Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f99478e5-4c0a-3abe-8bd1-80408c743bc5.roa
File: f99478e5-4c0a-3abe-8bd1-80408c743bc5.roa (raw, json)
Hash identifier: +xvh5XRmv2gaZGzlLe5O+SmMYXLrTiTP7eZj9SQDuOM=
Subject key identifier: C1:2B:89:78:F9:12:5D:E3:40:32:A0:D2:30:A6:27:21:04:03:24:22
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9995674D9A903E9E065C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f99478e5-4c0a-3abe-8bd1-80408c743bc5.roa
Signing time: Thu 01 May 2025 17:18:03 +0000
ROA not before: Thu 01 May 2025 17:18:03 +0000
ROA not after: Wed 30 Jul 2025 17:18:03 +0000
asID: 22773
IP address blocks: 68.96.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 22:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:99:56:74:d9:a9:03:e9:e0:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:03 2025 GMT
Not After : Jul 30 17:18:03 2025 GMT
Subject: CN=a13a3f40-4824-41b1-acea-3ac49ad39121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:79:34:f7:5f:b8:38:ea:85:1a:17:0b:f6:
27:05:46:b7:2d:12:4d:0c:e8:8b:63:a2:e9:b8:2f:
b4:ea:f3:90:05:a7:4e:76:37:65:d5:84:bf:36:c7:
b3:c8:cf:b1:92:75:8e:66:6d:43:e4:3f:02:04:0d:
90:5d:4b:f1:99:6b:b1:71:da:60:e7:a3:bd:20:19:
e5:aa:3a:43:90:4f:64:12:e1:6d:be:1a:bc:20:72:
71:3d:67:bb:af:78:ae:12:f8:d0:6a:e6:90:3e:06:
d7:5b:ee:59:95:a0:e5:f1:93:a1:4d:43:61:c0:f2:
49:6c:00:19:32:34:8d:cc:97:93:fe:55:40:50:e9:
33:94:85:3e:9d:e6:d0:ce:4b:06:21:5d:df:99:ad:
5f:70:e3:08:27:39:e8:e2:5f:57:5d:52:bf:05:2d:
c1:c7:80:9c:31:fc:93:c1:b9:32:6b:16:dd:5d:56:
b2:71:29:57:05:b5:9a:4e:3c:3d:09:6e:36:35:3c:
a4:08:d1:5b:f3:b3:16:3c:82:d2:ac:46:f4:44:12:
ef:a5:8d:5f:83:d8:8d:6c:43:56:e3:5a:b2:41:95:
e9:62:03:4d:28:b2:30:f6:83:0c:18:b3:23:c9:b5:
8c:44:85:bd:c3:8b:5d:db:81:71:ed:5a:e2:35:91:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:89:78:F9:12:5D:E3:40:32:A0:D2:30:A6:27:21:04:03:24:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f99478e5-4c0a-3abe-8bd1-80408c743bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.96.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:65:b0:97:2d:d0:0b:12:25:1b:3d:98:14:a3:8c:6f:59:b8:
27:61:7a:e8:57:72:3f:68:d9:14:56:34:c3:94:f2:0a:5b:4f:
b5:53:83:d7:19:d2:d9:c5:39:73:72:16:1c:e9:20:c5:ad:63:
45:bc:80:4f:c8:44:98:9c:83:b1:52:20:46:d0:8c:ce:58:1f:
8e:e7:f4:3d:30:d8:81:7e:6a:52:97:b8:a0:24:00:d0:ee:5e:
7c:95:56:47:bf:48:07:b5:d3:7a:45:09:41:e0:90:2f:b6:dd:
3e:95:10:48:42:24:2b:cb:88:af:9f:da:3e:fe:98:93:8f:4e:
01:a7:79:f5:b3:5f:db:01:73:fb:79:c9:50:56:63:2a:6f:89:
c0:09:82:ff:b3:be:db:54:44:0d:c7:9c:a8:2e:66:ea:2c:2e:
3f:df:35:5c:e6:5e:43:f1:48:74:9a:8e:33:a3:d9:95:a8:ab:
59:c3:6a:ad:9b:bc:81:80:76:3a:6f:7b:93:b9:b0:b8:4e:61:
e1:85:f6:96:43:f5:5f:89:e1:0a:e9:6d:c7:39:2f:65:ba:8c:
c8:82:3a:a5:32:fc:0a:dd:75:fd:a3:a2:0b:66:99:61:db:29:
6d:cb:5e:6b:d3:e7:23:84:63:3c:50:e9:9b:c0:48:de:4f:90:
d7:05:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:46:39 2025 by rpki-client