Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d8e65de-96c2-3bfc-b6ba-81e4b533768e.roa
File: 8d8e65de-96c2-3bfc-b6ba-81e4b533768e.roa (raw, json)
Hash identifier: zx1tlyUVVLvPWrGXg+xrF8z1F3a8r8nsRXuW3rqocVw=
Subject key identifier: 4A:86:0C:0A:14:0F:F5:5B:8E:6D:D5:95:8C:E9:DD:A4:A4:F4:EE:49
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD1F8F74133E6802E4FC70
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d8e65de-96c2-3bfc-b6ba-81e4b533768e.roa
Signing time: Thu 01 May 2025 16:20:40 +0000
ROA not before: Thu 01 May 2025 16:20:40 +0000
ROA not after: Wed 30 Jul 2025 16:20:40 +0000
asID: 22773
IP address blocks: 68.2.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:1f:8f:74:13:3e:68:02:e4:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:40 2025 GMT
Not After : Jul 30 16:20:40 2025 GMT
Subject: CN=1fec1491-ead8-4a43-876c-cdf2758550ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:29:a6:19:12:6b:cc:e3:ae:d5:37:d1:24:
cd:1b:73:89:58:91:7e:98:02:b6:22:ad:9f:97:6c:
d4:06:8f:be:b4:01:f1:90:0a:f3:20:89:e8:ff:15:
a9:14:48:62:c9:af:0d:4f:eb:e4:65:02:24:71:b2:
fb:5d:a8:67:e9:d8:34:78:6b:c0:74:53:d8:f4:21:
c0:51:d8:bb:26:bc:35:25:b1:a0:0a:64:6d:70:54:
93:d2:42:69:38:de:b4:80:da:fd:d0:99:8c:eb:ac:
28:d8:0c:36:6c:dd:d7:26:c7:19:a7:ae:d7:a8:e9:
6f:0b:53:98:03:1f:d0:50:02:30:57:9a:e8:f0:3c:
82:f6:fa:6c:ed:ab:5f:11:b9:ae:0b:21:11:39:0c:
d5:49:35:d9:7b:87:fd:3a:9b:e1:22:02:20:8b:41:
b4:1e:cc:ab:49:00:02:29:55:60:e9:fe:e0:c0:ee:
1d:80:10:ef:15:38:38:3b:53:e9:07:bd:37:e4:49:
af:67:38:3b:c5:fe:73:40:fa:70:65:35:e5:33:e6:
36:af:78:7a:46:cf:32:34:43:37:d2:42:41:d8:2d:
80:87:7f:a9:e1:90:14:40:ef:94:fb:65:4c:e7:37:
c3:da:ae:c6:14:e5:ad:8c:9f:6d:5b:0f:f3:e7:ac:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:0C:0A:14:0F:F5:5B:8E:6D:D5:95:8C:E9:DD:A4:A4:F4:EE:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d8e65de-96c2-3bfc-b6ba-81e4b533768e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0d:af:42:6d:15:53:eb:11:f9:69:1d:6f:ba:d1:d5:8c:b9:
31:fe:99:54:fc:6e:91:ca:12:8d:ef:51:5d:72:93:41:90:2e:
a3:52:7a:a4:2b:68:19:f6:a5:69:be:e3:e7:83:ac:df:cd:4f:
64:0b:30:f7:0d:15:fe:8f:3c:73:39:40:79:59:94:b4:90:e5:
07:c7:f4:38:fd:1c:95:61:3b:d7:7d:45:fd:f0:b8:07:ed:25:
88:30:94:ea:34:fa:2a:ae:47:6c:17:8a:23:4e:ec:4e:01:33:
62:1a:3a:cd:b2:6e:65:3b:36:e2:75:a7:a0:b9:87:d5:7e:0f:
7f:b8:97:e6:e4:73:e1:6d:55:ec:92:f7:1b:a3:1c:22:96:48:
ca:ab:f4:b0:3b:ad:06:54:95:5c:d2:fc:eb:ef:91:ac:09:4e:
99:d9:1f:e8:58:1b:e0:4e:a0:8d:b2:d6:dc:71:f7:3b:29:ac:
10:4d:56:ab:a8:b6:22:9d:d7:e8:c1:4d:20:e3:fe:99:d6:6c:
f3:2f:cf:3f:99:92:d4:52:d4:24:71:54:83:00:d8:5e:bf:e2:
f4:ec:62:ab:76:23:ba:25:93:ad:e0:6b:81:9a:c9:03:f9:da:
7b:9f:69:bf:c3:f0:78:3c:cf:25:a0:9d:a6:ec:71:51:0a:32:
68:d7:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:24:42 2025 by rpki-client