Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38b83346-f1bf-3451-846f-997479562138.roa
File: 38b83346-f1bf-3451-846f-997479562138.roa (raw, json)
Hash identifier: zdResTbaScPQDQDJQjH6JhpeS/Xl7sBezBlosxe7qr0=
Subject key identifier: 4C:0B:31:D7:1F:87:04:5F:B7:66:21:73:82:D9:D3:D6:71:DB:D1:42
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FAB2EC5498D72878BD7DBC
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38b83346-f1bf-3451-846f-997479562138.roa
Signing time: Thu 01 May 2025 17:20:16 +0000
ROA not before: Thu 01 May 2025 17:20:16 +0000
ROA not after: Wed 30 Jul 2025 17:20:16 +0000
asID: 22773
IP address blocks: 70.191.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:b2:ec:54:98:d7:28:78:bd:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:16 2025 GMT
Not After : Jul 30 17:20:16 2025 GMT
Subject: CN=5d5dd975-cf85-496e-8c62-6158db2c23f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:d7:cf:3f:b7:d7:d1:c2:5a:a1:4b:88:2f:
69:7f:4b:02:91:48:e3:3c:d7:ff:2c:da:11:48:44:
df:f8:e8:6e:5f:d2:74:4e:e6:53:65:fe:48:6e:df:
15:85:b0:45:5a:d5:6e:c1:1a:f7:16:77:19:31:8b:
da:09:1b:69:fa:88:d7:a8:93:c7:f8:fd:75:4c:97:
2e:cb:5c:cb:a9:2f:c7:6f:64:2d:52:5b:0e:fe:05:
6d:0d:4e:54:5c:8e:0f:14:39:c9:a1:8c:0b:44:00:
99:cc:5c:46:52:30:f5:13:85:63:4d:8f:32:78:71:
56:ab:ef:63:66:24:f8:04:1a:bf:4c:e3:fd:29:08:
0c:d5:ee:72:f1:86:16:d7:df:ea:0d:b7:93:46:14:
ea:9c:dd:ec:e3:92:ed:66:53:02:25:79:4b:3d:94:
6e:02:f0:0a:4e:bd:8c:2d:03:5b:b9:4a:1d:da:61:
42:6b:0e:1b:13:db:f4:03:80:4b:4e:5b:b2:e0:52:
6e:22:93:9c:e8:fb:20:35:b4:7d:b4:f9:1e:ea:c5:
f8:e4:c2:6e:c3:8c:61:f3:90:62:fd:94:e6:86:69:
eb:56:9f:6a:d1:1c:c7:e0:2e:c5:df:33:2d:5a:b6:
b7:2e:46:ca:51:f8:cc:cb:44:e3:93:f6:b7:c0:b5:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0B:31:D7:1F:87:04:5F:B7:66:21:73:82:D9:D3:D6:71:DB:D1:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38b83346-f1bf-3451-846f-997479562138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.191.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:05:e4:d6:de:87:e6:76:a9:09:98:25:26:b6:3f:e0:72:af:
c3:48:f3:39:18:d0:bb:04:07:78:3c:96:ef:a1:59:de:f7:39:
7a:7d:6c:36:3c:4e:6a:84:da:bf:43:0d:b8:ba:47:65:86:5f:
89:69:0f:b0:e5:03:dc:22:70:8d:54:bd:33:d5:fc:a5:9c:df:
59:c6:ed:09:81:16:78:89:5e:7d:4a:a7:e5:3d:3f:3d:7e:80:
ad:b6:d8:04:79:b2:cd:cd:ef:d3:60:0a:9a:46:cb:bb:50:41:
c1:19:00:10:c8:ac:a0:7c:aa:7b:30:b2:8a:c8:78:67:f8:20:
0d:2e:85:ac:ec:1c:4e:da:68:92:16:06:e0:f9:f8:77:67:b5:
f2:5e:7b:07:4e:6f:74:1a:54:6b:84:83:a4:c4:85:27:2a:de:
cd:e8:7f:c2:44:25:2d:aa:2e:77:02:42:85:a4:92:fc:3a:b2:
79:ac:b0:df:24:18:fa:de:79:20:2b:f6:4e:a6:72:18:6a:95:
c7:37:ff:b4:56:4c:08:06:77:0b:cc:bf:0a:cb:4d:52:e4:61:
77:10:19:73:e1:72:3a:24:8a:cf:fe:cd:07:07:f1:e1:eb:9f:
2b:5f:99:24:eb:0f:87:48:c8:a1:56:b3:47:cb:ec:ab:89:0a:
4d:8e:c3:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+rLsVJjXKHi9fbwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MjAxNloXDTI1MDczMDE3MjAxNlowLzEtMCsGA1UEAxMk
NWQ1ZGQ5NzUtY2Y4NS00OTZlLThjNjItNjE1OGRiMmMyM2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5PXzz+319HCWqFLiC9pf0sCkUjjPNf/LNoR
SETf+OhuX9J0TuZTZf5Ibt8VhbBFWtVuwRr3FncZMYvaCRtp+ojXqJPH+P11TJcu
y1zLqS/Hb2QtUlsO/gVtDU5UXI4PFDnJoYwLRACZzFxGUjD1E4VjTY8yeHFWq+9j
ZiT4BBq/TOP9KQgM1e5y8YYW19/qDbeTRhTqnN3s45LtZlMCJXlLPZRuAvAKTr2M
LQNbuUod2mFCaw4bE9v0A4BLTluy4FJuIpOc6PsgNbR9tPke6sX45MJuw4xh85Bi
/ZTmhmnrVp9q0RzH4C7F3zMtWra3LkbKUfjMy0Tjk/a3wLXdXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwLMdcfhwRft2Yhc4LZ09Zx29FCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhiODMzNDYtZjFiZi0z
NDUxLTg0NmYtOTk3NDc5NTYyMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr8VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUF5Nbeh+Z2qQmYJSa2P+Byr8NI8zkY0LsEB3g8lu+hWd73OXp9bDY8
TmqE2r9DDbi6R2WGX4lpD7DlA9wicI1UvTPV/KWc31nG7QmBFniJXn1Kp+U9Pz1+
gK222AR5ss3N79NgCppGy7tQQcEZABDIrKB8qnswsorIeGf4IA0uhazsHE7aaJIW
BuD5+HdntfJeewdOb3QaVGuEg6TEhScq3s3of8JEJS2qLncCQoWkkvw6snmssN8k
GPreeSAr9k6mchhqlcc3/7RWTAgGdwvMvwrLTVLkYXcQGXPhcjokis/+zQcH8eHr
nytfmSTrD4dIyKFWs0fL7KuJCk2Ow68=
-----END CERTIFICATE-----
Generated at Thu May 15 09:03:20 2025 by rpki-client