Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35434eab-932a-3e56-b0a7-7986fb667089.roa
File: 35434eab-932a-3e56-b0a7-7986fb667089.roa (raw, json)
Hash identifier: 3Rf3sIZoDG4yq26QHIu80MPN9neYc2Tl8XtqLbf1xKg=
Subject key identifier: E7:F4:E5:C3:4F:DC:DB:33:8B:CE:8D:81:CD:F8:0D:77:A0:0B:6F:57
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DF6B0A91EF00D7F478B640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35434eab-932a-3e56-b0a7-7986fb667089.roa
Signing time: Thu 01 May 2025 16:25:18 +0000
ROA not before: Thu 01 May 2025 16:25:18 +0000
ROA not after: Wed 30 Jul 2025 16:25:18 +0000
asID: 22773
IP address blocks: 70.190.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:df:6b:0a:91:ef:00:d7:f4:78:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:25:18 2025 GMT
Not After : Jul 30 16:25:18 2025 GMT
Subject: CN=8f437b9e-585a-402b-a3f9-35726b19bccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:17:ae:3b:ec:43:78:e3:fc:bd:44:73:ed:
eb:3b:7d:ce:bf:ac:c3:2b:a9:d1:7d:65:23:ea:c5:
d0:ea:79:db:1a:e1:50:37:99:fe:15:65:b9:c8:9e:
8d:e9:61:cd:f2:bc:40:f0:f8:ee:c4:a2:1c:7b:62:
83:6d:85:5a:26:9f:c3:a5:49:b7:8b:95:3a:55:1f:
e5:08:c6:4d:88:d8:da:19:b6:6d:9c:3a:c8:5f:1a:
a8:4f:42:c7:6a:65:40:f8:f3:2d:f3:b1:bc:84:a1:
34:60:c8:0c:b5:fa:15:2c:41:24:ac:fc:68:13:f3:
f8:e6:8c:e8:94:0d:ea:e5:d8:28:e6:53:c6:db:4a:
22:29:e3:d1:74:e6:67:81:a4:1d:14:1c:e2:0a:cc:
57:7d:f0:05:6d:12:59:03:17:5d:23:bc:37:9c:51:
8a:ec:b8:35:9b:ee:4e:67:a0:e7:7e:0c:d6:f8:ff:
3c:f4:a0:2e:c9:05:3b:bb:e4:b5:7c:c1:8d:ec:98:
6f:31:a0:6c:b3:2b:54:a1:f5:7f:ac:99:9f:f1:dc:
6a:06:a4:f1:55:7c:2b:fc:0f:e0:e5:aa:25:1e:7e:
33:65:6f:b2:85:0a:a2:3b:42:d4:d1:90:6e:23:a1:
8c:60:89:99:c6:47:43:ae:2a:67:72:52:71:6a:1a:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F4:E5:C3:4F:DC:DB:33:8B:CE:8D:81:CD:F8:0D:77:A0:0B:6F:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35434eab-932a-3e56-b0a7-7986fb667089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.190.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:7c:f5:bd:4a:3f:dd:c8:00:a1:b7:02:1f:c5:8d:c4:5a:26:
a1:e2:c0:6b:97:52:66:29:ae:de:39:f7:c7:5c:46:04:64:79:
58:16:8f:59:be:9e:67:1a:32:16:66:2b:84:ad:39:10:c4:25:
ec:5c:94:02:ed:26:2f:f2:74:b7:f6:73:79:29:8f:00:d9:80:
e8:53:54:70:2d:8f:a5:71:33:b7:15:b1:4c:2c:2b:e3:be:fa:
d6:ae:be:b8:4e:7f:4f:b3:a1:e6:de:27:45:44:19:6a:2d:4a:
fe:c0:46:40:eb:5b:43:c6:19:eb:cd:80:9b:5e:c2:51:36:02:
d9:7c:f2:67:da:2e:5e:8f:99:e1:fd:c2:75:3e:b8:c8:37:c1:
20:3e:e2:32:76:da:df:f6:ed:94:06:1a:4b:bb:86:c3:61:db:
74:54:ad:aa:df:f1:0f:3e:9a:76:20:f7:be:65:df:a1:31:53:
7c:c4:be:30:c8:78:45:54:b9:cd:a8:44:5f:06:f1:aa:20:79:
5a:eb:07:23:f8:83:de:07:b7:39:28:91:09:19:24:24:4e:d6:
84:9b:10:26:16:cd:ce:50:09:3c:41:35:7e:76:9f:a7:7b:53:
aa:a0:c7:e4:ca:1f:e2:fd:6b:66:b3:55:c4:a3:4e:f2:f2:d9:
8e:71:f9:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm132sKke8A1/R4tkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjUxOFoXDTI1MDczMDE2MjUxOFowLzEtMCsGA1UEAxMk
OGY0MzdiOWUtNTg1YS00MDJiLWEzZjktMzU3MjZiMTliY2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bYXrjvsQ3jj/L1Ec+3rO33Ov6zDK6nRfWUj
6sXQ6nnbGuFQN5n+FWW5yJ6N6WHN8rxA8PjuxKIce2KDbYVaJp/DpUm3i5U6VR/l
CMZNiNjaGbZtnDrIXxqoT0LHamVA+PMt87G8hKE0YMgMtfoVLEEkrPxoE/P45ozo
lA3q5dgo5lPG20oiKePRdOZngaQdFBziCsxXffAFbRJZAxddI7w3nFGK7Lg1m+5O
Z6DnfgzW+P889KAuyQU7u+S1fMGN7JhvMaBssytUofV/rJmf8dxqBqTxVXwr/A/g
5aolHn4zZW+yhQqiO0LU0ZBuI6GMYImZxkdDripnclJxaho8WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOf05cNP3Nszi86Ngc34DXegC29XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzU0MzRlYWItOTMyYS0z
ZTU2LWIwYTctNzk4NmZiNjY3MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr6JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF589b1KP93IAKG3Ah/FjcRaJqHiwGuXUmYprt4598dcRgRkeVgWj1m+
nmcaMhZmK4StORDEJexclALtJi/ydLf2c3kpjwDZgOhTVHAtj6VxM7cVsUwsK+O+
+tauvrhOf0+zoebeJ0VEGWotSv7ARkDrW0PGGevNgJtewlE2Atl88mfaLl6PmeH9
wnU+uMg3wSA+4jJ22t/27ZQGGku7hsNh23RUrarf8Q8+mnYg975l36ExU3zEvjDI
eEVUuc2oRF8G8aogeVrrByP4g94HtzkokQkZJCRO1oSbECYWzc5QCTxBNX52n6d7
U6qgx+TKH+L9a2azVcSjTvLy2Y5x+cc=
-----END CERTIFICATE-----
Generated at Thu May 15 06:01:28 2025 by rpki-client