0d:81:43:9b:58:81:26:28:7b:6b:19:59:
6f:2f:81:9e:44:1a:31:43:33:9f:97:ca:e9:ae:79:d1:b8:c1:
26:f9:b9:19:58:8c:3a:d7:11:66:cd:6a:01:64:13:ca:12:69:
ef:9d:23:13:42:8e:83:da:f1:72:22:2e:2d:e7:89:b8:55:7c:
01:86:51:6d:ef:23:89:8b:5a:9d:a9:e6:f8:cc:f6:be:34:9f:
6a:21:ad:e4:4b:61:ea:6a:2d:fa:2c:d0:6d:e9:41:3e:34:c4:
71:02:69:35:2f:0b:91:07:34:88:e3:1b:20:d3:4f:b0:38:ce:
c4:88:11:0f:e5:3d:e4:b2:66:71:21:3a:09:b3:ff:85:3b:22:
ea:11:c3:b8:ef:83:19:43:88:d7:52:cf:fb:63:11:c4:72:07:
63:35:e6:b7:2d:d0:69:72:ad:3b:b1:10:a8:1a:a6:96:f1:19:
67:dc:aa:65:dd:5e:59:df:fc:e4:87:6f:79:9b:e4:a3:00:9e:
b1:85:3e:32:ce:b4:da:0e:67:8c:3f:00:08:3e:c0:2c:cd:40:
b4:d5:f4:90:d9:26:cc:2a:26:58:ef:d2:fa:52:ed:42:a4:d3:
5a:76:cc:39:de:cb:5b:86:7c:d7:7f:27:76:40:a9:e2:39:bc:
1f:d7:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:11:20 2025 by rpki-client