Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95e87aa7-2c25-3b29-b513-6abe3764b564.roa
File: 95e87aa7-2c25-3b29-b513-6abe3764b564.roa (raw, json)
Hash identifier: Sx8wtQ8GZ1FkgJ4lAadGzca8mLeVMEwo5wAKPd/jg/s=
Subject key identifier: EF:A2:EB:FB:6D:3C:AC:6D:45:F7:E1:69:59:99:1A:E6:08:42:C0:DE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDDB2F3E0170D486FC4220
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95e87aa7-2c25-3b29-b513-6abe3764b564.roa
Signing time: Thu 01 May 2025 16:22:09 +0000
ROA not before: Thu 01 May 2025 16:22:09 +0000
ROA not after: Wed 30 Jul 2025 16:22:09 +0000
asID: 22773
IP address blocks: 68.109.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:db:2f:3e:01:70:d4:86:fc:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:09 2025 GMT
Not After : Jul 30 16:22:09 2025 GMT
Subject: CN=2ae21169-2588-4ae1-b8a5-030bba2e0cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:ee:03:74:76:b5:fc:05:78:ba:4e:ca:99:
8b:7b:b2:78:bd:2d:16:16:46:a0:d1:6c:da:76:ee:
1f:56:97:93:91:4e:91:60:5c:5e:5c:47:7a:aa:0b:
05:2d:a9:ae:2c:fd:2f:27:94:d1:5e:f8:df:0f:ef:
49:5b:aa:c4:07:ac:27:a0:50:18:44:3d:4b:57:08:
6f:42:0f:28:49:c9:3e:8f:68:13:78:88:f2:3b:b6:
4b:a7:8f:e8:89:2f:d3:b7:49:2d:8b:40:5c:95:04:
18:3b:b7:df:db:1c:b8:c9:18:7f:cd:9a:8b:df:79:
b7:5b:a4:ae:f1:9e:04:bc:ed:05:54:1d:17:c2:5d:
41:db:28:5b:d9:a1:1e:d3:d5:00:e8:25:1b:5d:3e:
03:55:db:0a:70:41:f4:d2:8c:a2:5b:0b:35:17:76:
9d:44:26:2e:70:e8:7d:43:7e:65:16:31:bc:00:7a:
af:00:42:2a:28:41:67:1b:84:2f:cd:34:14:88:2d:
a0:2b:85:d9:6a:a0:6b:5e:3f:24:a0:93:81:31:bd:
0d:78:ca:89:ab:ed:5d:2b:a3:62:8e:9a:18:45:b2:
4a:97:5f:be:2d:52:95:a4:c1:ed:66:92:7d:12:08:
bd:8a:ef:50:bb:25:86:7e:0f:46:85:1e:f0:06:76:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:EB:FB:6D:3C:AC:6D:45:F7:E1:69:59:99:1A:E6:08:42:C0:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95e87aa7-2c25-3b29-b513-6abe3764b564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.109.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9a:d6:9d:6e:f4:60:d0:fe:84:c3:cf:be:4c:fd:8b:ca:69:
53:78:cc:b4:a4:b9:87:32:df:4f:30:04:3f:29:36:96:bf:3b:
2e:77:25:66:22:4f:84:b3:f8:1d:db:88:69:fb:78:bd:f0:90:
27:43:8a:12:ab:3b:91:61:77:23:94:30:d6:5c:9b:bd:07:57:
83:a5:3a:f3:39:79:c9:95:69:56:e7:6a:af:d3:a1:f6:e3:72:
d5:ae:a3:5d:2b:1e:5c:d1:d5:fa:49:54:08:86:d8:f0:91:c6:
ed:22:4a:29:06:ae:4d:d2:af:4f:09:46:8d:c7:32:f0:3f:42:
b8:de:c3:f9:47:a6:ff:52:22:76:15:9b:d2:33:9c:d4:d9:99:
f3:70:7f:c5:64:8e:4d:15:e7:04:50:d3:1a:6f:03:b2:96:92:
a6:10:07:a3:77:b5:d3:69:df:1b:0d:76:af:54:f3:92:11:73:
cf:df:63:94:8a:29:05:e2:fe:a3:29:39:2e:24:97:31:b8:a3:
83:f8:d5:05:62:ad:c5:3b:f1:f9:9a:6d:61:04:d8:15:9d:b7:
a7:88:5e:cf:1e:12:44:9f:81:7c:0e:53:7b:7a:8a:89:df:3b:
b3:43:8f:e6:54:73:bb:13:ab:78:b1:15:0c:c8:6e:34:e9:43:
ec:94:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:20:02 2025 by rpki-client