Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c228812-3fb3-3601-b858-30bc18017383.roa
File: 5c228812-3fb3-3601-b858-30bc18017383.roa (raw, json)
Hash identifier: D3rumY9aO2zHtUZFty6tSnQz71efbP65kbTLfIp0baQ=
Subject key identifier: 1A:A7:ED:DC:C0:1D:7C:0C:15:A9:EF:E8:75:ED:05:FC:06:4F:5E:B1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9ED241F7180EC7160C980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c228812-3fb3-3601-b858-30bc18017383.roa
Signing time: Thu 01 May 2025 17:18:42 +0000
ROA not before: Thu 01 May 2025 17:18:42 +0000
ROA not after: Wed 30 Jul 2025 17:18:42 +0000
asID: 22773
IP address blocks: 68.224.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:ed:24:1f:71:80:ec:71:60:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:42 2025 GMT
Not After : Jul 30 17:18:42 2025 GMT
Subject: CN=341c46b7-ac8a-4f79-b0e5-077fc42a49d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:35:10:5e:ed:08:7b:e9:29:7c:c4:32:bd:
1d:a4:80:dc:29:ea:66:82:74:f1:4b:a5:5e:25:c7:
6f:25:c9:48:0e:45:46:5c:c0:f0:e9:33:cc:17:26:
16:e4:8b:88:43:ec:95:56:ef:82:1f:67:d6:08:a2:
27:83:c2:08:06:b1:86:8a:aa:c9:ec:a0:b4:ba:6d:
52:e9:12:2d:f1:a9:df:92:53:ee:df:de:f9:27:8d:
11:f3:c9:9d:1c:bc:d5:cf:69:da:bd:92:05:41:6e:
52:a3:00:65:bd:64:dd:04:99:ed:c3:eb:09:a9:d3:
33:12:1c:31:a6:a3:e2:ea:59:f3:cf:ec:cd:64:11:
7f:83:16:6b:94:34:58:26:45:4b:aa:0d:11:90:ff:
ce:ae:27:cd:75:0c:74:ee:54:1e:ce:db:80:47:1c:
69:61:d6:14:7b:3f:19:e2:58:c6:aa:15:92:9d:ee:
0d:4a:77:91:59:25:9d:53:7a:43:85:f6:bd:02:b8:
4f:75:e6:1a:c2:9e:7b:e8:15:62:51:22:3b:8b:66:
8e:00:76:83:b0:8a:53:86:e6:54:2d:a6:94:8a:3f:
85:d6:f5:db:5e:ea:e6:ec:74:a7:7e:40:5d:34:d9:
89:b1:6a:fa:b3:ea:00:2e:68:22:35:7a:61:f4:8a:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:ED:DC:C0:1D:7C:0C:15:A9:EF:E8:75:ED:05:FC:06:4F:5E:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c228812-3fb3-3601-b858-30bc18017383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4f:3d:e7:35:b9:1e:60:2e:6b:dd:d5:da:7b:c6:cd:51:94:
ca:5f:30:8a:18:f4:5b:60:93:4b:b6:58:18:e5:87:b8:53:85:
f4:ac:d6:0f:b2:4d:81:20:d3:fa:2e:c3:48:8b:59:47:eb:15:
49:25:b8:f0:ae:2b:3b:77:00:ba:84:57:6e:84:c5:d4:75:ab:
7f:5b:5f:b0:37:2a:6c:f9:4a:d3:5d:65:89:08:eb:94:f8:3d:
41:c4:1f:2e:22:7c:03:74:ef:26:eb:89:ab:d1:8b:e3:00:b1:
78:89:89:00:03:ca:be:5a:3f:e7:52:57:3f:34:24:82:79:e0:
9f:9b:11:aa:13:13:f8:6c:b8:53:60:1a:40:07:c8:c7:00:a2:
72:42:28:2c:82:0a:b6:d9:9b:ea:18:d1:5e:71:8f:34:6e:2f:
9e:55:1f:f2:79:83:6e:08:47:87:8b:61:44:06:93:ec:88:cf:
68:8e:b9:15:97:0a:6d:cf:ea:d9:15:fb:96:d3:2c:b3:4f:85:
a8:2b:ac:44:22:70:a7:75:e5:f6:85:7d:c3:c2:81:ce:cc:95:
c7:1f:e4:b3:b7:b3:77:97:b7:56:42:e9:82:ed:94:11:d0:99:
28:ed:bc:2d:09:b3:a6:9f:a0:1a:56:4a:58:65:5b:65:04:73:
bc:48:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:21:13 2025 by rpki-client