Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/704a4ee0-c26b-3502-a1fb-5dd19983d130.roa
File: 704a4ee0-c26b-3502-a1fb-5dd19983d130.roa (raw, json)
Hash identifier: c6iWQ0ukdPxH6fOBv1XM7H1Bzk+pS1d6bFeBtSkvGyk=
Subject key identifier: D5:14:67:3A:27:0C:28:56:33:C9:3E:8D:C5:56:DE:2B:F6:04:A7:28
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD6DE4E36BA5FF6195F800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/704a4ee0-c26b-3502-a1fb-5dd19983d130.roa
Signing time: Thu 01 May 2025 16:21:17 +0000
ROA not before: Thu 01 May 2025 16:21:17 +0000
ROA not after: Wed 30 Jul 2025 16:21:17 +0000
asID: 22773
IP address blocks: 68.98.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:6d:e4:e3:6b:a5:ff:61:95:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:17 2025 GMT
Not After : Jul 30 16:21:17 2025 GMT
Subject: CN=e00c16ae-fb2a-4ddb-b055-60f22b09cef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:ad:50:1b:3a:ee:46:d0:a7:fc:ec:cd:aa:
4a:f3:00:4a:bc:a0:7d:d1:01:3b:22:c7:a4:07:38:
53:78:6e:1c:75:35:2f:c3:f2:7d:27:46:6f:d5:9b:
52:b4:e4:7b:69:73:b5:af:5d:01:35:27:f1:b0:f2:
76:17:60:15:52:5f:48:ae:0c:ef:0e:33:2b:8c:bd:
e5:15:99:e4:3b:c5:57:64:96:24:5f:60:76:d1:c1:
0e:fb:06:12:4d:fd:fd:2a:4a:ba:20:43:ab:f4:20:
0e:41:58:cd:e4:61:a3:1e:14:3e:55:dd:91:aa:37:
4d:2c:12:d3:23:22:15:f5:99:24:03:36:ee:83:ed:
89:cc:74:13:ae:1e:02:8f:b7:6c:84:67:35:dd:cb:
22:94:3b:71:b3:19:00:c6:5c:54:e3:79:b4:c5:67:
91:ef:8f:f8:03:79:17:cb:05:b3:a2:41:52:67:2d:
3f:27:65:85:e9:bb:3f:ac:93:25:5e:72:df:eb:37:
ce:85:db:37:31:6e:43:2f:8d:6f:79:20:5c:6c:d7:
19:50:ae:c6:8a:52:15:82:24:09:74:c4:a2:df:0f:
14:04:21:5d:53:3a:53:0e:9a:20:11:7f:87:78:8b:
78:09:84:46:01:23:58:36:42:63:24:da:19:94:99:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:67:3A:27:0C:28:56:33:C9:3E:8D:C5:56:DE:2B:F6:04:A7:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/704a4ee0-c26b-3502-a1fb-5dd19983d130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.98.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:0b:84:4d:82:f2:b6:f9:18:ae:04:86:fa:30:e4:1a:f4:de:
98:2c:f5:20:19:3d:64:13:bc:1c:1d:b7:8c:7a:2c:9a:c5:a7:
a2:9b:86:cb:70:dd:e6:a2:38:e6:aa:87:93:c6:49:b7:45:c6:
5d:f7:34:67:cc:4a:8e:47:e1:ca:55:25:7d:c8:b6:e1:c3:ac:
97:1b:41:2c:6c:05:7d:9d:57:b2:9d:6d:c3:d0:3a:54:a3:eb:
e4:41:0f:6f:66:c3:31:38:26:26:3f:f7:b1:c0:58:27:c4:a2:
42:a5:c7:71:db:91:ea:54:74:c2:2b:5b:14:c4:b6:09:14:33:
12:7b:34:12:f8:6c:d3:39:c9:e6:d6:15:f5:91:90:5f:e4:8f:
82:3e:b3:01:45:1e:66:29:93:28:eb:e3:fc:b1:ff:8b:91:f8:
61:ee:4f:b7:a4:1b:c2:e7:3a:dd:35:80:21:53:c2:ed:55:88:
00:48:56:93:e3:54:16:fe:37:6d:8c:59:2a:05:ce:ba:5e:04:
3d:72:28:52:eb:93:7a:66:11:4d:b1:73:27:c7:e5:1f:06:d6:
d9:ad:e7:3f:0a:2c:77:c7:30:27:30:bd:70:d1:f6:39:24:2b:
4b:30:f9:f8:c4:f7:cd:3b:63:0b:ee:33:68:07:10:61:fe:49:
fa:d9:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:10:06 2025 by rpki-client