Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50b3ab0f-388d-346d-a8b2-96c485168c10.roa
File: 50b3ab0f-388d-346d-a8b2-96c485168c10.roa (raw, json)
Hash identifier: O5cOreopMLGB/BV9Ci99v5muDTfZe5PPTrbrmsrK/gc=
Subject key identifier: 31:27:EE:28:E0:7B:40:AA:18:40:BA:E3:E3:4B:2D:22:22:90:CF:33
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD18AC05661985F59BD500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50b3ab0f-388d-346d-a8b2-96c485168c10.roa
Signing time: Thu 01 May 2025 16:20:37 +0000
ROA not before: Thu 01 May 2025 16:20:37 +0000
ROA not after: Wed 30 Jul 2025 16:20:37 +0000
asID: 22773
IP address blocks: 68.2.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:18:ac:05:66:19:85:f5:9b:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:37 2025 GMT
Not After : Jul 30 16:20:37 2025 GMT
Subject: CN=8a34b770-76a4-48a9-9dec-3bf4bd33bae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:ae:d3:64:99:85:c3:09:db:a2:f2:c2:4d:
53:02:f2:c8:93:a2:0c:5f:1a:a4:d7:67:5c:01:9c:
c1:0e:4b:20:e6:ce:30:bc:c5:36:11:73:27:ef:80:
bf:e4:72:16:cd:23:bc:c3:0a:d0:ef:21:c6:bb:be:
1d:84:dc:f9:ae:4a:63:7c:4d:00:db:40:00:ab:09:
dd:97:41:92:c2:18:40:f6:e9:7a:f1:ef:fc:d0:20:
51:9f:96:93:60:54:46:9a:08:e1:0a:62:79:4b:9f:
b0:3a:31:18:35:6c:6f:1a:d2:56:f5:0a:ad:ee:4d:
c9:ac:28:06:a2:30:02:a2:8f:2e:be:10:18:00:b4:
63:33:cd:01:79:8c:32:31:b8:14:d6:67:3b:e1:3a:
75:6f:b0:85:9a:1a:b1:54:62:3a:bd:a2:1b:65:ba:
bd:cf:ed:99:8b:41:dd:5d:09:0b:26:aa:d7:d2:b0:
52:bf:c9:14:24:15:f3:14:b2:01:47:0a:46:4c:5e:
9b:a0:90:e6:92:28:31:65:51:3d:69:de:26:08:01:
20:c3:fc:ba:ca:22:a4:1e:60:23:99:45:22:7e:bf:
c2:9b:6c:b6:0e:2e:69:13:16:0b:2a:28:03:97:a4:
f1:e9:5e:09:21:7e:90:c2:40:df:76:b1:40:f5:e9:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:27:EE:28:E0:7B:40:AA:18:40:BA:E3:E3:4B:2D:22:22:90:CF:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50b3ab0f-388d-346d-a8b2-96c485168c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:54:45:a6:44:d8:7c:f0:77:60:6b:e8:b5:0e:b1:27:35:78:
3a:7c:bd:54:50:7e:50:9a:af:31:19:90:86:38:ce:82:9e:1d:
07:25:2a:65:a8:f1:2a:59:41:54:83:ec:40:d4:59:0b:85:86:
8b:a3:5a:25:4c:e5:fd:e9:63:a9:d0:73:21:72:37:aa:20:77:
f8:0c:0a:f2:59:51:19:d2:a3:81:83:67:25:8c:22:24:4e:cb:
f7:8e:71:39:3b:3e:68:70:2a:38:2b:71:7e:e7:53:66:79:a9:
b6:58:2d:ce:98:cd:6f:cf:9c:04:92:ad:7b:c0:62:fd:a0:d5:
ac:8f:9d:9e:24:f9:2b:06:cc:a2:61:81:35:0b:67:c4:ea:9d:
93:69:b3:5f:27:73:4e:7d:4a:7b:49:60:b3:75:4c:8a:83:ec:
0a:bf:c1:84:fc:bb:a0:52:05:e9:b7:64:b9:78:71:99:6a:6d:
7e:cb:53:a5:c9:cc:5b:bb:40:76:42:d5:db:ea:8e:39:81:35:
47:aa:d3:4f:11:f7:59:ac:7a:d2:45:2c:ff:8c:c9:76:5b:3e:
67:9d:7d:5b:be:5e:b6:69:85:8b:d2:09:5c:64:8c:7c:ad:d7:
2e:72:e0:e0:b8:7a:ae:bd:b1:38:84:fe:74:2f:fa:d4:c3:86:
32:38:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:29:40 2025 by rpki-client