Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4ff9ae-c4c3-3412-8a85-8cf6074550e1.roa
File: 4b4ff9ae-c4c3-3412-8a85-8cf6074550e1.roa (raw, json)
Hash identifier: 7PdWSblfzt2l+CPkPJXHpK0UewKrChHomMKC26Z6bgE=
Subject key identifier: 3F:D6:53:7A:ED:93:C0:02:89:0C:73:58:8B:D8:33:F2:31:DB:13:DA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE18E04E6D03D9D19CC800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4ff9ae-c4c3-3412-8a85-8cf6074550e1.roa
Signing time: Thu 01 May 2025 16:22:38 +0000
ROA not before: Thu 01 May 2025 16:22:38 +0000
ROA not after: Wed 30 Jul 2025 16:22:38 +0000
asID: 22773
IP address blocks: 68.230.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:18:e0:4e:6d:03:d9:d1:9c:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:38 2025 GMT
Not After : Jul 30 16:22:38 2025 GMT
Subject: CN=4ad49007-9f07-444f-bc0c-7f0bf4a6d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:48:84:4d:52:44:a7:cc:e8:83:12:6f:3b:
e7:d1:e5:b4:46:22:49:ef:0c:6b:ce:f7:f1:81:a6:
c4:a9:a1:fa:8f:1d:5a:bb:8f:ff:b6:42:12:49:f4:
83:90:d1:1a:e2:91:44:29:fb:9b:ba:0a:d7:92:b2:
56:65:40:f8:17:b3:26:36:b8:04:d8:b7:69:63:0d:
03:20:39:e6:23:67:8d:f0:17:61:6c:5c:ea:c6:98:
ef:74:b1:79:5a:76:48:54:50:92:b6:f0:72:2b:8d:
b9:5d:4c:cb:f5:71:f4:2d:3f:e5:f0:0a:a9:22:9b:
f6:f7:ba:07:0b:d4:78:30:54:a6:77:d5:75:d9:02:
c1:c0:22:eb:70:f3:89:df:29:d6:84:f2:f9:78:e9:
90:a1:79:34:55:c9:d4:c0:86:94:85:f1:65:0a:dd:
51:27:3c:9b:10:5e:5f:83:a7:55:7c:c2:83:d5:f8:
30:ba:f0:2f:f3:bb:73:4d:c1:99:63:34:ff:f6:01:
7f:8e:3f:42:c9:b6:4f:45:d9:ea:8b:90:46:43:77:
b0:44:03:d9:3f:ae:4c:41:47:62:44:8f:9c:9a:02:
08:f5:70:35:97:10:0a:bd:60:c5:5d:78:24:78:81:
0c:1e:1b:8d:52:55:b4:e4:86:f0:df:e4:54:96:c3:
b3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:53:7A:ED:93:C0:02:89:0C:73:58:8B:D8:33:F2:31:DB:13:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4ff9ae-c4c3-3412-8a85-8cf6074550e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.230.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:1f:4e:e6:82:66:a4:98:e4:b3:df:90:55:f7:1c:06:37:2c:
98:17:74:a3:94:71:5e:55:9a:cd:e0:16:ba:6f:99:ea:42:b0:
80:f5:8f:9f:4c:8d:96:cf:04:5c:9b:ad:77:b7:78:01:be:b8:
32:8b:6b:08:ab:9d:90:6b:fb:47:8d:a9:2f:92:fb:ed:e8:48:
d3:ed:d3:ac:14:2e:52:59:f3:cd:dc:95:88:17:7f:d1:99:3b:
54:02:e5:45:b3:c6:b8:43:40:d2:6e:24:cd:7f:f2:b9:df:1f:
5c:ae:47:04:16:eb:8d:7e:d4:af:b4:af:18:ec:b7:9a:ec:72:
a6:69:e2:ab:d2:25:98:64:b5:93:5e:ea:1e:dd:30:df:b4:c5:
a1:de:63:21:8a:37:61:45:f7:09:b1:0f:b9:cc:85:51:1f:b7:
64:6e:c9:10:0a:9e:11:9e:6b:c2:89:ee:ac:e8:dc:68:ed:1d:
4e:50:03:eb:e7:6b:31:37:c1:59:92:c1:33:52:db:48:67:64:
a0:f1:bc:fa:3b:b1:d9:90:ba:d6:cc:e6:5b:34:5a:de:a4:2d:
bb:5b:08:69:7c:87:ab:f6:3c:2b:8f:f4:4f:e6:c5:23:0b:66:
a5:0a:92:7f:4d:9e:16:da:dd:2a:2b:14:7b:68:a5:fd:09:46:
38:58:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:21:07 2025 by rpki-client