Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7acafe81-3440-3e32-80ba-1f81c7e5179d.roa
File: 7acafe81-3440-3e32-80ba-1f81c7e5179d.roa (raw, json)
Hash identifier: MwZyU3zNbrSOfVlrUC303UF5anyvK3db9d33I2vKIPQ=
Subject key identifier: 32:49:83:83:A2:02:19:DD:34:C2:6F:66:EC:14:95:67:18:2D:A9:34
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD1CB8006FA6AE7BDF3200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7acafe81-3440-3e32-80ba-1f81c7e5179d.roa
Signing time: Thu 01 May 2025 16:20:39 +0000
ROA not before: Thu 01 May 2025 16:20:39 +0000
ROA not after: Wed 30 Jul 2025 16:20:39 +0000
asID: 22773
IP address blocks: 68.2.166.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:1c:b8:00:6f:a6:ae:7b:df:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:39 2025 GMT
Not After : Jul 30 16:20:39 2025 GMT
Subject: CN=6534e350-f58e-4fe0-bbc9-622f198665a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:90:6c:fe:f1:69:75:c8:76:47:fe:ad:0a:
bf:e2:88:35:6d:76:c0:19:db:1c:ec:67:ed:d4:5d:
20:58:fd:0a:72:07:23:56:17:3a:63:a2:d9:ef:12:
a2:3e:51:7d:be:21:4d:6e:e8:f0:86:0a:cd:bd:97:
1a:f4:eb:6e:f1:5b:ec:88:3d:71:0b:da:e9:0e:c1:
00:78:cf:07:17:6d:fb:d9:c3:5d:bf:33:28:0c:d3:
e6:63:55:52:d4:30:ae:95:7c:ca:25:f6:c9:77:88:
c7:ee:24:e4:d9:31:d8:8a:fe:31:a7:9f:ef:6d:e1:
ba:cc:db:a2:09:83:3f:b7:e4:8c:58:ce:a9:c3:28:
72:fa:1b:67:49:4c:39:8f:7a:7d:b9:25:c3:01:2c:
69:84:52:d2:e3:02:f2:7e:42:d6:6c:64:89:91:22:
a4:14:1a:f1:73:18:91:a7:47:7f:7a:2a:17:ce:de:
48:74:21:8a:3b:20:21:27:46:b9:6c:ac:ab:6b:ec:
f2:93:73:60:94:02:fa:fd:94:79:27:8b:d8:9a:cf:
5a:59:cd:c7:f5:73:2f:98:34:61:47:33:dc:82:0e:
c6:93:00:f7:96:18:5f:ac:51:94:a1:83:96:9b:05:
de:49:30:3f:38:72:5b:14:93:b9:84:d7:50:1b:86:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:83:83:A2:02:19:DD:34:C2:6F:66:EC:14:95:67:18:2D:A9:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7acafe81-3440-3e32-80ba-1f81c7e5179d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:db:b5:d5:78:bd:fa:c3:f2:4b:3d:be:75:c6:40:11:3f:59:
af:1f:7c:1a:7f:84:ba:88:df:af:4b:7c:ef:3c:80:34:c4:58:
1e:b9:06:35:05:c1:89:ee:e6:dc:2a:00:4a:43:da:2f:44:96:
2c:09:4d:e6:7d:99:1c:84:ea:6e:0c:59:a0:be:da:5f:8e:9f:
f7:7f:1d:44:ca:8a:02:3e:af:00:fb:c0:1b:cf:5d:b3:44:69:
35:09:fe:11:1a:3a:85:44:14:43:b7:06:0e:8e:6e:d5:57:87:
e9:09:34:cd:8c:80:a5:0f:55:4b:c6:fd:d1:78:5b:7e:3e:25:
65:a8:2e:f2:d4:28:34:4a:60:fd:4b:ee:27:27:ba:ab:18:8c:
2b:d6:c8:bf:00:2d:7e:b2:d0:ee:d3:58:33:e7:e0:82:86:31:
91:39:b9:cc:4e:34:c2:ed:44:49:bb:fd:41:ac:87:8f:fe:9a:
06:ea:c3:57:e1:ee:4e:16:93:ec:11:6b:fa:64:dc:81:5b:e5:
fb:90:64:4a:0e:ca:c3:1a:ed:e9:8b:f0:a6:75:c1:41:8c:c8:
ad:9c:28:ed:f0:81:67:da:a3:10:84:dd:68:0c:4d:47:4d:23:
04:c0:2d:cb:78:a8:db:d7:6c:8d:c9:3f:79:de:09:21:d6:49:
3d:85:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:00:10 2025 by rpki-client