Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/936aa8f0-f213-3add-b734-b3b90b099fe4.roa
File: 936aa8f0-f213-3add-b734-b3b90b099fe4.roa (raw, json)
Hash identifier: SnBDHL1Fgc3O+shUdOHdJcZ4W14SeU48CjYZxavkSF0=
Subject key identifier: D2:1B:02:93:C8:18:80:FF:39:E1:42:5E:B2:67:CC:49:48:5E:54:12
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9E2BD4F909EB4FA23EE40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/936aa8f0-f213-3add-b734-b3b90b099fe4.roa
Signing time: Thu 01 May 2025 17:18:37 +0000
ROA not before: Thu 01 May 2025 17:18:37 +0000
ROA not after: Wed 30 Jul 2025 17:18:37 +0000
asID: 22773
IP address blocks: 68.108.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:e2:bd:4f:90:9e:b4:fa:23:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:37 2025 GMT
Not After : Jul 30 17:18:37 2025 GMT
Subject: CN=74a0ece2-a99d-4f97-a3aa-145f066efb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:b2:dd:00:c1:70:ff:6c:58:85:f4:3c:c1:
52:fd:e9:6c:ee:ba:8d:f6:4e:d1:80:12:dc:a7:dd:
21:ed:bc:e2:c3:00:82:98:6b:69:5e:0d:4f:46:1d:
bb:85:c5:7c:f6:53:2b:99:4e:af:c2:36:89:b4:60:
76:f6:ee:2c:cf:d3:1c:6c:a8:39:42:55:01:14:cb:
04:f5:e3:70:0c:c0:6e:2a:03:5c:48:e6:1b:85:96:
59:8f:b7:25:dc:c3:5a:11:52:8c:1e:c9:1f:76:d3:
1c:dc:8b:90:2c:a8:d2:0a:44:9e:1c:f4:f1:c3:f9:
08:eb:bf:2a:99:1f:d1:ce:aa:57:77:80:21:bc:be:
bd:1a:c4:5f:e3:38:f6:65:07:3f:78:49:83:e9:d6:
35:56:2c:13:d3:ed:1b:ba:d5:1f:0e:40:97:ff:36:
5c:3b:d9:09:ed:24:c2:bb:48:be:fe:2d:4d:23:6a:
36:a7:57:98:06:0f:0d:6b:59:26:04:ed:a4:dc:9c:
65:59:fc:44:c6:32:2f:00:82:fe:85:29:69:92:f9:
98:7a:5c:b0:4f:66:c5:d8:88:ea:f9:95:a3:5d:b9:
64:cd:bd:7f:04:e3:78:18:11:d6:7f:0b:05:60:ca:
bb:8a:6c:64:b3:9f:a2:e9:ee:8c:0b:03:fe:62:ac:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:02:93:C8:18:80:FF:39:E1:42:5E:B2:67:CC:49:48:5E:54:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/936aa8f0-f213-3add-b734-b3b90b099fe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0b:f0:91:ab:ad:e6:b6:15:57:d7:de:cc:97:06:c0:a3:00:
31:d9:6c:96:20:51:13:26:6c:e9:e8:02:b0:8d:f9:2b:27:1b:
8f:a1:04:59:73:dd:90:b6:a5:ed:6f:60:1d:1b:11:f7:60:f3:
9b:e7:32:a1:ad:67:4d:1f:3c:a8:21:65:11:2e:7f:d3:6d:31:
ef:cc:ac:78:17:48:cf:2e:98:42:5b:c0:c8:dd:b0:d4:41:aa:
83:15:73:b2:94:1a:71:2f:13:53:ac:16:d9:50:2d:b1:6e:6f:
e4:16:3e:ae:91:f5:5e:a4:79:1d:85:48:ea:47:a1:05:a7:02:
04:fb:4d:a6:13:eb:74:64:1e:ba:8d:48:52:d3:24:10:09:55:
94:ef:9f:be:76:af:53:eb:79:87:66:6c:eb:07:10:c2:a8:6c:
0a:35:e8:c6:c7:18:de:11:91:84:30:be:dc:63:94:7d:47:35:
4c:03:2e:a4:68:82:62:58:a6:75:e8:81:04:30:3a:b7:f1:95:
b3:31:9a:f2:b3:ee:f5:f6:27:60:de:91:8c:99:11:75:7a:5f:
37:68:69:54:08:9d:ea:7e:81:23:55:2a:2d:4a:c6:04:80:74:
bd:f9:0a:ba:97:94:78:2c:1d:ad:f1:43:b7:ea:b6:d6:a3:f1:
ea:7c:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:29:05 2025 by rpki-client