Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/040ffd22-0125-3616-800f-eab0c0df81c7.roa
File: 040ffd22-0125-3616-800f-eab0c0df81c7.roa (raw, json)
Hash identifier: GpQ9OUkKuf32Wz1DSH0Bz0MxWLwjQJHcpx5gRNDhRz8=
Subject key identifier: BC:82:2D:AE:D7:29:B0:DB:C0:39:F9:32:24:E3:BD:88:F9:FC:79:AD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDC9C7B7DFEF4F53DB9F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/040ffd22-0125-3616-800f-eab0c0df81c7.roa
Signing time: Thu 01 May 2025 16:22:01 +0000
ROA not before: Thu 01 May 2025 16:22:01 +0000
ROA not after: Wed 30 Jul 2025 16:22:01 +0000
asID: 22773
IP address blocks: 68.107.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:c9:c7:b7:df:ef:4f:53:db:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:01 2025 GMT
Not After : Jul 30 16:22:01 2025 GMT
Subject: CN=698568fd-e5ec-4325-975a-6c065b5c85ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:18:69:32:56:6f:87:3e:da:84:24:39:a7:
9b:6c:3b:0a:ca:bd:7e:ec:25:bd:12:dc:04:33:ff:
59:69:e7:c7:7d:80:51:48:7f:16:a2:b9:67:f6:85:
cd:ed:ca:be:70:b4:ad:9d:c4:d3:69:ee:48:07:c5:
41:44:7d:ec:25:df:3a:41:e0:f5:79:b1:d9:87:1f:
76:2b:15:26:55:11:ab:30:3c:1c:c9:99:a7:67:2f:
71:14:f0:42:66:8a:04:99:29:7e:86:5f:34:bc:c9:
f5:3a:ea:13:ba:fe:5e:f3:1e:24:d1:d6:e5:28:ca:
a3:30:43:3d:04:74:0e:24:19:a9:c4:36:de:4f:82:
43:56:1c:ac:9f:f7:c3:e2:58:a9:89:20:77:d1:fe:
58:80:96:ad:b9:c5:dc:bc:7d:52:cd:9b:93:66:b8:
10:6d:86:f4:8f:47:e2:97:04:11:4e:9d:31:8b:c6:
2e:ab:84:87:96:e5:64:47:97:9a:4a:3e:7a:64:78:
07:d0:fa:b7:00:fd:fc:5e:80:dc:21:0b:e3:42:cb:
87:8a:09:67:70:43:4c:ce:3a:f3:3e:29:1c:0f:9a:
76:4b:77:99:1b:f0:01:e2:77:e8:65:bd:3e:8d:5e:
b3:0e:9f:3d:01:14:b9:ca:2f:a6:9e:87:09:ea:9b:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:2D:AE:D7:29:B0:DB:C0:39:F9:32:24:E3:BD:88:F9:FC:79:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/040ffd22-0125-3616-800f-eab0c0df81c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.107.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:fb:d0:9d:d1:61:a3:d3:f6:b6:78:7e:5f:9a:ba:9d:81:37:
5e:b5:36:77:83:65:66:ea:33:4f:ce:f0:52:dc:fd:ac:a9:b9:
4a:55:c6:bc:00:ca:81:cb:e0:6b:a4:29:1a:97:f1:37:66:13:
76:33:13:91:6e:87:38:dd:5b:56:e4:31:e3:8f:5d:f1:eb:b8:
00:e0:e0:30:fc:5f:95:8a:28:c5:d2:4f:bd:10:eb:b3:10:d8:
a3:87:a4:1f:38:c9:05:0d:83:c4:da:fc:d7:3f:d8:6b:ec:1b:
c8:80:b3:00:fa:ce:a8:63:5f:5b:6c:b4:76:07:0f:e4:8b:00:
e9:0d:91:5b:e1:3d:b1:72:a9:f2:bb:08:61:a0:61:fc:9f:b3:
dc:73:eb:5d:b1:d7:bb:f4:76:d0:f0:c4:db:55:b1:25:09:cc:
c0:a5:e3:49:bf:48:83:80:14:64:7d:71:75:b2:ac:82:5d:29:
92:e4:02:fd:5d:d1:dc:6c:cf:45:da:c6:5a:b1:f0:13:92:ff:
a0:f0:1a:2d:b4:6f:c1:64:c6:2d:2d:48:42:2d:60:05:f7:a5:
00:11:70:62:b7:f7:0e:f2:ab:a9:6b:26:94:01:91:24:b0:45:
6d:14:f1:df:03:99:6c:c7:41:0d:c3:5b:a1:2f:b2:51:0b:ad:
d3:80:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:27:10 2025 by rpki-client