Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd7b501d-1641-3060-90f4-6fce6300b889.roa
File: dd7b501d-1641-3060-90f4-6fce6300b889.roa (raw, json)
Hash identifier: mukJezp90XMnJcJUCP71s1717gMlgHiyrQ8GFi7P3vw=
Subject key identifier: 85:46:3E:42:63:2D:F7:E8:FF:AD:CF:42:7F:9A:5E:71:5C:9D:28:21
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA03214A83D7B4E7C9CDC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd7b501d-1641-3060-90f4-6fce6300b889.roa
Signing time: Thu 01 May 2025 17:18:53 +0000
ROA not before: Thu 01 May 2025 17:18:53 +0000
ROA not after: Wed 30 Jul 2025 17:18:53 +0000
asID: 22773
IP address blocks: 68.224.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:03:21:4a:83:d7:b4:e7:c9:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:53 2025 GMT
Not After : Jul 30 17:18:53 2025 GMT
Subject: CN=b5f5d132-bd4b-4574-9efc-c47607380387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:0f:3c:40:55:42:5b:df:6b:46:8b:f8:2f:
76:2c:d6:ef:90:34:71:a4:1f:08:e6:ca:f8:15:83:
36:8d:53:79:7b:e4:5f:0b:8c:6b:50:7f:74:5d:74:
12:c5:ce:67:3f:27:23:a9:3e:89:6f:cf:54:2b:52:
73:e2:be:44:51:d6:a3:90:97:de:57:50:f6:8c:72:
3a:1e:f0:dc:4a:ed:f7:b5:ff:04:80:3b:96:2f:73:
a4:e3:e6:48:8c:2e:eb:33:2c:b0:b9:db:c2:60:83:
45:5f:ae:86:a4:0c:1c:21:13:cb:dd:96:e6:6b:25:
cc:bf:03:06:9d:d1:60:0c:b9:d0:fc:7a:e7:1b:51:
c5:44:03:6f:18:d5:4a:9b:78:46:43:b2:f5:9c:48:
39:1a:99:4d:f7:13:c2:82:37:75:30:d8:31:17:0a:
4d:98:2b:92:39:57:1b:90:31:dc:fc:34:a0:1b:af:
1e:fc:93:d9:3c:23:90:82:5a:9c:36:c0:2d:d9:7a:
ff:7e:35:53:b9:89:32:39:22:49:ef:4b:f4:f8:6d:
a7:52:6d:cc:f4:86:cc:f5:de:54:a0:76:b6:2c:68:
5e:fa:34:b9:c3:7a:74:7f:54:c4:29:80:1a:f0:a3:
ab:f0:5f:d8:09:00:60:ef:75:4f:55:24:2d:c2:05:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:3E:42:63:2D:F7:E8:FF:AD:CF:42:7F:9A:5E:71:5C:9D:28:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd7b501d-1641-3060-90f4-6fce6300b889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.224.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:dd:04:6d:d9:69:31:bf:13:79:92:88:73:aa:31:c1:d4:5b:
e5:81:c6:e9:c7:41:b4:c4:65:12:fd:a2:7a:c9:b8:b0:e0:13:
47:8b:c4:dc:50:bd:da:b3:75:78:87:73:50:8a:67:71:9f:04:
ba:87:62:ad:16:8b:3b:3b:58:06:d9:49:bd:4b:f6:42:c9:d0:
5d:d4:70:41:c7:6e:3a:c6:e1:0d:49:d5:88:b9:69:bb:e2:4d:
f5:42:af:84:18:6f:b9:c0:52:7c:e3:52:9b:d9:67:dc:6a:07:
98:d8:89:86:67:da:0a:a5:0d:e5:06:58:53:a5:07:de:da:64:
b2:d6:f8:ba:6e:d8:80:29:8a:dd:62:f0:40:59:2c:6d:d0:ed:
ce:c2:41:43:42:56:eb:b5:63:c5:61:62:ff:a2:97:5a:4d:98:
67:f5:2d:22:79:0c:11:df:1f:80:b8:48:78:17:66:7b:a6:5f:
43:ad:f4:93:ba:ff:17:4f:a2:45:b8:8e:51:45:ae:1a:f9:61:
5d:a1:0e:98:12:ff:8f:79:d5:8b:d2:7b:cd:8b:f3:0e:cd:f9:
a5:ee:aa:b6:1a:7f:7d:9a:d0:59:de:f0:83:97:66:36:3a:79:
5a:fd:e3:05:ef:14:dd:49:b2:ce:6e:2f:80:dd:2a:a8:a7:74:
56:fd:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:58:18 2025 by rpki-client