Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a0329b1-0be0-3e7c-9dbe-2d99b2e212c6.roa
File: 5a0329b1-0be0-3e7c-9dbe-2d99b2e212c6.roa (raw, json)
Hash identifier: 2ActR8q4372J0wKCopif2K9es5zc+xHIT5N03e8OPCw=
Subject key identifier: 33:F0:4D:32:FC:C0:C0:9A:53:6B:DA:DC:BE:9B:26:A7:D3:3C:60:DA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD99898FE9A9E0C660BE50
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a0329b1-0be0-3e7c-9dbe-2d99b2e212c6.roa
Signing time: Thu 01 May 2025 16:21:38 +0000
ROA not before: Thu 01 May 2025 16:21:38 +0000
ROA not after: Wed 30 Jul 2025 16:21:38 +0000
asID: 22773
IP address blocks: 68.104.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:99:89:8f:e9:a9:e0:c6:60:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:38 2025 GMT
Not After : Jul 30 16:21:38 2025 GMT
Subject: CN=976ab277-15aa-4445-93de-e299a33c13e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:73:d1:b5:d8:ab:41:b4:82:b9:b2:27:7b:
fd:38:1a:b2:cd:33:90:8f:d6:ff:98:c6:bc:19:f2:
5d:29:17:06:9b:4c:8a:2f:2d:ed:43:84:67:d3:43:
cb:1b:29:5d:13:a4:8f:d6:12:54:39:07:f7:88:1a:
d8:be:8a:f5:97:33:82:0d:84:42:a9:7a:d9:32:7f:
ed:20:ec:5f:f3:e8:32:96:bd:c8:5c:47:c5:e6:80:
b3:b2:80:80:92:6e:c7:40:3d:81:16:bc:98:fb:32:
db:5f:9f:dc:b9:b0:38:07:52:82:c2:fa:92:ab:c5:
4f:b0:38:45:e4:c5:a3:39:e8:ac:22:67:78:51:1e:
45:9a:e0:1e:1c:d5:3f:f1:75:81:f0:31:18:23:73:
81:68:9f:84:6c:d9:57:f3:0b:74:2a:68:00:19:dd:
51:d2:a8:64:fe:d7:c9:43:01:df:00:0d:e1:34:97:
b4:91:b5:a8:8e:37:61:9b:52:77:7d:6c:10:b9:34:
14:7e:f1:ff:5f:d9:60:86:64:c8:ae:3a:ce:e3:56:
05:18:37:5f:dd:41:a8:c9:c2:fe:91:e9:ad:a5:7a:
2b:34:10:3d:ec:81:1e:da:6a:a8:a9:ca:98:4c:3b:
43:f9:36:ad:6d:d3:3a:46:e8:4c:d9:47:29:ff:42:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:4D:32:FC:C0:C0:9A:53:6B:DA:DC:BE:9B:26:A7:D3:3C:60:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a0329b1-0be0-3e7c-9dbe-2d99b2e212c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.104.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:7a:59:71:4b:3a:8c:53:18:52:fc:27:13:73:ad:c1:e3:83:
e2:40:7c:c5:0e:d0:40:4f:c0:96:05:eb:4c:97:6a:b8:bf:7e:
a1:a8:b2:06:5f:89:c2:11:30:47:2b:8a:52:f5:b4:7f:83:2d:
0e:7c:d7:40:7f:d4:34:92:0a:b0:70:0e:91:28:01:6e:54:68:
6d:9b:12:eb:7b:1f:3e:df:f2:a4:7c:f9:65:d0:67:6b:09:c4:
e4:bc:f8:e0:46:0c:55:32:dd:3e:86:32:45:86:dd:93:26:a9:
39:d3:5a:1e:2d:2a:ad:39:3c:2e:c0:f4:2a:1a:df:40:97:cd:
71:05:17:8b:9a:e8:ab:9e:0c:c2:3e:a6:61:4d:7a:1b:d7:63:
3a:13:12:30:04:6d:46:7a:8b:6c:15:6a:10:6b:de:54:16:67:
ae:7e:cf:61:26:be:38:e2:30:ac:74:da:b5:23:1a:ce:30:a1:
15:b1:5a:36:1d:e0:f4:90:8d:5a:29:9f:a4:86:cf:0a:88:d1:
a4:36:9b:9f:19:23:a4:c7:45:e5:bc:89:b1:21:f4:7f:cb:7c:
3b:33:2a:74:b3:1e:e9:94:08:ed:6d:33:46:a8:18:c1:be:f0:
ed:e9:60:bf:ce:79:ad:bb:85:21:29:ea:1e:e2:a3:9f:ae:b7:
95:e3:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:55:52 2025 by rpki-client