Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f29d0075-8162-3550-a42c-74a3f236fbd0.roa
File: f29d0075-8162-3550-a42c-74a3f236fbd0.roa (raw, json)
Hash identifier: LZc8mWOOGw54EApK/oYIFqqsJ6s5kP8BMsHBL3XI3Kg=
Subject key identifier: E4:09:95:16:77:7B:02:29:08:1A:0D:94:CB:0C:6E:C2:75:48:CF:C5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA1703A43A45219E3D0F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f29d0075-8162-3550-a42c-74a3f236fbd0.roa
Signing time: Thu 01 May 2025 17:19:02 +0000
ROA not before: Thu 01 May 2025 17:19:02 +0000
ROA not after: Wed 30 Jul 2025 17:19:02 +0000
asID: 22773
IP address blocks: 68.229.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:17:03:a4:3a:45:21:9e:3d:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:02 2025 GMT
Not After : Jul 30 17:19:02 2025 GMT
Subject: CN=5be8c48a-76d4-4357-9084-e32c2fa5969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:b7:92:db:ec:ef:99:4e:49:c8:70:96:e0:
d2:ff:aa:6c:4d:37:0b:de:c2:fa:8d:30:b9:da:67:
ce:1b:ef:0c:fb:7e:99:1a:24:50:81:2c:89:16:1d:
17:44:d7:54:46:69:59:b9:c1:04:fc:94:a8:32:8b:
1d:56:96:43:e5:82:fc:d9:43:43:7b:37:19:3d:0a:
b6:31:f6:59:c1:68:df:20:c0:92:b1:2a:d5:67:89:
8f:3a:b7:3e:17:ac:57:a0:9a:a8:a7:4c:95:c4:f6:
52:6c:2d:48:a5:51:b5:77:d7:65:b8:35:53:9e:b7:
e5:c9:13:d1:70:85:8e:99:7e:97:4c:2c:4a:7c:72:
c2:54:c0:c0:b5:06:0c:82:de:ed:ea:09:f1:8c:bd:
b4:d6:ab:f9:f8:be:31:d9:68:8b:39:ff:26:31:4b:
bc:af:e9:7c:da:5a:6b:ab:c4:b8:26:20:91:f3:69:
14:e8:e0:76:db:28:99:31:3f:77:56:3d:da:7b:6e:
70:02:8c:b9:fe:7c:22:c5:57:e6:76:f9:ee:a6:b9:
ad:f5:24:4a:1d:cc:dc:9a:fd:26:2e:4e:23:6f:00:
9c:4d:d9:63:88:04:68:4f:e5:44:6b:79:47:3c:f2:
02:0f:3b:b9:ad:b5:21:53:2f:3f:74:da:e0:62:f0:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:95:16:77:7B:02:29:08:1A:0D:94:CB:0C:6E:C2:75:48:CF:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f29d0075-8162-3550-a42c-74a3f236fbd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.229.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a8:6b:c6:92:dc:45:fe:51:36:fa:dd:16:aa:5b:7f:78:8c:
cb:e4:20:f8:f2:6f:23:91:d1:87:23:b2:58:84:89:55:07:06:
43:df:20:ae:58:de:66:c9:c8:d6:d1:db:ca:8b:1f:4d:f5:b1:
41:0d:0c:72:43:0d:b9:90:23:8d:e5:c8:d4:21:01:0b:23:9b:
9f:f1:c2:38:10:3d:e4:1c:3a:ac:67:e4:0a:43:59:1d:24:78:
e0:76:b0:6c:67:87:f0:2e:b9:a4:e9:a8:45:68:c6:b6:a2:04:
77:a6:45:a8:7b:9b:36:22:49:f7:24:39:ff:7f:65:36:12:63:
bc:80:62:10:81:a0:e1:cb:43:48:13:7b:fc:ac:5f:0e:b0:87:
1f:63:86:eb:43:51:61:8c:7c:bc:4b:f2:37:f6:c0:52:29:e5:
98:65:31:29:aa:10:15:ec:6f:86:00:d2:12:78:a2:ea:d7:1a:
20:8b:24:ba:0d:b1:6a:76:41:4d:ea:ac:10:e1:c0:f1:e8:52:
f6:a9:36:af:8f:9f:e5:65:5b:a4:db:fb:c0:1e:fb:8f:9d:72:
1d:4f:65:71:c6:82:b8:74:a1:f3:28:a2:0c:27:21:51:e8:56:
32:2f:de:5f:8f:5b:e8:d3:01:f7:07:82:f8:da:70:97:f9:7d:
45:b5:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:07:51 2025 by rpki-client