Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cc22533-ca62-3577-91be-6d5a15b3d52d.roa
File: 7cc22533-ca62-3577-91be-6d5a15b3d52d.roa (raw, json)
Hash identifier: EzWvnyQ1D2vvAd1DPM4ruRc9Nv5E7YfQhXZaPW7Le6s=
Subject key identifier: D3:BF:93:05:ED:CE:9B:23:72:C8:BE:FD:07:A7:20:58:8F:E6:C6:A8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD83A89AC8BC2725C65800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cc22533-ca62-3577-91be-6d5a15b3d52d.roa
Signing time: Thu 01 May 2025 16:21:28 +0000
ROA not before: Thu 01 May 2025 16:21:28 +0000
ROA not after: Wed 30 Jul 2025 16:21:28 +0000
asID: 22773
IP address blocks: 68.99.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:83:a8:9a:c8:bc:27:25:c6:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:28 2025 GMT
Not After : Jul 30 16:21:28 2025 GMT
Subject: CN=8dbfdcf7-42e8-4bad-8177-d1c628a5d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:13:74:00:ef:08:e7:23:aa:a0:11:a9:75:
92:5d:c3:83:8c:a3:5e:b0:ee:dd:d8:33:08:8f:61:
e7:27:66:b3:e9:98:9c:fb:a4:46:67:3d:ac:c6:3f:
6d:6f:a7:e7:8b:51:32:60:4d:ad:0c:8b:79:9d:1d:
9d:d3:b6:d4:bd:7b:5d:96:2d:d8:96:ad:4e:e6:f3:
e7:7e:7d:2a:88:b4:a1:21:c2:5f:1e:e1:09:ad:bd:
2d:41:fb:e5:5b:c4:48:56:26:ce:0d:19:72:48:1f:
c1:89:56:f7:fc:d9:91:e7:3d:88:ba:aa:2c:ea:ac:
c3:00:2f:3b:63:ca:b0:6b:fc:23:8d:f4:7a:ac:5a:
22:f6:92:74:e0:02:c9:cb:f8:16:41:d6:48:dd:c2:
17:77:23:4d:2b:b7:f4:51:85:8c:2c:78:1e:ac:0e:
38:ea:26:18:42:ee:ff:0d:71:61:b6:bc:18:31:88:
f9:0e:5e:c8:02:25:46:78:d4:10:12:a7:75:25:55:
2b:da:c0:c0:ae:c0:44:60:07:83:be:5d:7b:13:20:
16:06:bf:c3:fe:35:14:d3:e1:db:c2:45:0f:5d:f2:
48:e8:92:ce:06:12:06:eb:20:ad:21:fa:b7:a8:01:
12:42:63:09:06:2d:e1:9b:a1:ea:bc:75:cf:4a:89:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:93:05:ED:CE:9B:23:72:C8:BE:FD:07:A7:20:58:8F:E6:C6:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cc22533-ca62-3577-91be-6d5a15b3d52d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.99.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:48:7b:7a:ba:2e:b0:ee:e0:4c:65:96:e8:a5:63:b8:b3:e9:
f5:f8:be:b4:78:29:e3:70:a7:95:03:3b:fd:87:73:b9:7d:7b:
1c:07:a5:7b:b1:04:67:54:1d:51:3b:c0:16:89:ce:05:1c:e1:
4a:98:74:9a:a4:44:d1:44:af:bc:16:05:4f:93:58:7d:e0:08:
9a:bc:ae:cd:f9:91:46:da:53:fd:96:4e:0a:38:0e:8f:a4:ec:
83:ba:49:76:2d:a8:06:7b:25:bc:0f:b8:64:28:f8:91:ba:3c:
5c:c6:08:f5:72:15:56:18:ee:fd:0c:73:c9:89:e3:c9:a1:84:
5f:e4:35:5a:7a:5c:51:9e:81:05:ad:43:fa:23:65:8d:ae:23:
6a:13:71:44:ae:6e:56:35:36:bf:6e:83:a6:0d:6f:fa:6f:be:
56:bd:83:5c:bd:4e:3e:b9:8d:a2:b5:78:2d:d6:d4:83:d8:09:
68:d2:5c:30:22:99:76:ad:58:a3:22:7a:cf:1e:51:7b:f9:24:
f9:8a:2f:61:81:0f:de:a4:cc:7c:a9:cd:ce:a2:16:7b:75:c3:
1a:a7:89:80:73:d7:05:77:3c:cf:66:9c:48:9d:f4:d4:0b:8a:
84:26:e6:0a:da:37:14:0c:68:44:3b:e3:30:6e:74:4e:55:02:
f5:30:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:00:45 2025 by rpki-client