Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda36b0c-b904-3e38-9594-b941324be38a.roa
File: dda36b0c-b904-3e38-9594-b941324be38a.roa (raw, json)
Hash identifier: 3qffAaC1TfU8OKzA22UIJ0nRvsz6JVgkTsgFvGOlLRA=
Subject key identifier: 02:FF:A8:DB:44:F4:70:C1:CE:8C:2E:46:4B:CF:BA:D4:44:35:61:49
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD03B8FE7952C77C7AD6C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda36b0c-b904-3e38-9594-b941324be38a.roa
Signing time: Thu 01 May 2025 16:20:27 +0000
ROA not before: Thu 01 May 2025 16:20:27 +0000
ROA not after: Wed 30 Jul 2025 16:20:27 +0000
asID: 22773
IP address blocks: 68.2.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:03:b8:fe:79:52:c7:7c:7a:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:27 2025 GMT
Not After : Jul 30 16:20:27 2025 GMT
Subject: CN=967ac2c6-b3db-44b0-a846-78b5ee13a86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:76:e7:d6:75:c8:49:33:c1:ac:27:03:07:
3f:e5:e9:7d:4d:6e:3f:67:9f:09:3c:73:b5:3e:3f:
ed:b1:d3:39:ab:45:a8:69:7e:07:49:e1:d0:bc:26:
33:a2:04:d5:9b:4c:62:11:06:12:7e:cc:46:60:1d:
74:0e:4e:b2:9d:69:7c:4e:24:e1:ae:70:a3:e8:ed:
6b:f3:83:82:19:79:a3:8f:4e:83:d0:24:b2:33:51:
e9:86:7b:eb:02:d2:9c:ea:18:5f:9d:49:39:c5:9a:
84:92:d2:b6:97:ce:f4:be:81:cb:57:6a:50:ee:e7:
2c:8e:8e:6d:ab:2e:58:97:82:3f:9b:38:74:47:1b:
22:72:31:23:73:b7:2d:ee:38:87:be:48:6e:49:c6:
30:b1:6e:63:76:1a:5b:db:eb:2f:a2:b0:d2:97:60:
e7:b6:ac:7c:1d:36:6d:e8:86:fa:0c:22:a3:32:92:
0f:00:a2:4f:50:8f:d9:50:bb:5f:94:3e:10:cc:96:
2c:16:3a:65:0c:8b:89:f7:27:c0:c1:d1:4f:b5:7e:
7f:f8:31:b5:4b:ca:3e:0a:41:1c:5e:aa:21:a4:c7:
be:00:89:77:e4:54:a3:78:e2:2b:02:84:27:bd:5c:
ad:c2:a3:a6:66:3a:a8:31:63:0c:8e:77:52:74:80:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:A8:DB:44:F4:70:C1:CE:8C:2E:46:4B:CF:BA:D4:44:35:61:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda36b0c-b904-3e38-9594-b941324be38a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:03:ff:eb:53:90:cd:2f:50:63:2e:44:e7:83:b9:16:20:e9:
54:de:67:ba:33:6a:90:09:ea:8c:ef:22:cc:bd:d7:fe:25:c1:
99:98:ee:72:1e:f7:79:54:cf:b3:7d:76:96:5b:63:46:e8:1e:
b7:00:8f:1e:25:7e:bb:a1:91:98:8d:1a:85:b5:b3:18:e0:9c:
1d:ad:7c:29:34:2e:24:bf:a0:9f:d4:62:05:19:ef:f8:0b:d6:
02:ae:e5:b0:33:d2:5f:27:0f:22:bf:ad:47:d2:cf:82:86:ed:
85:dc:2d:cd:51:71:fa:b7:70:4c:ee:cd:37:48:ab:97:db:46:
ce:37:c9:f5:89:14:e1:3f:5d:bb:4e:95:d0:67:de:db:0b:93:
c2:cc:5d:7b:f1:b6:74:23:42:84:19:42:67:34:b5:cd:d8:bb:
93:f7:fb:e8:45:fd:56:d9:f5:b9:6b:25:66:74:53:e5:e4:d5:
21:7b:4f:4d:50:0b:e9:f4:1f:7d:43:01:96:cc:13:03:dd:e9:
e5:ef:b0:95:e8:7d:ea:ef:c8:7e:14:ac:11:8d:d4:36:70:bc:
a9:32:46:72:91:38:35:5a:44:1b:c4:54:f2:27:49:2c:6e:15:
03:4d:ac:f3:4c:ab:32:11:ae:9f:f5:81:63:92:5a:7f:e3:5a:
c0:80:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:19:48 2025 by rpki-client