Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8cf8326-970b-3362-ae1c-7840e44fd593.roa
File: a8cf8326-970b-3362-ae1c-7840e44fd593.roa (raw, json)
Hash identifier: T4LY0EgcEY3kG3LWN7SxeCjc2NsyTCSxK92OOXwVdrw=
Subject key identifier: F9:26:F8:12:BB:A6:D2:62:2C:76:6F:D8:45:07:9C:27:50:52:3E:D3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE4A843EE99FFEDCBE9C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8cf8326-970b-3362-ae1c-7840e44fd593.roa
Signing time: Thu 01 May 2025 16:23:01 +0000
ROA not before: Thu 01 May 2025 16:23:01 +0000
ROA not after: Wed 30 Jul 2025 16:23:01 +0000
asID: 22773
IP address blocks: 68.231.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:4a:84:3e:e9:9f:fe:dc:be:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:01 2025 GMT
Not After : Jul 30 16:23:01 2025 GMT
Subject: CN=39ba7aa5-b231-4e79-90fe-a9cfb887fbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:db:48:30:e1:af:6f:e9:82:b1:5e:83:10:
d1:62:46:b8:b4:f7:b9:16:e6:70:16:7f:55:bf:13:
45:70:fd:94:77:ba:eb:d4:1f:a1:87:09:b7:cf:ef:
12:2b:97:e9:95:45:06:a4:8d:bf:41:9c:aa:ae:3e:
65:a5:cc:9f:2b:7a:ce:a5:be:a4:be:9b:f7:92:3e:
1c:7d:3c:17:b3:fa:0b:a4:27:e8:ef:7f:79:c8:de:
f7:08:a4:fd:21:a3:05:74:ea:62:77:cb:5a:b2:5d:
33:e4:0a:5f:87:81:dd:ad:b6:71:98:b9:ba:36:82:
49:a4:9e:47:30:02:6d:08:2a:97:ef:65:a0:7d:d7:
b8:46:1a:71:09:5d:7a:7d:e1:03:76:40:28:eb:0b:
54:b8:8f:6d:b8:f6:78:d0:5e:ad:a7:52:e3:50:18:
17:c0:5b:18:08:02:b4:a0:59:70:45:64:5a:8b:b1:
aa:5c:7e:3c:6e:e2:4f:d7:bb:ff:8c:52:cc:55:1d:
13:b4:44:b6:70:91:c3:95:01:cf:d0:03:15:12:62:
91:8b:bb:fb:94:6b:43:a7:23:37:07:fc:c3:52:93:
b4:c3:5e:25:a2:15:1d:84:12:08:cf:11:fc:d3:54:
45:d2:ed:90:6d:ed:e7:a5:a9:a0:db:35:d9:85:6f:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:F8:12:BB:A6:D2:62:2C:76:6F:D8:45:07:9C:27:50:52:3E:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8cf8326-970b-3362-ae1c-7840e44fd593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:98:d9:ef:7d:f8:4a:20:f6:65:21:70:c6:b2:17:8a:66:fa:
0a:57:a4:52:a1:1d:29:c6:2f:a9:15:cb:c5:b0:6a:14:f2:b3:
94:17:49:e0:2c:36:c9:28:69:62:0c:b1:0c:06:f6:d8:e6:b3:
51:d6:a9:6e:53:5f:51:ea:46:2b:9c:49:2f:ee:24:8d:f6:e7:
5d:6e:10:bf:f9:97:ad:ec:9c:21:e5:33:ec:80:aa:e0:c7:9e:
6e:ad:fd:c5:6b:1b:68:b0:3e:e2:74:01:1b:9f:d9:36:42:ff:
d5:9a:8c:11:05:61:5c:46:8e:c1:50:32:56:b6:ef:c5:31:da:
d1:fe:39:84:f6:8f:c0:c6:f8:fb:55:c5:45:d7:ca:66:9a:86:
9b:68:4a:bb:43:ff:45:26:5f:d2:9c:74:f6:fe:d1:e6:88:f1:
5a:b7:c9:a4:48:17:6a:d5:b1:75:a0:8c:ff:25:25:0c:c7:e6:
a1:8f:7b:49:17:8b:84:65:d3:52:c6:06:22:d7:d3:8a:3b:96:
43:57:c5:fa:1d:ad:76:33:40:79:82:b0:81:7a:c2:fb:48:b4:
f9:89:d6:7e:84:ba:65:78:22:8c:cb:80:a7:d4:0d:c3:a3:3a:
cd:ec:b8:f4:2a:34:85:a9:55:25:75:6e:b2:67:86:21:f3:c8:
67:97:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:47:46 2025 by rpki-client