Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/77a40775-b28a-37c7-b9af-40376f20af8b.roa
File: 77a40775-b28a-37c7-b9af-40376f20af8b.roa (raw, json)
Hash identifier: Px74Cqajov0yTAZs3Fq0CFnyJ2LcKZK9oTQaub3+RcU=
Subject key identifier: 2B:25:CB:56:D4:5D:81:7A:7E:63:67:33:76:E9:8C:46:70:22:2B:3B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9D37C03B8F900C468E5C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/77a40775-b28a-37c7-b9af-40376f20af8b.roa
Signing time: Thu 01 May 2025 17:18:30 +0000
ROA not before: Thu 01 May 2025 17:18:30 +0000
ROA not after: Wed 30 Jul 2025 17:18:30 +0000
asID: 22773
IP address blocks: 68.108.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:d3:7c:03:b8:f9:00:c4:68:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:30 2025 GMT
Not After : Jul 30 17:18:30 2025 GMT
Subject: CN=2fcee2c5-2ba8-4c31-95be-1c0163a67d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:d5:31:31:95:78:76:fc:69:7b:3b:e3:ad:
5a:66:dd:45:fd:41:ed:2d:6f:e3:15:60:2f:42:63:
a4:f9:45:73:e7:a0:84:10:79:78:a6:0a:d9:7e:6d:
b0:d1:e9:80:d0:81:f3:11:dc:bc:5c:d4:45:64:a1:
f6:b6:e6:e5:e1:11:58:50:10:6a:76:5d:46:01:3e:
fe:a9:4f:21:8f:26:dd:53:31:da:a1:48:b4:d0:3b:
5f:ea:b5:db:1b:11:77:83:99:27:68:92:6e:f8:b4:
c5:20:96:af:93:7c:3e:8f:fb:cc:76:47:de:de:08:
57:77:fa:f8:b1:a2:36:45:89:57:73:cf:d3:c7:c2:
62:c0:b2:38:a4:97:4b:e6:a5:9c:f8:89:18:1a:c6:
7c:5d:d9:1f:51:79:a6:e6:e8:0d:47:21:f6:cd:2b:
d7:63:3b:79:e4:61:bd:fc:77:99:6a:7d:1f:75:c9:
e2:ad:01:9c:f4:c2:66:e1:b3:1d:92:94:ee:d5:c5:
d5:bb:76:19:b8:60:8d:47:a3:4a:ed:bf:b9:9c:9c:
73:f4:7b:30:53:66:eb:ae:6e:4f:c8:53:5c:54:74:
2f:3f:0b:05:4e:88:6a:45:40:3b:a2:87:80:82:06:
61:87:ed:e5:49:4e:85:f3:95:5d:c4:9e:7a:30:ff:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:CB:56:D4:5D:81:7A:7E:63:67:33:76:E9:8C:46:70:22:2B:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/77a40775-b28a-37c7-b9af-40376f20af8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ed:12:af:e3:ba:74:a3:d6:48:c4:ec:78:1a:4c:95:d5:ed:
5c:ad:71:e6:29:43:0b:0b:99:12:af:80:f7:0e:e7:ea:b8:29:
a5:95:93:ef:d5:b1:aa:13:02:95:53:18:4f:97:a4:29:f1:69:
f5:df:85:aa:f3:39:1a:dc:b6:f8:46:7c:b6:1f:ad:3c:2c:6a:
ad:97:b5:fa:31:03:4a:30:af:fa:58:81:2e:aa:6b:7b:49:1b:
b1:a7:c0:8e:b0:b0:5a:80:51:a4:02:22:31:42:d0:7e:08:42:
57:b8:a6:e3:cb:7b:67:0a:ee:b7:b6:1e:af:76:04:c1:fd:5d:
c1:88:b0:84:6a:4f:dc:c0:81:d8:9a:c3:ca:22:34:b7:39:e0:
b1:90:6e:2e:30:3c:5a:92:dd:67:e7:ec:12:b5:a7:e6:38:30:
63:8d:4e:fd:7f:03:0f:eb:35:dc:96:ac:3a:cf:ad:e7:3c:cc:
5f:86:cc:88:fa:f7:44:c6:51:5f:3a:3d:35:6e:ed:5a:02:18:
82:44:d1:7e:75:f8:9a:eb:52:1f:d6:e5:9b:10:83:ca:77:dd:
c9:9b:ca:eb:f2:55:29:68:d0:dd:a9:7a:a7:1b:f7:94:de:31:
b5:f1:d8:6c:0f:3e:64:6a:4a:26:fd:d0:b4:9e:27:65:07:43:
a0:6d:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:33:45 2025 by rpki-client