Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c495a92c-6e45-3e66-8f89-df322320d92e.roa
File: c495a92c-6e45-3e66-8f89-df322320d92e.roa (raw, json)
Hash identifier: BfFzPgCL53/w5kQvyo9kI8wXSE8HFjCl+mv/0+qreRU=
Subject key identifier: B8:3C:C4:C1:CD:48:29:A4:CA:37:CC:43:17:5F:2D:25:22:64:12:91
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9F084C57321AD9FAC6E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c495a92c-6e45-3e66-8f89-df322320d92e.roa
Signing time: Thu 01 May 2025 17:18:44 +0000
ROA not before: Thu 01 May 2025 17:18:44 +0000
ROA not after: Wed 30 Jul 2025 17:18:44 +0000
asID: 22773
IP address blocks: 68.224.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:f0:84:c5:73:21:ad:9f:ac:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:44 2025 GMT
Not After : Jul 30 17:18:44 2025 GMT
Subject: CN=fec87936-3dc4-40d8-a664-37d558384f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:80:bb:76:1d:1b:e6:d0:96:5d:d4:67:53:
4f:b8:31:c7:13:57:42:d3:20:d8:7b:70:20:19:14:
22:94:b4:29:82:5f:64:50:6b:1d:7f:1c:09:17:35:
97:67:28:4f:b3:bc:53:05:ff:05:01:2e:fb:27:df:
c5:a5:5e:31:76:a6:66:3f:06:c8:c9:bc:44:0b:97:
61:e0:06:ee:d5:d4:da:cb:b7:ab:97:02:12:66:7b:
15:ba:c1:c1:4d:e7:a9:0b:ac:3a:c9:ef:cb:d2:cd:
4d:59:e3:fd:1d:fc:f1:a2:b7:9b:44:ee:df:7b:33:
c9:26:90:83:60:8c:af:10:5b:82:02:db:f3:64:00:
7d:6e:13:89:d3:e3:82:3d:90:cb:68:4f:92:b7:6e:
88:62:67:19:4f:6b:0b:8f:62:3c:e7:db:ee:2e:e2:
10:79:44:75:3a:b6:d7:f4:53:b4:ab:07:a7:86:d3:
64:3e:2c:42:bf:02:40:e2:9b:24:62:e3:40:42:a4:
9c:3c:9a:ca:bc:12:08:9e:ae:5a:8a:e6:1e:a5:f1:
60:82:c7:d8:24:4e:a2:4c:96:79:77:02:9a:73:8f:
2d:8f:9a:0e:5f:9b:a0:75:c7:4a:23:99:f6:36:56:
b8:9f:3d:98:eb:25:7e:65:40:6c:32:d6:4a:11:cd:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:C4:C1:CD:48:29:A4:CA:37:CC:43:17:5F:2D:25:22:64:12:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c495a92c-6e45-3e66-8f89-df322320d92e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:65:1a:18:3d:d5:fa:be:df:fa:eb:fa:30:30:8c:1c:31:c7:
e0:93:d9:ee:99:8b:94:2b:49:44:bd:50:2a:e7:67:50:b5:50:
d2:38:ef:94:c1:6b:30:5e:9c:df:6a:57:7b:67:2b:54:71:92:
50:0b:79:93:aa:8d:f0:61:e2:6f:a1:09:86:bc:a9:63:e5:4a:
d8:35:f4:b0:18:0c:96:fa:2c:4f:c6:3d:17:76:53:08:a1:a5:
c3:39:e2:ae:d6:d9:79:f3:29:0a:f2:36:d4:b9:ad:35:11:a4:
53:d7:b3:5d:bb:62:61:cb:85:d4:8a:8c:7a:5c:1d:88:74:41:
b6:8b:b1:d4:bb:94:35:27:3a:cf:82:3b:99:4d:e8:58:95:1e:
d4:aa:6f:90:11:7c:5c:ac:2f:b2:b0:47:2e:eb:15:e1:c0:3e:
25:81:86:8c:a5:0a:e9:35:2c:02:fe:a0:66:ea:ea:b6:2b:79:
bf:60:90:61:0c:50:48:51:b6:c5:e6:3c:ca:95:7e:84:17:15:
85:08:4d:68:5c:f3:c6:1e:cc:d1:0f:c3:dd:4a:f1:74:cb:45:
63:a7:ba:0d:f9:06:5b:2b:b3:a9:3d:93:94:90:c3:2a:f0:65:
6e:8e:79:99:d4:89:f8:73:42:2b:48:c1:8a:b1:0b:d3:22:f5:
00:d3:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:22:04 2025 by rpki-client