Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8177891e-d127-3c3d-af1c-ec93addddbd1.roa
File: 8177891e-d127-3c3d-af1c-ec93addddbd1.roa (raw, json)
Hash identifier: fqFDnWSdrNJt3VxmC9fZ7MbEtAcaDnexaOtQ61KBuMg=
Subject key identifier: E1:F3:2A:1D:C8:15:F4:E7:B0:CF:5B:33:1A:E1:D7:F6:62:A4:53:4E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE31B1BB0F486AA8DA8B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8177891e-d127-3c3d-af1c-ec93addddbd1.roa
Signing time: Thu 01 May 2025 16:22:50 +0000
ROA not before: Thu 01 May 2025 16:22:50 +0000
ROA not after: Wed 30 Jul 2025 16:22:50 +0000
asID: 22773
IP address blocks: 68.230.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:31:b1:bb:0f:48:6a:a8:da:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:50 2025 GMT
Not After : Jul 30 16:22:50 2025 GMT
Subject: CN=716c660b-4225-4dfe-b0fc-d32b581be71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:6f:fd:13:84:21:81:72:bd:71:28:7d:cf:
8b:75:aa:17:1c:c1:77:a8:5b:da:9f:ee:bd:d7:b3:
27:07:72:13:25:26:b5:f1:c3:3f:47:c0:76:cd:cf:
5e:26:a1:e3:80:e8:bd:03:a8:1a:67:01:e4:d2:8c:
ed:e3:8c:1d:67:2a:8d:92:e8:99:1a:16:f2:0c:66:
b9:ba:11:99:6c:92:0d:25:b1:6d:e4:be:2a:28:84:
d4:7f:d4:20:74:3c:75:29:3a:a2:c8:22:af:7a:9f:
1e:11:f8:9d:80:5c:b0:75:ef:4d:00:31:c3:17:13:
18:9f:2d:c4:77:b9:ed:84:94:9a:7c:fe:d3:de:58:
97:29:21:0a:88:30:1e:41:21:fa:a4:50:9a:44:68:
81:4a:ac:d9:ce:f8:c5:5a:62:54:07:90:dd:b6:56:
0d:a6:e4:bc:67:88:0d:38:55:c5:6d:8f:60:82:95:
a7:26:47:b0:8c:82:28:9f:e0:fc:36:c3:ef:e0:59:
da:54:35:78:06:78:c1:13:ad:67:2c:11:2a:86:95:
33:73:e3:0e:44:85:45:be:bc:be:cd:df:33:54:69:
12:9f:fe:85:84:61:e4:2e:72:ee:36:25:90:dc:98:
f8:be:6e:f4:28:84:e4:7a:6c:65:c1:9a:14:51:65:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:2A:1D:C8:15:F4:E7:B0:CF:5B:33:1A:E1:D7:F6:62:A4:53:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8177891e-d127-3c3d-af1c-ec93addddbd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.230.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:e7:d2:9a:77:16:da:27:85:95:69:c6:8d:ea:71:78:0d:d1:
35:0d:18:d4:95:78:fd:f2:ae:15:d7:c2:d6:b0:8f:16:e6:20:
b0:ee:8a:c4:4d:10:05:c1:74:7f:2c:23:6a:aa:6c:09:af:4a:
c3:93:bb:d6:35:29:a7:33:3b:e8:ee:17:c9:2d:d6:c3:20:2a:
cd:57:b0:2f:24:02:e3:b8:d4:72:e5:fd:a5:1e:ce:36:fa:1b:
6b:7a:81:06:43:98:8b:ae:b5:3f:0f:77:9b:37:13:e0:43:de:
34:3b:46:5e:50:30:5f:d7:c7:22:87:2b:6a:8a:2a:83:3e:57:
81:59:fd:13:96:cc:3a:05:93:40:52:d5:78:31:41:b8:82:24:
ba:cb:38:d2:3f:08:2b:08:ae:b6:e7:ce:00:bd:c9:c0:41:2e:
c2:28:ba:e8:a5:da:97:33:c2:94:06:e8:97:5c:b9:fb:d7:4c:
26:af:08:10:5d:8a:f0:d2:de:c1:24:b1:0d:36:4e:10:65:8a:
42:da:ca:9c:81:57:8f:57:ec:65:eb:5b:c5:16:4c:f0:a0:73:
14:8e:f5:35:2c:04:d8:b0:12:ef:c1:77:f0:3d:22:63:2f:b7:
83:26:cc:5b:16:21:5d:27:41:73:e0:a4:d5:d7:38:00:c4:97:
29:2f:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:19:46 2025 by rpki-client