Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/685a7397-7bfa-3d4e-83c7-f239e168a9df.roa
File: 685a7397-7bfa-3d4e-83c7-f239e168a9df.roa (raw, json)
Hash identifier: ezTrNv6PvyshoumncY0q00x+5WEFVDXu/1dUdbRhMok=
Subject key identifier: 75:56:C9:BE:1E:B2:08:A2:7E:7E:27:A9:A5:62:D9:69:CF:D8:C7:F1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA0B7C6D74EC6889F5EF80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/685a7397-7bfa-3d4e-83c7-f239e168a9df.roa
Signing time: Thu 01 May 2025 17:18:57 +0000
ROA not before: Thu 01 May 2025 17:18:57 +0000
ROA not after: Wed 30 Jul 2025 17:18:57 +0000
asID: 22773
IP address blocks: 68.224.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:0b:7c:6d:74:ec:68:89:f5:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:57 2025 GMT
Not After : Jul 30 17:18:57 2025 GMT
Subject: CN=f5354dfa-5a13-4d78-8009-d0e8c644b4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:e2:c2:82:88:cc:1a:cf:4f:10:9b:78:fc:
d0:96:e1:d0:d1:01:0d:da:4a:b0:58:e3:38:9e:d8:
de:fb:2f:cb:d4:76:09:4b:b0:c3:6a:14:79:68:c4:
7e:ff:b8:77:1e:d3:fe:3d:b8:1f:ab:be:79:11:89:
ef:78:12:7a:60:7c:80:f6:69:cb:6b:55:ed:23:7a:
fe:c2:d6:b4:28:f9:49:cd:30:dd:a8:b5:48:e0:7e:
ba:16:69:37:25:3c:71:61:03:6c:ad:06:41:74:db:
f2:09:cc:ca:5c:49:e8:29:a6:f8:00:02:e9:69:ec:
1a:f9:09:f4:a3:57:2d:6f:8a:bb:81:ac:fc:15:17:
4b:14:89:3f:a8:ce:e8:63:06:f5:16:a8:cf:24:0e:
31:0b:57:e8:d3:ba:bd:5c:00:64:c6:2a:3a:5b:64:
c0:d0:a2:6b:64:ed:f7:a8:af:b2:c6:47:bd:7e:71:
8d:3c:5f:61:15:2f:e7:49:10:74:c7:ed:f7:37:24:
3d:65:3b:6a:ce:53:ea:7b:32:28:72:e2:06:a5:0d:
53:da:01:e8:56:67:8e:36:c0:4c:e7:b3:9a:6f:95:
8e:2f:ac:ea:0a:9b:65:8a:9e:ae:3d:84:23:cf:11:
9e:dc:a6:c2:51:37:3f:24:cd:a6:55:d1:f4:b5:03:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:C9:BE:1E:B2:08:A2:7E:7E:27:A9:A5:62:D9:69:CF:D8:C7:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/685a7397-7bfa-3d4e-83c7-f239e168a9df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:4e:08:7a:f9:b1:51:38:b4:bb:e1:ab:aa:43:74:47:32:5e:
e3:ce:11:dc:de:a1:95:cf:a9:dc:0c:f6:0a:6c:76:5c:55:b8:
e9:0a:d1:d5:ee:55:4c:bd:c5:e3:ad:aa:7b:2a:50:41:f4:62:
b3:b6:8b:36:78:f1:8e:af:dc:be:01:ec:f6:d9:20:0e:a6:4f:
27:1b:0a:cb:09:58:29:e2:0e:6b:56:bd:d7:83:92:d5:8e:6b:
33:92:93:c8:c2:de:95:ac:4d:fd:68:71:ca:37:6b:26:38:4d:
8e:18:8d:6b:0c:38:c2:a8:74:90:e4:b9:14:23:f3:4d:eb:e0:
d5:08:15:74:08:a2:92:41:72:42:b2:69:12:ee:5a:e4:27:ef:
e3:d7:36:6d:d9:7a:6f:fc:3d:bd:bc:1a:4f:ad:65:17:ca:af:
6b:69:74:25:bf:77:81:65:dc:de:70:bc:ea:f7:25:df:bb:a5:
fd:04:e2:fd:43:5d:b4:75:5f:12:3b:81:43:a4:e6:80:52:bc:
43:6e:d6:67:e8:26:24:f8:18:73:a2:cb:49:93:af:55:27:14:
08:db:75:51:4e:0a:31:e4:1b:c6:6d:16:fe:72:78:24:8f:de:
08:71:ee:cb:6c:7f:33:29:5e:e0:b3:13:04:9a:64:9c:7e:ac:
d4:71:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:18:42 2025 by rpki-client