Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/329d70ca-aa66-376d-a141-dae46ca1be7a.roa
File: 329d70ca-aa66-376d-a141-dae46ca1be7a.roa (raw, json)
Hash identifier: u2xmtTtD7ObATZnTBgK5UKrOFvB//Z/uxT3abYfGvqE=
Subject key identifier: B7:7C:9B:40:57:47:12:DA:12:C1:C1:9D:6D:FF:8C:22:E3:CB:90:22
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD23439852938F332B8580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/329d70ca-aa66-376d-a141-dae46ca1be7a.roa
Signing time: Thu 01 May 2025 16:20:42 +0000
ROA not before: Thu 01 May 2025 16:20:42 +0000
ROA not after: Wed 30 Jul 2025 16:20:42 +0000
asID: 22773
IP address blocks: 68.2.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:23:43:98:52:93:8f:33:2b:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:42 2025 GMT
Not After : Jul 30 16:20:42 2025 GMT
Subject: CN=3cf86846-53c1-45d4-8b86-2d9f425fb9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:45:c5:33:06:b0:f9:80:0f:85:c4:78:91:
0d:03:f5:1e:21:7f:03:6c:c3:7c:85:76:a8:d3:f5:
8d:95:18:7f:f5:1c:a5:d1:a4:83:72:20:a8:44:3f:
cd:8e:3f:9c:3b:1d:f4:f4:21:7c:0a:57:08:e8:c0:
fa:b3:17:1f:7e:63:0d:f0:b8:86:c5:a9:31:28:19:
0a:13:14:74:fd:7d:41:74:9a:94:91:2b:55:63:c4:
1f:7f:53:8b:9e:24:cf:bf:df:44:6c:83:1a:14:70:
d5:18:d2:a7:61:e8:1f:65:f2:4b:4c:de:cf:a3:00:
f5:67:71:ad:6b:e7:5a:6d:11:4f:95:a6:97:32:ce:
61:d0:d0:c3:75:51:6a:da:b4:1a:e5:85:07:d3:31:
f0:c9:e1:21:fa:d8:00:9e:44:63:fc:9c:49:1c:05:
fd:36:7c:66:46:94:9e:b1:b7:1b:64:11:95:30:0e:
eb:88:af:19:64:84:df:c0:a1:45:34:4d:df:52:7c:
dc:c4:12:8b:ab:a1:4e:37:cf:9a:e6:d2:a2:b6:5f:
34:a2:cf:ef:cd:5e:a3:a9:98:a3:f9:1d:7d:35:39:
f6:cb:31:18:90:f8:65:52:68:c1:e0:92:be:50:ce:
f9:f5:6c:86:c5:77:ac:1b:cf:93:80:8a:73:5e:d9:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:9B:40:57:47:12:DA:12:C1:C1:9D:6D:FF:8C:22:E3:CB:90:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/329d70ca-aa66-376d-a141-dae46ca1be7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:32:61:94:67:95:35:f4:38:1d:10:c7:f3:e8:3a:8d:29:13:
3d:e9:a3:b3:a0:83:ba:0d:04:c3:31:29:11:87:58:79:d9:b9:
bf:d0:35:8b:4e:ec:22:c9:0e:9d:05:5e:d8:66:65:0e:ec:1f:
86:9b:0a:87:6a:f3:1b:2d:a7:02:fa:4d:13:30:11:76:46:2c:
40:06:8b:ec:dd:f8:03:9d:ab:79:60:ab:1d:35:51:dc:fd:a6:
67:38:35:24:02:e9:c4:b9:eb:75:9c:2b:d9:2e:6e:7c:a2:a0:
d7:c5:d5:a4:11:29:7b:d5:88:f6:06:92:87:76:53:e4:fb:c3:
ce:25:15:5f:01:b7:3d:d8:7a:ce:b7:aa:d8:73:d1:e8:d1:6c:
07:a0:6b:8d:24:ba:0a:2f:08:9f:05:e8:77:7a:79:d1:a7:0d:
86:aa:fe:dd:f0:98:27:c9:60:2b:9d:36:d6:f5:2f:27:5a:ad:
12:cb:34:f4:47:bb:55:f6:6e:2c:c9:bb:9a:82:02:f2:1e:fd:
31:84:45:3d:bf:8c:5b:8f:bd:72:6b:69:80:f0:92:74:f7:50:
e1:07:d1:6d:e5:00:38:2f:ce:a1:a4:50:9b:9c:7e:fa:5d:b4:
a0:4f:ad:38:a8:59:20:cd:1b:c5:7e:9f:6f:1d:11:76:95:af:
7e:e1:ab:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13SNDmFKTjzMrhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjA0MloXDTI1MDczMDE2MjA0MlowLzEtMCsGA1UEAxMk
M2NmODY4NDYtNTNjMS00NWQ0LThiODYtMmQ5ZjQyNWZiOWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFFFxTMGsPmAD4XEeJENA/UeIX8DbMN8hXao
0/WNlRh/9Ryl0aSDciCoRD/Njj+cOx309CF8ClcI6MD6sxcffmMN8LiGxakxKBkK
ExR0/X1BdJqUkStVY8Qff1OLniTPv99EbIMaFHDVGNKnYegfZfJLTN7PowD1Z3Gt
a+dabRFPlaaXMs5h0NDDdVFq2rQa5YUH0zHwyeEh+tgAnkRj/JxJHAX9NnxmRpSe
sbcbZBGVMA7riK8ZZITfwKFFNE3fUnzcxBKLq6FON8+a5tKitl80os/vzV6jqZij
+R19NTn2yzEYkPhlUmjB4JK+UM759WyGxXesG8+TgIpzXtnVbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLd8m0BXRxLaEsHBnW3/jCLjy5AiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzI5ZDcwY2EtYWE2Ni0z
NzZkLWExNDEtZGFlNDZjYTFiZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwyYZRnlTX0OB0Qx/PoOo0pEz3po7Ogg7oNBMMxKRGHWHnZub/QNYtO
7CLJDp0FXthmZQ7sH4abCodq8xstpwL6TRMwEXZGLEAGi+zd+AOdq3lgqx01Udz9
pmc4NSQC6cS563WcK9kubnyioNfF1aQRKXvViPYGkod2U+T7w84lFV8Btz3Yes63
qthz0ejRbAega40kugovCJ8F6Hd6edGnDYaq/t3wmCfJYCudNtb1LydarRLLNPRH
u1X2bizJu5qCAvIe/TGERT2/jFuPvXJraYDwknT3UOEH0W3lADgvzqGkUJucfvpd
tKBPrTioWSDNG8V+n28dEXaVr37hqxA=
-----END CERTIFICATE-----
Generated at Thu May 15 02:19:53 2025 by rpki-client