Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ea1569-d6c3-33b5-a56d-1d3a60898d1d.roa
File: d9ea1569-d6c3-33b5-a56d-1d3a60898d1d.roa (raw, json)
Hash identifier: TZh+k1CZ42NKzTl1IfyP3VqeX5z5PD4wLKOuLhLoc00=
Subject key identifier: 81:B7:BD:14:7C:FC:0C:A8:0D:FC:AB:F5:C4:68:80:43:7D:1A:B1:07
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA1B19501738CB7597A860
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ea1569-d6c3-33b5-a56d-1d3a60898d1d.roa
Signing time: Thu 01 May 2025 17:19:04 +0000
ROA not before: Thu 01 May 2025 17:19:04 +0000
ROA not after: Wed 30 Jul 2025 17:19:04 +0000
asID: 22773
IP address blocks: 68.229.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:1b:19:50:17:38:cb:75:97:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:04 2025 GMT
Not After : Jul 30 17:19:04 2025 GMT
Subject: CN=9dac928d-de76-454a-9f7b-2936e1ab96a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:71:e7:06:ef:7f:a7:63:6f:47:48:bb:71:
6d:6f:bd:1c:f9:db:eb:22:4a:97:6e:fa:17:5f:64:
4c:c2:3b:48:a9:8c:f8:42:dc:48:11:bb:e2:64:18:
e9:47:57:90:b7:05:3c:f6:ad:71:b3:43:f1:f1:e2:
a2:14:5f:35:bd:72:93:35:9b:94:e1:94:58:44:6c:
59:05:04:e5:55:43:8e:4b:c8:ac:58:4f:9f:eb:e1:
e3:fd:29:9e:ef:db:5c:1a:33:d8:44:df:6b:c9:a7:
6a:e7:ec:b9:c0:d9:e5:52:c1:e6:5d:01:0c:65:10:
02:a4:b1:19:c1:91:a5:a1:38:49:1d:36:26:fc:0e:
1f:5a:e2:2d:3e:54:b8:a8:6b:40:dc:dc:a8:72:8e:
53:2b:18:6e:95:1f:ff:22:be:51:50:15:f4:66:1e:
3d:ca:a8:9f:45:40:9a:fd:f3:ba:ef:15:9e:19:8a:
10:c9:e3:8a:1f:9c:01:7e:de:cf:9a:a0:0c:3c:c7:
1c:cb:45:f4:b0:e6:1d:4e:b3:91:85:ae:f6:37:72:
0c:1d:a5:65:92:4e:49:49:18:37:08:c5:86:f6:9f:
de:60:11:67:c6:9e:96:0e:f2:5d:64:21:06:77:83:
1c:fe:f0:74:6a:ec:43:d4:a3:02:a3:ca:ed:a6:35:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:BD:14:7C:FC:0C:A8:0D:FC:AB:F5:C4:68:80:43:7D:1A:B1:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ea1569-d6c3-33b5-a56d-1d3a60898d1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.229.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c1:f4:e3:69:cd:01:92:2f:f8:91:a6:bf:87:57:f0:b6:1b:
21:bf:4a:3e:e1:ec:cf:3c:ea:b5:2c:0a:6d:3a:91:5f:f4:ef:
2e:19:05:2c:d4:80:1b:80:07:93:cc:56:b9:41:99:42:1e:81:
90:23:0f:ec:79:89:4b:fe:83:fb:98:3a:51:6c:3b:c0:8c:ea:
6b:1d:74:be:7c:e1:5e:1e:7e:39:4d:83:0e:4c:19:eb:09:27:
e0:04:57:94:a2:81:8f:fc:b8:de:e8:a2:4d:e8:dc:a3:1c:07:
5a:50:a3:d2:aa:fd:21:3b:1b:7c:e9:a7:d2:32:ca:a0:0e:df:
e3:ea:5b:09:c8:a5:f4:b0:c5:8a:c4:13:52:a7:99:f6:6c:d6:
9e:19:ed:51:13:2d:0f:80:82:9c:aa:58:a0:fd:15:a8:66:07:
6b:c7:b3:5d:43:dc:23:fc:38:78:14:ec:b3:a4:70:e2:ae:72:
83:ec:b6:c2:bd:80:8f:db:31:65:90:8b:bf:e7:63:11:02:de:
9d:4c:73:b8:5b:e1:f9:4f:01:ee:80:d1:46:53:3f:cb:be:a0:
32:db:4d:47:bf:71:60:70:e4:91:0b:b1:25:51:92:1d:64:a0:
85:31:a6:00:66:ac:0a:78:5b:80:25:9f:af:68:a3:08:a8:f9:
cf:e7:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:35:54 2025 by rpki-client