Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d7cf163d-e0b7-39ee-a6ef-73c2290d0ebc.roa
File: d7cf163d-e0b7-39ee-a6ef-73c2290d0ebc.roa (raw, json)
Hash identifier: BD3D95zNn/AhQDmtGn0Hl/OuX/kR3AYyPKZU0ZiGat8=
Subject key identifier: 19:7B:48:5E:DD:51:4D:D1:20:16:BB:80:1B:17:9C:F2:41:0F:75:A9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCF7893FC2015E96E1D980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d7cf163d-e0b7-39ee-a6ef-73c2290d0ebc.roa
Signing time: Thu 01 May 2025 16:20:21 +0000
ROA not before: Thu 01 May 2025 16:20:21 +0000
ROA not after: Wed 30 Jul 2025 16:20:21 +0000
asID: 22773
IP address blocks: 68.0.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:f7:89:3f:c2:01:5e:96:e1:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:21 2025 GMT
Not After : Jul 30 16:20:21 2025 GMT
Subject: CN=58183045-a11e-4284-809f-e090bfe35d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:cf:db:46:34:36:34:a5:28:16:68:d3:04:
3e:75:4d:f8:26:04:5d:c2:33:9d:b2:a5:7b:49:ff:
e1:85:22:4d:99:57:32:d7:80:2c:99:82:88:21:e6:
b0:88:06:a8:2f:19:6c:48:62:07:02:e6:70:10:59:
21:59:09:38:04:2b:b4:46:b3:a9:a9:13:d3:59:d4:
4a:30:bf:5b:15:68:21:a4:11:c1:6d:32:c3:3a:99:
42:c7:e1:78:3a:01:58:15:8f:95:9a:ea:9b:5e:9a:
cd:cb:7f:5d:0b:73:91:38:3d:21:33:66:51:5f:5b:
63:bc:ce:9d:0a:d5:93:c2:69:be:a1:0b:51:7a:11:
04:4d:34:cd:34:3a:d2:bc:42:51:19:c4:29:21:21:
95:d2:f8:24:56:73:b5:86:e5:1f:9e:20:0f:53:45:
e5:ff:da:81:27:9c:61:df:cd:78:7d:12:be:27:e7:
5f:c6:6c:cb:2f:f9:ce:bf:f6:13:9d:a5:1a:cd:77:
f7:8f:96:fc:cd:61:7d:68:95:9c:4e:a8:2d:f3:5a:
ad:8e:44:86:bf:4d:97:96:2b:39:f5:8e:23:6c:16:
14:b2:c9:4b:dc:1a:ca:d0:99:6e:17:b1:47:19:13:
8c:1d:6a:a1:58:6e:5d:70:fe:54:7d:1b:67:36:c1:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:48:5E:DD:51:4D:D1:20:16:BB:80:1B:17:9C:F2:41:0F:75:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d7cf163d-e0b7-39ee-a6ef-73c2290d0ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.0.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b0:80:07:90:1a:e5:db:13:6e:7c:db:81:8b:9e:01:59:ac:
5f:a8:e4:a7:a9:cb:70:77:df:35:d6:51:2a:fb:85:1e:34:51:
92:05:4d:c5:f2:77:79:81:38:58:a5:1f:d0:8f:3f:be:4e:e8:
db:0f:85:1d:fb:9b:19:44:d2:ad:4d:7d:ca:8a:29:b2:e6:ed:
54:3e:b0:d8:ce:ed:e3:67:35:21:ab:b1:d6:85:e2:03:ca:06:
f3:d4:2b:11:b8:3f:c4:d4:86:f5:ff:16:59:e3:4d:2e:28:26:
ff:71:ce:51:50:45:cc:0a:84:9b:23:ad:54:93:92:9d:95:4d:
b1:ac:90:4c:f4:bf:2e:fc:d2:98:06:99:3c:f5:fe:48:34:72:
23:2e:8b:88:da:47:80:ba:4c:59:c0:9d:1f:e4:9d:77:9a:c7:
9e:26:e7:16:1b:80:20:af:da:7a:32:9c:46:8d:25:28:b8:2b:
07:1b:0f:5d:0c:11:83:29:e7:89:44:08:1f:5d:b9:30:bc:55:
a8:20:7e:4a:35:bf:2c:a8:45:48:bd:f2:1c:0b:37:13:16:34:
b5:0c:f0:8a:9c:08:11:a4:69:fc:4b:a1:a1:9f:a9:41:a9:c7:
13:0c:69:ce:8a:10:c3:dd:13:8b:be:77:9b:b9:30:10:a8:35:
6a:5d:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:29:02 2025 by rpki-client