Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbfd0fb8-8dd4-3190-a70a-b79464a6bc29.roa
File: cbfd0fb8-8dd4-3190-a70a-b79464a6bc29.roa (raw, json)
Hash identifier: zgwN80Ts7uQnsOzY4ll1FHB6o/VcUZv5/6Uth1Dan7s=
Subject key identifier: 9F:F8:88:4C:73:11:93:19:0A:52:4E:10:F4:16:4E:69:C3:1B:48:1F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD1A1A8118EBEE85A68D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbfd0fb8-8dd4-3190-a70a-b79464a6bc29.roa
Signing time: Thu 01 May 2025 16:20:38 +0000
ROA not before: Thu 01 May 2025 16:20:38 +0000
ROA not after: Wed 30 Jul 2025 16:20:38 +0000
asID: 22773
IP address blocks: 68.2.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:1a:1a:81:18:eb:ee:85:a6:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:38 2025 GMT
Not After : Jul 30 16:20:38 2025 GMT
Subject: CN=5c0b9b73-ee65-4374-a3d2-5d7c603b6be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:67:f9:fb:6c:a2:f0:7c:34:ff:8c:58:3d:
ee:fb:26:20:78:ff:86:54:34:a8:c0:79:f2:a0:7d:
59:33:b0:50:5f:ad:25:6b:a9:24:44:0b:e3:94:93:
62:61:16:a5:ec:40:7d:e7:43:98:e5:44:ab:e6:63:
11:18:62:f3:df:ac:81:51:77:fe:fd:a0:1d:bb:b1:
3a:5b:95:f1:69:41:d8:06:7c:73:c8:06:96:5d:5e:
d7:74:c4:e6:ee:35:0e:fa:a2:10:b3:c0:f4:a8:a7:
ac:ed:37:6d:7e:e1:f6:0d:cf:72:45:1f:26:e3:f1:
52:f0:5a:02:c1:47:b4:b1:11:43:10:e2:f3:84:0d:
49:df:c2:bd:ca:19:2d:19:9b:07:75:9a:4a:5b:6e:
98:37:17:c6:e1:ce:50:c6:22:a0:7f:cc:1b:3b:fa:
ff:3f:ca:ef:04:43:85:82:43:97:c1:7b:f2:00:69:
82:85:a6:71:af:31:63:2a:84:03:3e:d1:93:c2:1f:
8d:33:e2:ed:eb:7f:d3:62:67:2b:6f:1d:73:ec:92:
7b:d3:c0:e8:14:ba:c4:51:34:b6:e8:d3:78:e7:fe:
b6:77:d7:87:ba:86:79:07:cc:5a:e7:1e:3d:95:3b:
3d:0f:b7:88:7b:88:84:f3:95:3e:92:e3:c4:34:83:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:88:4C:73:11:93:19:0A:52:4E:10:F4:16:4E:69:C3:1B:48:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbfd0fb8-8dd4-3190-a70a-b79464a6bc29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:63:30:da:ef:0b:69:3d:db:9b:9e:93:a1:41:31:3e:e4:e0:
c2:e2:50:4f:2a:30:5a:43:fb:77:3a:ca:04:48:b2:ed:eb:5a:
d6:55:30:a1:c5:6a:d9:01:86:35:aa:a0:c5:ab:12:2d:0e:e0:
9a:44:5c:b1:e8:dc:f6:6a:3e:4e:99:9b:de:47:0f:a9:89:75:
c9:41:e7:ce:27:80:38:2d:03:b8:dd:12:16:59:b9:dc:6d:2a:
5d:95:cc:a4:e4:87:72:7c:ce:6c:8f:f6:c4:e6:ba:a5:99:07:
5b:5c:94:5a:78:b4:9d:a6:b7:ca:eb:35:c7:1f:78:3a:c7:66:
16:4c:db:90:81:3c:a5:e2:9e:8a:7f:54:d7:fe:60:31:3e:e2:
36:2f:57:86:91:02:6e:da:69:08:84:0c:86:bf:42:9a:f0:c8:
18:84:20:0b:b8:1a:55:72:d7:c4:24:f4:94:d3:c1:f4:1f:7e:
e4:07:f2:a8:d8:d5:65:df:b6:96:ba:8e:da:37:dc:bd:0a:27:
f2:70:20:3e:00:2d:b6:48:12:11:ba:66:69:bc:36:08:53:15:
f0:1b:95:46:39:b3:f3:cf:89:2e:5d:3d:12:17:75:8f:d9:00:
90:4c:da:e0:be:9c:58:dc:63:46:1c:57:67:a8:d7:27:d1:3e:
e7:f1:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:18:33 2025 by rpki-client