Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e43b251a-e5f1-3a19-be7c-b9e6fd3625fb.roa
File: e43b251a-e5f1-3a19-be7c-b9e6fd3625fb.roa (raw, json)
Hash identifier: OScr2pVgbQz62JQcYSsbQqdrC2+iCU4Jf1xSASSLe0U=
Subject key identifier: E9:41:48:F5:85:00:C5:8B:0C:79:5B:EB:D2:0E:34:27:14:92:87:3E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD2229BDBC7C168E17DD00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e43b251a-e5f1-3a19-be7c-b9e6fd3625fb.roa
Signing time: Thu 01 May 2025 16:20:42 +0000
ROA not before: Thu 01 May 2025 16:20:42 +0000
ROA not after: Wed 30 Jul 2025 16:20:42 +0000
asID: 22773
IP address blocks: 68.2.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:22:29:bd:bc:7c:16:8e:17:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:42 2025 GMT
Not After : Jul 30 16:20:42 2025 GMT
Subject: CN=7ea83685-7335-467e-aa9d-1fd81bc3ac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:74:7e:5e:6b:94:4b:93:f0:54:ee:b7:f4:
d4:c0:fa:4f:4e:c9:0a:1d:c5:5d:ff:95:1f:95:c9:
a4:27:18:de:9a:0f:51:ce:97:db:0d:e2:d4:22:ed:
9c:bb:c7:be:80:db:9d:0d:5b:61:bb:4f:45:b7:3e:
77:e1:9e:eb:68:cc:a6:96:7d:04:2d:10:f8:c2:0c:
90:07:95:3b:89:fd:bf:f3:eb:9e:ec:11:a9:df:53:
28:64:f9:66:5a:30:c7:22:b9:6b:4e:af:c1:a3:2d:
fe:dd:af:b6:f7:61:18:b3:39:48:f7:4d:ea:9c:69:
1d:cf:19:7b:df:ff:6f:42:ac:6e:17:8e:48:16:10:
fa:85:4b:34:c0:54:32:02:21:67:52:1e:b7:bc:54:
27:f6:98:84:02:de:96:b9:a9:a2:6f:21:4e:9b:99:
cf:64:00:e4:7a:89:dc:99:f6:41:54:0f:08:ce:39:
f0:36:44:6c:7f:6f:e7:e1:d3:86:9a:d2:1e:03:88:
fc:05:8d:c5:98:77:d1:91:c9:94:3c:29:5e:54:67:
a2:68:75:9f:04:fc:37:59:4a:c4:24:e0:5e:f5:e9:
dc:05:4e:88:2e:ca:fc:55:79:ba:e0:cd:d1:b3:2d:
ed:35:02:32:6c:f4:e0:aa:f1:6f:44:14:22:b6:97:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:48:F5:85:00:C5:8B:0C:79:5B:EB:D2:0E:34:27:14:92:87:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e43b251a-e5f1-3a19-be7c-b9e6fd3625fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:53:6c:61:f6:df:be:d5:09:ce:17:0d:e7:f5:6c:c8:c8:90:
f1:f8:8d:76:3d:63:df:ef:0c:58:0d:94:e9:c8:ce:cd:1e:01:
8f:a3:2e:d5:5b:7f:82:59:ba:24:51:15:c7:2c:dc:d1:91:75:
ce:b9:a1:5a:3c:08:6f:19:e6:ec:77:ac:e2:5b:3b:47:ef:ea:
9d:7d:b1:46:5a:0b:0c:e5:2d:88:af:be:79:42:14:4c:ff:e7:
5b:2d:da:21:95:ce:f7:b7:51:f8:20:c5:c4:46:ef:bf:77:be:
26:8c:d3:a1:97:e3:2a:8c:8a:0a:c1:a6:e3:d3:7e:b3:a3:94:
9f:76:6c:32:93:f9:69:95:5e:d6:66:41:ec:de:fa:36:28:ab:
7c:98:99:84:a0:06:24:14:ff:bf:23:86:e7:b9:d4:b3:a6:66:
69:a1:16:0e:7a:bc:d7:8c:54:dd:3a:a4:77:50:26:05:ba:c2:
41:4d:e4:11:de:62:86:9e:70:50:56:31:d3:f0:8b:7a:12:a8:
77:bc:a6:26:03:de:bd:36:9d:b2:9a:f0:4c:7e:ce:36:d2:bf:
be:83:4d:09:a5:da:11:07:c5:f0:ba:d3:bf:b7:4e:63:4d:d8:
75:be:b3:20:25:eb:7a:75:85:2f:03:b8:66:82:d6:dd:7d:06:
ce:51:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:50:33 2025 by rpki-client