Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f59809a-2023-3996-9b0f-6384fc576aea.roa
File: 7f59809a-2023-3996-9b0f-6384fc576aea.roa (raw, json)
Hash identifier: EhJHtNPFTtOUSpOpCK+MZ77TcbcAe7NCR0TDEANMi0Y=
Subject key identifier: 9A:5C:A7:CB:96:A8:38:ED:50:1F:ED:28:2C:A9:C2:F4:01:E5:93:C1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD210B7B62EF67186EE800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f59809a-2023-3996-9b0f-6384fc576aea.roa
Signing time: Thu 01 May 2025 16:20:41 +0000
ROA not before: Thu 01 May 2025 16:20:41 +0000
ROA not after: Wed 30 Jul 2025 16:20:41 +0000
asID: 22773
IP address blocks: 68.2.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:21:0b:7b:62:ef:67:18:6e:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:41 2025 GMT
Not After : Jul 30 16:20:41 2025 GMT
Subject: CN=f27916de-ca01-4b83-a1c9-191f169de43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:95:8d:aa:38:8d:62:10:17:43:1d:f3:a1:
31:ad:3e:bd:10:6a:7c:87:10:1d:d7:96:65:ce:59:
8d:47:d9:c5:4d:b8:c3:5e:2c:7f:c9:11:30:a8:c7:
0f:cb:d1:7a:08:a9:7e:22:fc:34:6c:cf:e9:70:2e:
e9:de:ab:c7:22:9f:6d:7d:b0:07:84:04:78:8c:cf:
be:ad:bd:fd:59:43:1c:b9:9b:00:24:c2:7c:52:f5:
30:68:f4:7d:f2:f5:be:e6:b8:e2:48:36:62:16:8a:
22:04:72:de:43:f5:ac:2d:db:25:7d:91:16:c7:7e:
4e:12:46:5b:ac:c1:ec:f2:0d:9e:db:3e:d1:55:cc:
5b:93:e8:24:36:c2:42:b1:41:4f:19:ae:5c:2a:3b:
f8:db:e0:06:82:05:76:8e:f9:a5:0a:a9:67:4a:39:
55:bf:ac:92:dd:c6:a6:dc:3d:38:3f:6d:f9:e7:ea:
6c:ab:86:04:d3:e2:64:d9:0e:fa:d3:9f:19:56:0f:
01:b3:31:c1:ff:c0:85:91:28:00:d3:c6:8e:37:14:
6f:38:40:54:d3:62:4f:27:58:a3:85:91:12:7e:3a:
64:f7:e2:2a:33:bf:b6:74:00:13:6d:57:92:a0:a8:
a4:f3:82:f7:84:79:a3:27:db:4b:12:7f:a5:35:f4:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:A7:CB:96:A8:38:ED:50:1F:ED:28:2C:A9:C2:F4:01:E5:93:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f59809a-2023-3996-9b0f-6384fc576aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:1f:a6:79:4f:e1:81:83:15:83:1c:14:ce:e3:20:34:e9:a0:
84:4e:60:86:8d:d9:90:3a:67:dd:da:69:e7:dc:3e:79:0a:86:
41:22:3e:ce:09:e9:fa:19:2e:8b:bb:fc:80:62:bd:55:f7:f3:
46:2c:a5:94:cb:58:74:81:a6:77:5a:ac:2d:d8:54:f9:fa:bd:
49:dc:a7:5e:5c:9e:b9:35:64:f3:2d:47:db:b5:0a:c2:b9:ea:
fa:4c:2a:d7:95:e7:3b:8d:13:32:82:a5:07:46:44:62:e7:27:
86:f7:28:f9:4f:9e:5f:25:ba:25:fb:bb:57:d2:a1:41:a2:c8:
ad:4c:ee:66:38:e5:05:b9:6a:b0:69:3c:25:66:08:70:88:4e:
fc:d8:0d:49:c4:85:b1:c5:f6:b6:04:df:af:a9:b8:7a:8d:d9:
8c:09:23:b2:c6:88:64:de:0d:5a:c3:1c:0d:a6:7e:42:12:27:
50:b9:b9:3a:fb:37:41:98:29:dd:f4:ca:06:70:84:4c:13:d8:
43:d7:a6:17:93:37:96:5b:87:e7:98:5c:61:ef:49:c9:c9:4a:
1b:25:59:66:82:f2:fb:a6:98:77:e2:3a:cb:d6:31:0b:29:67:
3d:f9:25:37:d6:3e:66:f0:f8:a4:d0:1a:40:37:4e:f9:c3:e1:
b6:f0:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:16:57 2025 by rpki-client