Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cce68d3-1515-3d21-87f5-3e56fb0fdb41.roa
File: 2cce68d3-1515-3d21-87f5-3e56fb0fdb41.roa (raw, json)
Hash identifier: g5VIgzEyWQ1fWIzHY/P7tqJT230h0uCsmo6+E2yProY=
Subject key identifier: 20:C7:8A:5F:79:40:1E:5F:E1:3F:2D:87:8F:7E:33:63:DB:37:F7:76
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD862B87BB4125146CAA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cce68d3-1515-3d21-87f5-3e56fb0fdb41.roa
Signing time: Thu 01 May 2025 16:21:29 +0000
ROA not before: Thu 01 May 2025 16:21:29 +0000
ROA not after: Wed 30 Jul 2025 16:21:29 +0000
asID: 22773
IP address blocks: 68.99.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:86:2b:87:bb:41:25:14:6c:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:29 2025 GMT
Not After : Jul 30 16:21:29 2025 GMT
Subject: CN=95afc9bc-25f3-4e38-a824-dc8c348fa0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:df:33:5e:fa:1c:87:1f:71:c5:c2:27:ab:
05:a9:9b:f3:45:02:77:f0:e1:a4:bd:48:9e:ea:3e:
95:5d:df:e1:1c:3a:b6:f6:7d:63:c7:3e:78:b5:d0:
99:01:a3:80:dc:33:55:89:98:16:bf:7e:3d:33:35:
e0:d1:83:6e:4e:18:ae:d0:65:da:30:40:6b:63:cc:
1b:d1:96:24:7e:96:8e:44:ca:aa:57:6d:3f:14:2e:
05:32:5e:21:b8:58:b5:7e:9c:74:a7:48:04:cb:93:
aa:05:0f:aa:52:91:98:44:71:46:c0:f7:35:13:85:
cd:98:3f:ee:4e:49:21:4c:f0:d5:8d:f1:bc:45:5a:
da:ff:e3:07:85:d6:2c:ca:82:6b:41:c2:89:8c:91:
ea:c6:95:93:8f:e4:03:45:9b:4e:09:bb:34:55:9f:
15:c4:7e:cb:5e:bf:cd:53:3a:74:9d:6e:de:7a:23:
2a:17:59:e7:96:84:c7:9c:d6:31:3d:69:5e:27:10:
94:09:51:27:2c:11:f1:24:66:97:82:93:6a:e1:84:
4f:3f:15:2f:56:86:69:54:0a:50:19:d9:04:e2:6a:
ad:b2:06:8b:dc:b6:42:c0:83:bb:60:fc:67:64:36:
60:00:7a:46:a0:e4:a2:dc:0d:bf:ee:98:e8:0f:4c:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:8A:5F:79:40:1E:5F:E1:3F:2D:87:8F:7E:33:63:DB:37:F7:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cce68d3-1515-3d21-87f5-3e56fb0fdb41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.99.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6d:c1:ad:f5:5e:b4:6b:9e:22:39:36:ef:56:81:a1:a4:63:
ce:bc:e7:49:f1:89:0e:56:4c:46:9a:55:3b:a7:bf:35:09:f7:
f9:be:8f:0e:85:e6:18:92:f8:ca:2c:ad:6e:ba:ea:a3:17:17:
38:9c:05:47:48:9b:0f:e6:77:00:b5:13:fb:7d:a4:b8:81:8c:
76:02:b7:f2:45:55:0d:6b:97:de:33:14:f5:dd:e1:93:57:74:
4d:5d:87:20:da:7b:58:42:03:b2:d5:2e:76:63:c4:44:3d:90:
94:e9:22:44:6c:04:84:29:3c:bb:f5:66:cd:f8:c7:f2:0c:e0:
ae:f6:0e:fc:6b:b0:e9:17:42:76:2b:7f:65:d2:39:e9:0f:b4:
ee:5e:b1:e7:62:80:fd:99:d0:9d:11:91:df:1a:9c:51:a7:db:
78:f9:c4:c7:e8:49:a9:08:2a:04:00:c9:05:92:6e:9c:7d:57:
75:8b:f9:65:bf:15:ae:85:ee:d7:e3:95:7e:81:70:53:48:b6:
f9:13:aa:71:ac:28:01:d0:86:d0:34:7f:2b:ec:3e:0a:33:02:
55:11:3a:8d:80:93:82:08:33:dd:de:fc:4c:63:ad:3f:8d:e9:
6b:2f:73:7b:ae:4a:08:c0:e8:f3:a8:5c:9d:11:ff:6b:84:f7:
62:e0:36:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13YYrh7tBJRRsqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjEyOVoXDTI1MDczMDE2MjEyOVowLzEtMCsGA1UEAxMk
OTVhZmM5YmMtMjVmMy00ZTM4LWE4MjQtZGM4YzM0OGZhMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlvfM176HIcfccXCJ6sFqZvzRQJ38OGkvUie
6j6VXd/hHDq29n1jxz54tdCZAaOA3DNViZgWv349MzXg0YNuThiu0GXaMEBrY8wb
0ZYkfpaORMqqV20/FC4FMl4huFi1fpx0p0gEy5OqBQ+qUpGYRHFGwPc1E4XNmD/u
TkkhTPDVjfG8RVra/+MHhdYsyoJrQcKJjJHqxpWTj+QDRZtOCbs0VZ8VxH7LXr/N
Uzp0nW7eeiMqF1nnloTHnNYxPWleJxCUCVEnLBHxJGaXgpNq4YRPPxUvVoZpVApQ
GdkE4mqtsgaL3LZCwIO7YPxnZDZgAHpGoOSi3A2/7pjoD0xZ1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDHil95QB5f4T8th49+M2PbN/d2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNjZTY4ZDMtMTUxNS0z
ZDIxLTg3ZjUtM2U1NmZiMGZkYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEttwa31XrRrniI5Nu9WgaGkY86850nxiQ5WTEaaVTunvzUJ9/m+jw6F
5hiS+MosrW666qMXFzicBUdImw/mdwC1E/t9pLiBjHYCt/JFVQ1rl94zFPXd4ZNX
dE1dhyDae1hCA7LVLnZjxEQ9kJTpIkRsBIQpPLv1Zs34x/IM4K72DvxrsOkXQnYr
f2XSOekPtO5esedigP2Z0J0Rkd8anFGn23j5xMfoSakIKgQAyQWSbpx9V3WL+WW/
Fa6F7tfjlX6BcFNItvkTqnGsKAHQhtA0fyvsPgozAlUROo2Ak4IIM93e/ExjrT+N
6Wsvc3uuSgjA6POoXJ0R/2uE92LgNlU=
-----END CERTIFICATE-----
Generated at Thu May 15 05:00:54 2025 by rpki-client