Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2065e9-aa29-30e4-9b48-c224b2e83703.roa
File: ff2065e9-aa29-30e4-9b48-c224b2e83703.roa (raw, json)
Hash identifier: yyj6FlKjYfYw2UmYLwD64wSJVQV92ZuHYgAYenNgaCs=
Subject key identifier: 52:3B:01:DF:53:1A:FF:76:23:6A:AE:C4:2C:C6:4B:47:CE:D3:9D:28
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE350E054E1A2A15579140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2065e9-aa29-30e4-9b48-c224b2e83703.roa
Signing time: Thu 01 May 2025 16:22:51 +0000
ROA not before: Thu 01 May 2025 16:22:51 +0000
ROA not after: Wed 30 Jul 2025 16:22:51 +0000
asID: 22773
IP address blocks: 68.231.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:35:0e:05:4e:1a:2a:15:57:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:51 2025 GMT
Not After : Jul 30 16:22:51 2025 GMT
Subject: CN=fe14e385-13bd-4187-9588-0f6c0893b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:28:60:70:dd:e9:59:78:87:b5:f2:dc:86:
92:a7:ea:8d:3e:62:43:ff:a2:58:91:06:48:7c:b3:
e4:84:40:5d:49:42:c9:28:33:44:af:1d:5d:2b:1f:
9f:b1:01:3c:68:46:5d:cf:0f:29:72:e3:25:f7:75:
e8:aa:2c:03:11:8c:d4:b2:ce:96:b7:26:7c:da:e6:
0b:5a:ba:f4:08:f9:af:70:3c:43:96:4e:48:3d:07:
fe:80:1b:c0:12:0a:af:a8:4a:ea:9b:e6:ac:d5:ab:
6b:5e:2f:63:04:f4:b2:f7:66:58:f5:a5:10:5f:48:
8e:4a:28:10:dd:71:4c:64:bf:2b:d6:05:54:9b:52:
3c:48:62:c1:3b:7a:a6:04:96:19:64:41:23:8d:0a:
85:55:70:e3:ed:29:b5:46:00:8a:0a:ec:16:e0:97:
4f:b3:b3:11:f1:33:0c:75:4d:2d:e1:e0:c2:7c:95:
0d:14:2e:99:be:9c:e7:d2:e7:91:52:13:58:2f:cc:
c3:33:1d:81:9b:e5:eb:ad:de:6c:8e:8b:72:10:6e:
a6:dd:43:46:3a:3d:51:00:e6:5d:3d:0b:6e:fb:44:
05:74:b5:04:91:6c:59:93:41:ab:1d:aa:67:02:7e:
aa:07:75:a8:b0:a6:44:d7:91:6c:4d:8b:f0:48:80:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:01:DF:53:1A:FF:76:23:6A:AE:C4:2C:C6:4B:47:CE:D3:9D:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2065e9-aa29-30e4-9b48-c224b2e83703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:7e:d1:90:ec:fd:80:38:d2:65:fa:52:a4:a9:82:78:e0:33:
a4:9c:84:81:ad:84:80:f3:76:2b:fa:e6:5b:ed:d4:9c:a4:3b:
cc:3b:14:a5:3c:db:0c:50:1b:d6:f7:a2:82:8d:de:6e:29:c8:
f9:93:b8:03:ab:e4:d4:54:46:c5:6a:70:cf:77:7d:70:0c:ad:
39:a0:da:65:65:65:6a:b7:cd:b7:a2:bc:5b:33:3c:a1:0a:f5:
50:7f:94:62:89:54:ae:d7:d4:1b:ea:e7:d5:89:8e:0f:4c:49:
5c:a8:c7:0f:c6:55:09:b6:9c:99:b2:c1:f6:63:a1:7b:71:ae:
2f:81:60:20:c0:d2:0e:ca:ef:cc:85:d4:bc:0b:e7:70:80:a1:
c2:fb:28:74:32:b5:cf:8d:6c:b5:ce:ee:c5:be:d4:eb:df:ee:
5a:2f:8b:20:d0:a8:35:0c:3c:eb:8a:f8:2d:e6:6b:63:c7:5f:
9b:76:a5:48:f1:54:d7:69:9d:c1:de:71:2b:d5:84:b4:d1:88:
86:cd:cc:2e:70:30:89:c4:59:c7:c3:a1:47:a2:dd:05:74:6c:
3a:cc:a9:41:ba:f6:cb:f2:6c:ae:6c:ad:27:e7:85:40:0a:80:
45:74:c9:71:1f:ea:d2:6b:7e:da:8d:70:ee:fb:73:fd:79:6d:
00:74:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:09:25 2025 by rpki-client