Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72f168df-1400-3ca2-877c-2e179aa50809.roa
File: 72f168df-1400-3ca2-877c-2e179aa50809.roa (raw, json)
Hash identifier: R5s5LJgXEu9/OVh5lglDDPqLw8hJXiK5JDfHCHLMQxg=
Subject key identifier: AC:EB:EC:59:62:59:91:95:37:6C:06:80:E5:17:62:E3:52:B5:5E:CB
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDBC0161AB05D77A22A000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72f168df-1400-3ca2-877c-2e179aa50809.roa
Signing time: Thu 01 May 2025 16:21:54 +0000
ROA not before: Thu 01 May 2025 16:21:54 +0000
ROA not after: Wed 30 Jul 2025 16:21:54 +0000
asID: 22773
IP address blocks: 68.106.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:bc:01:61:ab:05:d7:7a:22:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:54 2025 GMT
Not After : Jul 30 16:21:54 2025 GMT
Subject: CN=d609cb20-d082-4c6d-8480-fe7ed6dde4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:14:4a:d4:79:62:a5:29:6e:38:d2:e9:16:
a9:00:59:07:26:17:32:49:e7:29:5d:e6:96:0d:97:
ff:5e:00:0f:7c:20:86:c6:a5:f1:a0:3b:3d:38:2d:
55:41:b4:f8:54:8d:f6:19:43:ee:13:cd:be:44:fb:
bb:43:4c:27:b1:24:ba:e9:fb:d2:ba:2f:19:84:61:
34:55:2f:77:b9:da:e9:7d:34:eb:8d:a1:49:2b:ed:
61:0b:31:75:db:ac:91:6c:77:b3:2f:b0:b7:bc:5a:
0c:4b:ab:e8:b1:05:ba:ab:f0:7f:bd:04:04:13:9a:
52:c3:df:1f:17:c3:a7:b6:da:86:05:92:77:55:a4:
be:b4:1a:86:3d:8c:90:41:4f:50:52:21:fa:0b:08:
2b:3e:48:b1:42:4a:3d:30:46:2e:76:a1:b3:31:b4:
99:3a:54:d0:31:bb:04:9c:b8:ef:31:e1:9e:77:2e:
6e:ac:83:99:0c:a3:a8:b0:8e:6d:47:18:4c:b3:07:
b4:71:84:7f:32:46:5a:d7:d1:96:9f:a9:b0:eb:8b:
b8:66:a0:33:ee:f1:37:cf:ca:e6:56:e8:f3:ae:9c:
2d:b3:2e:99:d0:6f:32:45:b8:9c:ee:e7:90:25:89:
5a:1d:15:a8:87:cc:a6:24:8d:24:07:ae:a3:b4:7c:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:EC:59:62:59:91:95:37:6C:06:80:E5:17:62:E3:52:B5:5E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72f168df-1400-3ca2-877c-2e179aa50809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.106.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c2:47:92:9a:01:82:1f:50:87:b9:a5:c5:26:94:fc:64:3f:
e7:8b:72:26:5a:8a:2c:aa:91:06:7f:45:26:e2:3f:ae:06:7a:
db:40:e0:ed:74:a9:f8:9e:2f:03:6c:b0:56:82:29:37:30:eb:
72:f7:92:c9:7e:85:fc:ba:a9:4a:00:da:1c:db:0d:06:ec:a0:
c0:93:e8:87:4d:d0:72:c4:ed:1d:a3:51:ba:df:39:01:67:0e:
07:ea:db:59:66:b8:a1:a1:79:8c:d0:6f:47:cb:73:e8:f8:3e:
60:66:b4:2f:5d:2f:f1:e6:d5:3a:84:ba:f7:f2:36:81:15:c9:
bc:86:2d:24:dd:98:29:23:69:fe:98:03:ed:02:5e:c0:c0:09:
74:6f:60:e2:50:76:8d:98:18:d9:0f:a6:cc:c0:fc:dd:bd:99:
40:e4:91:a7:32:f1:d7:f7:52:70:16:41:a4:f9:c5:3e:90:e1:
6c:ee:6e:5d:1f:df:19:e9:88:31:3f:a8:cf:af:b9:c5:50:e8:
99:d8:e2:2e:71:2a:58:df:54:01:4a:ee:85:fb:ec:a9:8d:3d:
ce:28:bf:ac:52:83:6e:00:ce:fc:d7:2f:71:28:85:74:19:fa:
24:94:45:ed:d8:9a:32:e9:c0:d6:78:70:a8:a5:cc:2d:46:3a:
37:fb:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:44:35 2025 by rpki-client