Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db5d72ea-db69-3daa-881c-455a76b21c09.roa
File: db5d72ea-db69-3daa-881c-455a76b21c09.roa (raw, json)
Hash identifier: MPjMikd2vrvbn93c4lJHooeGuJIXNdmxwlki5apRS6I=
Subject key identifier: DA:D6:5B:33:34:C9:87:A8:7D:36:69:19:B4:47:30:88:AB:48:D6:05
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE3D2E11DDCBEE080D3EC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db5d72ea-db69-3daa-881c-455a76b21c09.roa
Signing time: Thu 01 May 2025 16:22:55 +0000
ROA not before: Thu 01 May 2025 16:22:55 +0000
ROA not after: Wed 30 Jul 2025 16:22:55 +0000
asID: 22773
IP address blocks: 68.231.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:3d:2e:11:dd:cb:ee:08:0d:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:55 2025 GMT
Not After : Jul 30 16:22:55 2025 GMT
Subject: CN=780509c8-9128-4b74-b1a1-2a5dfaa8b271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:ac:01:7c:a3:b1:f2:16:e8:d6:17:0f:6d:
6b:f9:70:a3:59:cb:2c:e5:39:86:d2:82:1a:a0:b5:
20:d2:de:dd:38:a7:68:3c:ec:3d:e3:e5:c5:37:47:
82:21:b7:46:50:50:3d:fe:a9:90:16:f7:5a:fb:12:
63:ea:0d:31:96:38:3b:d8:f4:15:8a:19:dc:2d:77:
ef:c8:a4:12:04:49:78:5c:60:93:1b:d2:f8:87:ef:
8a:74:f7:7f:55:76:30:f6:4a:74:dd:b7:c9:53:e9:
18:67:24:14:2d:cc:0f:a6:6c:85:d8:b0:91:e5:b9:
15:e7:d9:a4:ec:9b:fa:ea:03:cf:4b:e7:1b:60:31:
c8:be:bb:2d:25:eb:69:41:d2:37:81:b4:82:52:17:
66:d0:f1:d8:41:d0:bb:aa:e2:10:41:09:db:d3:68:
39:04:2a:b8:d6:82:67:c5:b5:b5:0b:bd:ab:83:0d:
f6:bf:99:1e:a7:92:8b:96:84:5b:31:58:ab:56:4b:
bf:f0:0a:c2:1b:c6:b8:ee:62:38:3d:22:34:de:7e:
e1:df:10:d0:ef:02:25:22:07:5c:69:37:45:40:a3:
8c:16:17:b9:3d:79:a4:0a:fb:e8:7f:be:b2:05:1e:
ee:b1:09:83:e7:f8:67:93:52:5a:a3:dd:98:74:c3:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:5B:33:34:C9:87:A8:7D:36:69:19:B4:47:30:88:AB:48:D6:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db5d72ea-db69-3daa-881c-455a76b21c09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:09:b0:11:6f:6f:f8:d0:6d:0d:a5:f0:2f:f6:9f:93:1b:7f:
a5:4f:17:82:6b:e4:cf:92:50:00:f5:82:7d:96:73:46:a9:d7:
aa:db:82:21:ef:d6:61:63:86:87:23:86:da:28:2f:0c:9b:e7:
94:30:a1:8d:e2:08:3f:e5:82:87:0e:81:ca:03:3d:45:42:b8:
92:be:61:d6:83:be:c3:94:b0:08:1d:13:03:ce:a5:eb:c6:19:
43:cc:8c:93:10:98:b8:3b:7e:82:5c:3f:b8:36:0c:17:05:3a:
12:36:df:98:ab:56:c1:ba:69:33:cb:1a:a3:cf:e1:80:e2:f2:
9f:de:0f:e4:ad:99:12:f2:b2:95:f2:1a:bf:95:af:47:4c:f9:
9a:80:ee:c8:9d:ae:a1:f7:56:05:8a:bc:ee:91:a8:e0:fe:3a:
26:77:16:14:7f:01:d6:42:d2:27:e4:a3:b1:8b:7e:47:8f:e7:
74:24:38:d8:c4:3e:91:a8:eb:72:5d:a1:08:fc:d0:c3:46:57:
f0:1d:1f:d2:be:a3:b6:df:89:93:cc:87:42:21:69:0a:5c:61:
db:90:e1:ea:64:c1:8e:6c:7c:22:e7:5f:0d:b7:a7:e9:0b:f1:
a2:ab:78:ca:df:94:99:80:3d:20:b1:43:21:5e:24:2e:d9:e1:
f2:29:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:29:32 2025 by rpki-client