Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10764cdc-2b8b-36a8-857f-62a1e48cd85b.roa
File: 10764cdc-2b8b-36a8-857f-62a1e48cd85b.roa (raw, json)
Hash identifier: 4o9AHNUuSByzufUOCYdtUeBkoM3K1POTSumuxnIUlKs=
Subject key identifier: CB:A2:BB:68:61:D7:2F:89:86:C9:AF:BA:DA:E6:1B:6C:3B:47:F6:81
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA2E92797FDB7587F2B6B0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10764cdc-2b8b-36a8-857f-62a1e48cd85b.roa
Signing time: Thu 01 May 2025 17:19:13 +0000
ROA not before: Thu 01 May 2025 17:19:13 +0000
ROA not after: Wed 30 Jul 2025 17:19:13 +0000
asID: 22773
IP address blocks: 70.170.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:2e:92:79:7f:db:75:87:f2:b6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:13 2025 GMT
Not After : Jul 30 17:19:13 2025 GMT
Subject: CN=b8372c08-5a13-45b0-98db-acf8d49dd464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:d9:32:bb:34:20:da:83:a9:49:2d:bf:e2:
8e:1b:f9:1e:42:8b:36:f6:14:be:ec:b2:3e:50:8b:
db:c1:9d:12:71:a3:d6:5e:ca:5f:22:1a:47:ad:ad:
27:03:e3:ba:b6:4f:21:c8:06:fc:5c:a9:9c:e7:02:
b2:b8:0e:1b:00:92:f6:9a:98:32:e7:c7:6c:a5:52:
39:5e:b5:00:b9:d5:5b:38:42:b0:44:0a:34:49:d8:
cf:73:d3:b9:5b:ef:c1:32:02:a4:4a:08:06:2d:db:
d7:5c:f1:8d:75:38:98:2f:3e:2f:63:84:c7:34:5e:
c4:43:19:55:b8:ec:6b:db:de:c5:98:9b:a3:e2:73:
ee:3c:92:0f:41:53:7c:42:42:e6:d9:47:a2:c9:23:
01:69:9b:1a:be:f1:4e:24:1b:fd:48:fa:86:b3:24:
7a:6e:91:ae:d4:04:70:2e:31:4e:fd:19:e3:2a:65:
54:ce:92:df:0f:ca:9e:c9:5b:57:9d:cf:7d:46:5c:
b7:0d:38:59:5a:98:cc:35:ae:36:55:fa:be:ba:d1:
9d:66:2f:73:56:bc:03:30:2c:f7:ea:88:6f:93:fd:
44:df:61:f7:57:61:11:8e:38:2a:96:e1:43:92:2f:
50:35:a6:ca:48:0e:81:32:78:77:e5:59:fb:12:8e:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:BB:68:61:D7:2F:89:86:C9:AF:BA:DA:E6:1B:6C:3B:47:F6:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10764cdc-2b8b-36a8-857f-62a1e48cd85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.170.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:35:19:ba:52:20:e4:2b:f2:b3:37:95:28:0b:67:c9:a6:b1:
dd:98:d0:0e:46:7a:5e:43:3d:ef:e3:42:f5:ff:b0:3c:f0:cd:
2f:3a:e5:d1:56:68:33:df:a3:e6:5f:9c:41:be:9c:9f:51:09:
c2:a0:94:79:ac:0f:e4:ca:5c:4e:08:e3:37:42:06:cf:91:2f:
98:c8:c9:0b:9a:e3:3e:30:0a:a0:c3:e8:de:66:ed:d3:ca:37:
48:94:1c:ba:04:6d:f0:64:d6:61:5b:b2:f6:05:ac:8a:35:39:
03:75:8a:45:61:53:8f:21:19:3d:e1:0a:17:5b:25:23:b2:5d:
ea:04:5a:2a:5a:c8:24:e0:6c:11:de:e3:c5:3d:44:cc:f6:a2:
08:e0:f8:00:1e:31:67:d4:c3:7b:10:d9:dd:b8:a0:b6:fe:b5:
d9:b2:a7:90:81:c6:bb:95:27:3f:dd:96:07:07:52:2a:17:50:
3b:b1:5a:07:54:43:9a:2d:35:1b:57:12:61:ff:8a:bd:9a:30:
5e:ae:c4:81:61:88:42:5a:89:f4:da:87:d1:68:bf:0a:ac:1c:
55:3a:c4:b0:32:97:03:d8:3c:e6:6e:e3:eb:c8:d8:91:19:67:
f2:0f:b8:9f:f0:84:09:50:15:2b:13:44:44:d3:e3:03:0c:1a:
75:cd:89:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+i6SeX/bdYfytrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MTkxM1oXDTI1MDczMDE3MTkxM1owLzEtMCsGA1UEAxMk
YjgzNzJjMDgtNWExMy00NWIwLTk4ZGItYWNmOGQ0OWRkNDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTZMrs0INqDqUktv+KOG/keQos29hS+7LI+
UIvbwZ0ScaPWXspfIhpHra0nA+O6tk8hyAb8XKmc5wKyuA4bAJL2mpgy58dspVI5
XrUAudVbOEKwRAo0SdjPc9O5W+/BMgKkSggGLdvXXPGNdTiYLz4vY4THNF7EQxlV
uOxr297FmJuj4nPuPJIPQVN8QkLm2UeiySMBaZsavvFOJBv9SPqGsyR6bpGu1ARw
LjFO/RnjKmVUzpLfD8qeyVtXnc99Rly3DThZWpjMNa42Vfq+utGdZi9zVrwDMCz3
6ohvk/1E32H3V2ERjjgqluFDki9QNabKSA6BMnh35Vn7Eo4iHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuiu2hh1y+JhsmvutrmG2w7R/aBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTA3NjRjZGMtMmI4Yi0z
NmE4LTg1N2YtNjJhMWU0OGNkODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqo4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGc1GbpSIOQr8rM3lSgLZ8mmsd2Y0A5Gel5DPe/jQvX/sDzwzS865dFW
aDPfo+ZfnEG+nJ9RCcKglHmsD+TKXE4I4zdCBs+RL5jIyQua4z4wCqDD6N5m7dPK
N0iUHLoEbfBk1mFbsvYFrIo1OQN1ikVhU48hGT3hChdbJSOyXeoEWipayCTgbBHe
48U9RMz2ogjg+AAeMWfUw3sQ2d24oLb+tdmyp5CBxruVJz/dlgcHUioXUDuxWgdU
Q5otNRtXEmH/ir2aMF6uxIFhiEJaifTah9FovwqsHFU6xLAylwPYPOZu4+vI2JEZ
Z/IPuJ/whAlQFSsTRETT4wMMGnXNibs=
-----END CERTIFICATE-----
Generated at Thu May 15 01:29:13 2025 by rpki-client