Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ae453b7-b00f-3ba5-986f-209def4b46de.roa
File: 2ae453b7-b00f-3ba5-986f-209def4b46de.roa (raw, json)
Hash identifier: lbq8Rcr7d2obsnF6EuzBw9TxYF7Gs5ffczFR3U4TuUM=
Subject key identifier: 09:0E:CA:4E:2F:A7:0C:EB:BE:DA:E5:DB:C6:83:DD:6B:75:1F:5A:2B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD09140390B20293714F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ae453b7-b00f-3ba5-986f-209def4b46de.roa
Signing time: Thu 01 May 2025 16:20:30 +0000
ROA not before: Thu 01 May 2025 16:20:30 +0000
ROA not after: Wed 30 Jul 2025 16:20:30 +0000
asID: 22773
IP address blocks: 68.2.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:09:14:03:90:b2:02:93:71:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:30 2025 GMT
Not After : Jul 30 16:20:30 2025 GMT
Subject: CN=d302ba8f-65e6-490d-93e1-fec132641f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:7b:87:61:88:f1:f7:e1:42:c5:b3:f9:a8:
ec:e4:8f:56:14:12:51:f7:41:22:c1:85:25:e1:09:
f4:81:f6:c1:73:d7:f8:c6:23:36:59:35:cc:5a:80:
8e:c1:f2:1a:83:d1:3c:45:df:87:9f:97:ec:76:8f:
07:19:20:3d:af:dc:2d:95:fc:76:cb:85:7d:fc:8f:
57:e3:3d:26:9c:ff:44:26:8a:88:33:75:d8:f8:32:
a8:e9:39:c1:ae:f4:22:f3:27:b9:b9:cc:d8:f5:c2:
93:01:25:8f:53:1a:7b:ca:91:e8:40:38:8b:7b:97:
ca:5c:c9:c1:51:95:b7:62:ff:b2:01:a2:96:11:1e:
bd:11:ce:21:76:dd:49:01:44:79:cd:91:73:22:df:
35:86:73:ff:c9:2a:3f:29:b2:7e:4f:6a:7d:99:d5:
d8:44:01:52:eb:82:eb:c5:06:90:4c:b0:ae:f2:e9:
7f:6f:f3:de:14:8e:bc:90:38:0c:53:1f:93:c6:fa:
6e:50:a7:b0:4d:62:ab:6a:7c:53:a0:1a:38:0c:7b:
d7:41:8d:80:4d:60:5b:6e:18:3a:ad:b1:35:14:b1:
69:65:aa:21:ae:6e:ca:b7:c9:1d:70:5c:5f:6a:a3:
0c:28:e4:fb:c6:08:3a:2c:b9:a4:26:22:2c:ad:aa:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:CA:4E:2F:A7:0C:EB:BE:DA:E5:DB:C6:83:DD:6B:75:1F:5A:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ae453b7-b00f-3ba5-986f-209def4b46de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7d:46:fd:eb:fa:6f:c7:11:99:d5:cf:33:3c:75:d2:92:1f:
f0:72:0b:0e:03:3f:99:75:73:f0:f2:17:df:02:a7:fe:69:b1:
28:71:bc:e8:8f:38:d3:c2:93:35:06:2a:4d:6e:c3:83:0e:d3:
9c:ed:b8:a1:99:b8:72:bb:24:77:ee:74:6e:07:ad:26:10:3b:
98:6e:5c:80:7b:ce:aa:f3:89:b1:44:f1:97:a8:25:95:14:21:
86:66:9f:5f:30:3f:f1:d6:76:51:c4:d6:f6:9e:c0:70:7e:45:
02:a4:09:c4:a1:91:67:ca:06:be:e1:57:ec:3d:1b:18:a4:6f:
fe:ca:3d:ac:fd:cc:b2:dc:fc:d4:60:22:ac:97:39:a9:2a:4a:
a7:a9:f1:bc:d8:2f:4c:71:df:17:91:fa:da:66:13:b8:50:21:
c9:0f:28:04:c0:52:fd:57:ff:e9:cc:b5:f7:82:7e:e3:2f:a4:
e3:7f:2a:21:47:85:a1:cb:cf:62:36:06:93:cd:b1:81:79:01:
90:57:9c:06:8f:f3:fd:2a:ca:16:dc:ef:a7:7d:2a:af:d4:a2:
5c:4f:0f:92:68:49:36:42:32:b5:1e:28:a0:6e:ce:41:36:6e:
4e:00:b9:59:3f:dc:06:26:9c:aa:7b:7f:c3:6a:bc:b6:b2:e4:
3c:58:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:58:12 2025 by rpki-client