Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ecb9646-36ca-3080-aa59-e8eaa3a93496.roa
File: 0ecb9646-36ca-3080-aa59-e8eaa3a93496.roa (raw, json)
Hash identifier: 8J8Df9PWiKANhj8QlkPRyEm6FBgAQUICG/HpBowKILM=
Subject key identifier: CC:B7:B6:87:AE:DB:6D:35:FA:C0:7F:DE:D3:C9:67:41:BF:EC:87:4A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DFD0CD3F00A651EA9A9440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ecb9646-36ca-3080-aa59-e8eaa3a93496.roa
Signing time: Thu 01 May 2025 16:26:06 +0000
ROA not before: Thu 01 May 2025 16:26:06 +0000
ROA not after: Wed 30 Jul 2025 16:26:06 +0000
asID: 22773
IP address blocks: 72.201.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:d0:cd:3f:00:a6:51:ea:9a:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:06 2025 GMT
Not After : Jul 30 16:26:06 2025 GMT
Subject: CN=b165d825-ea8d-493b-95ab-639b6db7a394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:f6:e9:88:ec:15:54:a5:71:c8:82:52:47:
72:2d:5e:97:a4:f0:91:ed:02:ac:08:61:5b:a0:1d:
79:76:4c:ec:54:ed:68:45:dd:3c:79:14:78:62:cd:
30:d0:4f:8f:02:f2:f6:26:f7:0a:75:9e:43:72:8e:
18:75:2c:e6:04:4c:ab:2f:4a:b2:4f:d4:b1:5e:21:
f9:c9:10:d1:74:b9:3f:5e:57:cd:5a:43:48:e4:fd:
a9:29:8b:fb:56:f4:09:ba:7d:80:38:d4:0f:32:b9:
ed:29:94:6d:a7:07:af:fa:bf:b0:46:87:90:9a:60:
a8:24:51:2d:5a:75:f4:79:12:2a:37:14:42:02:b4:
71:87:3f:97:cc:8c:50:93:31:70:3d:65:e2:fe:58:
b8:b5:27:2b:be:54:a1:94:93:21:59:7b:39:0c:91:
b1:f1:a1:bb:9a:67:52:60:b0:ef:ef:82:f8:67:90:
d7:f6:f0:6d:77:e7:18:ea:20:e4:ff:b4:43:06:86:
9b:da:3f:31:e2:aa:7f:35:c9:63:61:57:c3:7f:48:
ee:09:f0:e4:fd:33:9b:b3:ab:59:d8:76:d7:7c:5a:
b2:a3:15:fa:ed:3e:0f:77:79:b6:95:cc:d3:17:df:
10:4e:2e:d1:07:bc:fc:58:00:a7:a5:ad:4e:f3:1c:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B7:B6:87:AE:DB:6D:35:FA:C0:7F:DE:D3:C9:67:41:BF:EC:87:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ecb9646-36ca-3080-aa59-e8eaa3a93496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.201.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:df:15:48:1b:b3:8b:50:6d:e9:c4:2c:fa:00:05:10:61:66:
35:c2:c9:8f:45:95:a2:e3:0e:f3:1c:a4:53:5f:84:e0:68:fd:
cc:36:a0:34:76:d8:2e:30:51:29:e2:5e:27:b2:0b:9e:8d:8f:
37:63:31:2d:1c:2b:63:7c:1c:77:d6:b7:b6:a1:12:19:e4:65:
3f:88:9f:7e:c0:a9:dd:29:47:d3:a9:68:60:f7:c9:de:71:fb:
2e:6f:b9:18:41:34:cf:93:91:a6:13:5a:fb:b2:49:d3:87:d5:
36:d4:ac:ae:31:11:75:fc:d2:c7:d3:26:ed:3b:25:db:ed:ba:
51:fe:b8:e2:0d:de:cd:19:cc:c9:ba:b9:88:84:28:df:73:7a:
c8:16:e8:7e:1c:fd:57:26:54:98:e0:f5:a7:9a:fb:e8:8e:46:
fe:f7:ac:cc:be:3e:bd:65:b8:6a:93:b9:71:40:d9:5a:0e:a6:
fa:c9:85:77:63:7a:84:97:3c:a1:cf:40:72:ac:2e:03:4e:7e:
ae:fe:b6:2b:d1:3c:37:de:b2:eb:e2:6e:21:7d:63:14:1c:4c:
fc:26:99:34:48:43:0a:f4:69:ff:fb:4f:74:79:22:ec:5f:e3:
fa:f0:ff:04:6a:25:10:13:67:7e:6b:d0:07:32:70:71:d8:65:
0e:78:93:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm139DNPwCmUeqalEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjYwNloXDTI1MDczMDE2MjYwNlowLzEtMCsGA1UEAxMk
YjE2NWQ4MjUtZWE4ZC00OTNiLTk1YWItNjM5YjZkYjdhMzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU326YjsFVSlcciCUkdyLV6XpPCR7QKsCGFb
oB15dkzsVO1oRd08eRR4Ys0w0E+PAvL2JvcKdZ5Dco4YdSzmBEyrL0qyT9SxXiH5
yRDRdLk/XlfNWkNI5P2pKYv7VvQJun2AONQPMrntKZRtpwev+r+wRoeQmmCoJFEt
WnX0eRIqNxRCArRxhz+XzIxQkzFwPWXi/li4tScrvlShlJMhWXs5DJGx8aG7mmdS
YLDv74L4Z5DX9vBtd+cY6iDk/7RDBoab2j8x4qp/NcljYVfDf0juCfDk/TObs6tZ
2HbXfFqyoxX67T4Pd3m2lczTF98QTi7RB7z8WACnpa1O8xwXbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMy3toeu2201+sB/3tPJZ0G/7IdKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGVjYjk2NDYtMzZjYS0z
MDgwLWFhNTktZThlYWEzYTkzNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMnOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKffFUgbs4tQbenELPoABRBhZjXCyY9FlaLjDvMcpFNfhOBo/cw2oDR2
2C4wUSniXieyC56NjzdjMS0cK2N8HHfWt7ahEhnkZT+In37Aqd0pR9OpaGD3yd5x
+y5vuRhBNM+TkaYTWvuySdOH1TbUrK4xEXX80sfTJu07JdvtulH+uOIN3s0ZzMm6
uYiEKN9zesgW6H4c/VcmVJjg9aea++iORv73rMy+Pr1luGqTuXFA2VoOpvrJhXdj
eoSXPKHPQHKsLgNOfq7+tivRPDfesuvibiF9YxQcTPwmmTRIQwr0af/7T3R5Iuxf
4/rw/wRqJRATZ35r0AcycHHYZQ54k4A=
-----END CERTIFICATE-----
Generated at Thu May 15 02:49:14 2025 by rpki-client