Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32f239e9-cf52-374d-9e86-7b3c35b6d390.roa
File: 32f239e9-cf52-374d-9e86-7b3c35b6d390.roa (raw, json)
Hash identifier: tBU1SFTe3bbNcVqfe4BlmLmOOazdPmqI+qMqcrrgxbM=
Subject key identifier: A5:BE:F4:1C:9D:F8:B8:62:7F:8F:43:A8:52:E9:40:65:C3:57:9A:9F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E09F0BB3E61C50CBAF2260
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32f239e9-cf52-374d-9e86-7b3c35b6d390.roa
Signing time: Thu 01 May 2025 16:27:43 +0000
ROA not before: Thu 01 May 2025 16:27:43 +0000
ROA not after: Wed 30 Jul 2025 16:27:43 +0000
asID: 22773
IP address blocks: 72.217.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:9f:0b:b3:e6:1c:50:cb:af:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:43 2025 GMT
Not After : Jul 30 16:27:43 2025 GMT
Subject: CN=a045031c-3976-4ff5-93b7-2441ef26cd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:23:ba:ad:ac:af:3b:99:4c:e5:f9:84:a4:
e7:72:fc:a3:ec:b5:57:ea:32:f9:96:5a:9c:4d:75:
50:e6:fc:d4:02:ec:16:b4:d0:95:85:6a:64:10:f2:
5a:b9:df:b7:5c:ed:27:75:e2:bf:dd:10:95:f1:f2:
87:51:28:99:1f:fe:df:7b:0e:3a:2e:3a:b0:18:01:
54:92:35:3a:41:54:bc:ad:b8:c2:d3:51:f3:b0:ac:
0b:f0:0b:6d:fc:d4:9e:74:95:4a:07:42:78:98:e7:
10:9d:d7:56:4d:84:79:7e:78:a0:54:cf:28:b1:8b:
6c:53:27:b8:61:21:ba:c2:76:d3:8b:be:8b:52:1a:
c4:2b:c8:c6:ce:59:77:c7:ac:a9:1d:84:dc:82:a6:
ec:b7:62:5d:2f:e5:2b:9a:74:c9:0e:56:a9:aa:b8:
7e:17:3a:35:29:92:de:28:ca:6a:40:c1:b5:ce:62:
26:10:99:de:d4:29:09:b8:77:e5:81:ff:d9:36:0e:
10:9f:87:a0:3e:d2:52:0f:79:aa:2f:86:8c:59:da:
20:8c:da:77:0b:91:b8:72:1e:f6:d8:83:73:60:37:
fe:b6:49:a7:91:87:3c:f7:05:5b:42:59:51:a4:5b:
fc:b5:a6:98:4e:7c:bd:2b:ab:06:36:cc:89:c6:14:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:F4:1C:9D:F8:B8:62:7F:8F:43:A8:52:E9:40:65:C3:57:9A:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32f239e9-cf52-374d-9e86-7b3c35b6d390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.217.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:5b:d0:c0:7e:b1:9d:be:e4:2d:85:c4:07:5a:57:12:18:95:
f4:2e:56:6a:27:35:f3:0a:03:f9:51:45:5d:8c:fc:e5:e7:c9:
27:a1:d2:74:25:97:36:61:e1:d8:a6:a7:f4:1d:91:e0:f0:48:
60:ef:04:96:5c:d5:6c:09:a2:bf:f2:b6:46:a7:87:08:45:f6:
63:f9:2c:8e:8d:75:3e:0f:66:a1:30:dc:db:20:4f:bf:69:44:
e4:fe:20:40:18:e7:74:81:e8:f6:f3:0c:3c:ee:35:7f:ba:6c:
24:8c:9c:fb:63:31:54:e7:63:5f:dc:fe:5b:2e:1e:c2:50:d1:
f5:6a:4f:2d:12:07:78:f6:df:3d:49:fb:56:3b:ca:8c:f5:fa:
47:bc:25:f8:89:58:d0:60:ea:a6:e1:49:49:1f:5c:16:a1:34:
d7:6c:ea:f9:e9:25:b1:5f:48:88:4c:cc:d7:2f:d3:aa:78:d5:
c9:43:e0:20:41:d3:b8:c1:1a:38:07:e7:11:c6:98:50:47:a9:
e4:56:74:f3:83:f8:ae:63:b1:46:9f:33:19:0f:2e:93:25:32:
d7:5a:bf:3b:44:92:12:58:a7:be:08:04:6f:32:c8:c6:e9:53:
f5:65:0f:f0:1f:8d:3d:59:4a:4b:a0:76:5b:8c:71:8a:02:01:
c7:ee:cc:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14J8Ls+YcUMuvImAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2Mjc0M1oXDTI1MDczMDE2Mjc0M1owLzEtMCsGA1UEAxMk
YTA0NTAzMWMtMzk3Ni00ZmY1LTkzYjctMjQ0MWVmMjZjZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorIjuq2srzuZTOX5hKTncvyj7LVX6jL5llqc
TXVQ5vzUAuwWtNCVhWpkEPJaud+3XO0ndeK/3RCV8fKHUSiZH/7few46LjqwGAFU
kjU6QVS8rbjC01HzsKwL8Att/NSedJVKB0J4mOcQnddWTYR5fnigVM8osYtsUye4
YSG6wnbTi76LUhrEK8jGzll3x6ypHYTcgqbst2JdL+UrmnTJDlapqrh+Fzo1KZLe
KMpqQMG1zmImEJne1CkJuHflgf/ZNg4Qn4egPtJSD3mqL4aMWdogjNp3C5G4ch72
2INzYDf+tkmnkYc89wVbQllRpFv8taaYTny9K6sGNsyJxhRWeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW+9Byd+Lhif49DqFLpQGXDV5qfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJmMjM5ZTktY2Y1Mi0z
NzRkLTllODYtN2IzYzM1YjZkMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZb0MB+sZ2+5C2FxAdaVxIYlfQuVmonNfMKA/lRRV2M/OXnySeh0nQl
lzZh4dimp/QdkeDwSGDvBJZc1WwJor/ytkanhwhF9mP5LI6NdT4PZqEw3NsgT79p
ROT+IEAY53SB6PbzDDzuNX+6bCSMnPtjMVTnY1/c/lsuHsJQ0fVqTy0SB3j23z1J
+1Y7yoz1+ke8JfiJWNBg6qbhSUkfXBahNNds6vnpJbFfSIhMzNcv06p41clD4CBB
07jBGjgH5xHGmFBHqeRWdPOD+K5jsUafMxkPLpMlMtdavztEkhJYp74IBG8yyMbp
U/VlD/AfjT1ZSkugdluMcYoCAcfuzJU=
-----END CERTIFICATE-----
Generated at Thu May 15 08:02:17 2025 by rpki-client