Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd0d72bc-482f-34d2-a159-93a2c70beb21.roa
File: bd0d72bc-482f-34d2-a159-93a2c70beb21.roa (raw, json)
Hash identifier: jKaZQwFVXhKE5BCk5OEFqYWfx8TaEJfjpaxjkVs7/F8=
Subject key identifier: 6B:96:D5:12:C1:17:C6:BF:61:52:F6:49:CF:1B:33:36:2F:66:B0:41
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD0FDA2C95763C7012DE00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd0d72bc-482f-34d2-a159-93a2c70beb21.roa
Signing time: Thu 01 May 2025 16:20:33 +0000
ROA not before: Thu 01 May 2025 16:20:33 +0000
ROA not after: Wed 30 Jul 2025 16:20:33 +0000
asID: 22773
IP address blocks: 68.2.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:0f:da:2c:95:76:3c:70:12:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:33 2025 GMT
Not After : Jul 30 16:20:33 2025 GMT
Subject: CN=8208d38c-b94a-472f-b8a3-9ade80ae3630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:94:9e:96:04:7d:8c:3f:34:80:ed:1b:30:
86:34:ba:98:5d:62:d1:7b:99:5c:40:ac:09:74:12:
73:52:4d:41:5f:b4:00:be:1d:f3:2a:4e:25:f6:99:
3a:8e:69:6f:46:c8:4a:69:76:11:55:8f:15:dd:c0:
05:00:de:67:3a:40:2c:b2:54:90:d8:f8:0d:2c:d5:
a2:50:41:6a:b9:e2:15:3d:fe:85:84:d8:7e:b7:62:
e6:63:ec:40:d7:70:79:65:03:5c:de:ce:0f:4f:fb:
cc:2d:35:19:52:4b:0d:55:59:e7:b6:5b:fa:46:de:
db:f8:0c:46:4e:e9:24:54:fb:9f:9a:71:54:77:9c:
99:a3:fc:0a:d0:0d:ee:98:62:9a:b9:cc:0c:b0:e0:
67:01:7c:2b:1d:ea:cc:ed:5d:ba:fe:19:25:7e:9f:
80:78:6d:82:77:3e:c5:f0:81:53:60:6c:6a:7f:01:
78:5c:93:c4:40:5c:9f:01:e3:15:92:0e:34:8b:80:
1c:5e:df:ff:34:e3:87:0e:6d:a0:3d:af:88:6a:d5:
b9:1a:eb:f5:9d:ec:cd:1d:37:24:84:da:47:b1:56:
5b:d2:ba:c0:c8:35:5d:84:c5:40:32:a2:d1:6b:46:
35:41:3b:1b:08:aa:75:a6:9b:91:90:f9:94:2c:f9:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:D5:12:C1:17:C6:BF:61:52:F6:49:CF:1B:33:36:2F:66:B0:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd0d72bc-482f-34d2-a159-93a2c70beb21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:da:1d:e8:2b:8e:c3:c0:ad:38:67:e1:50:86:d1:3a:04:8d:
ae:f0:14:f3:46:dd:e9:af:96:83:4d:fd:40:7e:02:b0:da:d9:
a5:16:ba:ea:36:03:63:d7:d4:59:9d:71:cc:29:35:a9:af:82:
0e:3b:d3:70:c3:7a:32:92:84:55:db:eb:04:8b:45:dc:12:c8:
80:e6:d8:d0:15:77:64:e9:27:cc:97:26:9f:32:f5:75:4b:8d:
ed:80:73:b7:e2:1d:58:2e:9a:d3:dd:b3:12:f7:a1:37:1f:50:
c4:83:0c:9d:3d:67:04:eb:1d:5b:a7:e1:0b:d0:65:70:b1:7e:
fe:1f:0a:0b:fa:bd:c2:32:6a:d7:65:52:46:4c:75:b2:fe:b3:
38:62:3b:64:3f:51:3e:7e:ca:4d:70:44:b4:b9:f7:3f:02:75:
14:6f:b5:e0:43:21:6e:60:e3:c1:f2:4f:8c:6a:3b:b2:a3:a5:
5e:42:12:37:7c:3b:c8:66:a4:c1:dc:38:ca:50:0f:2d:f4:cb:
d6:1c:2a:6c:aa:f4:c6:b6:fb:5b:19:86:5e:b9:63:07:14:16:
bc:64:cb:16:d9:cb:93:64:81:47:19:a5:90:e3:dc:46:aa:35:
57:06:d3:31:e4:ec:1f:60:2d:bd:12:f4:4a:8f:b4:29:33:b1:
e1:58:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:33:35 2025 by rpki-client