Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38eae95f-4833-358f-bc08-f2b6e4214d54.roa
File: 38eae95f-4833-358f-bc08-f2b6e4214d54.roa (raw, json)
Hash identifier: 8Rp1gy32GePIsri504aZI6cBCzCSdSKEvyJ1skybD/0=
Subject key identifier: 32:F7:7F:6C:66:05:2F:87:A5:1E:66:43:71:B7:36:34:B9:9C:9A:03
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0A928D1D41D3AA356F880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38eae95f-4833-358f-bc08-f2b6e4214d54.roa
Signing time: Thu 01 May 2025 16:27:48 +0000
ROA not before: Thu 01 May 2025 16:27:48 +0000
ROA not after: Wed 30 Jul 2025 16:27:48 +0000
asID: 22773
IP address blocks: 72.221.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:a9:28:d1:d4:1d:3a:a3:56:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:48 2025 GMT
Not After : Jul 30 16:27:48 2025 GMT
Subject: CN=92a87ed0-293e-4e77-a424-08247700e5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:b2:d1:90:1d:86:60:d3:ee:53:fd:e9:06:
2f:f9:67:27:e5:01:8d:73:7d:e0:bc:c6:43:44:4d:
fd:ff:ef:50:18:dc:16:18:90:c1:3d:17:0f:34:9d:
9c:fd:5f:10:6e:3d:0e:ec:7e:b7:f0:d1:5c:15:dd:
8c:3d:1c:96:b0:3c:fa:a3:7d:d3:be:6b:bf:50:e9:
a0:b6:d4:28:92:68:94:7a:a8:d2:d1:14:45:34:8b:
bb:8f:30:42:27:23:53:a3:66:81:a7:0e:f2:f4:19:
39:13:9a:a5:fb:82:d0:8c:33:ed:89:d6:84:56:df:
29:87:e7:fb:c2:d0:8d:9c:c5:56:e4:66:f8:27:10:
e5:10:e0:22:00:b9:12:78:ed:6f:67:fe:97:cd:ea:
51:62:dd:34:f8:14:a3:b6:cb:22:2f:42:49:3f:86:
0d:55:ef:98:57:3e:64:2d:ea:ac:d2:d2:99:72:da:
18:45:a1:ca:25:ba:50:71:dd:e7:09:b9:7a:09:0e:
55:0e:75:14:02:fe:c6:b7:02:5e:11:1b:8e:57:93:
d6:20:d7:04:ca:45:96:27:ed:ed:ca:c1:9e:48:9f:
5e:a0:e6:07:91:48:f6:9e:ee:48:54:80:4f:40:f8:
69:df:3f:f5:21:0f:b1:91:c6:01:f9:b7:56:aa:73:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:7F:6C:66:05:2F:87:A5:1E:66:43:71:B7:36:34:B9:9C:9A:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38eae95f-4833-358f-bc08-f2b6e4214d54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.221.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:25:f6:14:ee:b5:91:95:28:b5:84:fb:2c:46:32:e3:d7:d4:
8a:f2:2d:2f:4c:ec:37:80:78:83:d1:eb:43:52:be:34:0c:39:
8e:cc:07:9a:55:c3:83:d4:3d:39:24:d6:62:77:49:70:99:c2:
c9:ff:82:a8:d1:b2:8b:8f:60:ae:5a:9f:75:a5:e3:7e:4d:a0:
bd:41:35:2c:44:44:71:8c:79:d1:2e:db:ac:8f:90:cf:01:2d:
a0:2c:b6:0e:55:5e:48:bd:2e:c2:c2:ae:4b:45:b4:3b:b2:5c:
55:ae:d1:2e:0a:3f:61:3e:15:d4:16:54:8e:f8:a2:0d:8d:b0:
a4:63:ee:55:67:ad:a6:a9:ce:af:b9:cb:6d:ad:71:6e:9f:45:
78:7e:97:1a:9b:3a:43:3a:07:bb:36:ae:8a:55:29:53:bd:20:
60:08:70:4b:87:f9:55:05:64:48:68:f0:15:6c:82:ee:49:cf:
3d:62:02:08:1f:4b:11:50:c8:2b:4f:71:99:3e:25:97:d3:e3:
32:9a:56:ee:a7:0a:6c:cf:bf:cc:e9:21:77:e2:c5:93:30:93:
30:68:88:dd:75:73:63:f6:e5:e0:c1:a7:6b:45:1b:c1:84:87:
96:4c:3c:6e:a9:0d:04:59:ea:98:e0:fa:4e:7b:40:0e:60:2b:
e3:b7:6b:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14Kko0dQdOqNW+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2Mjc0OFoXDTI1MDczMDE2Mjc0OFowLzEtMCsGA1UEAxMk
OTJhODdlZDAtMjkzZS00ZTc3LWE0MjQtMDgyNDc3MDBlNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Sy0ZAdhmDT7lP96QYv+Wcn5QGNc33gvMZD
RE39/+9QGNwWGJDBPRcPNJ2c/V8Qbj0O7H638NFcFd2MPRyWsDz6o33Tvmu/UOmg
ttQokmiUeqjS0RRFNIu7jzBCJyNTo2aBpw7y9Bk5E5ql+4LQjDPtidaEVt8ph+f7
wtCNnMVW5Gb4JxDlEOAiALkSeO1vZ/6XzepRYt00+BSjtssiL0JJP4YNVe+YVz5k
Leqs0tKZctoYRaHKJbpQcd3nCbl6CQ5VDnUUAv7GtwJeERuOV5PWINcEykWWJ+3t
ysGeSJ9eoOYHkUj2nu5IVIBPQPhp3z/1IQ+xkcYB+bdWqnMbpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDL3f2xmBS+HpR5mQ3G3NjS5nJoDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhlYWU5NWYtNDgzMy0z
NThmLWJjMDgtZjJiNmU0MjE0ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0l9hTutZGVKLWE+yxGMuPX1IryLS9M7DeAeIPR60NSvjQMOY7MB5pV
w4PUPTkk1mJ3SXCZwsn/gqjRsouPYK5an3Wl435NoL1BNSxERHGMedEu26yPkM8B
LaAstg5VXki9LsLCrktFtDuyXFWu0S4KP2E+FdQWVI74og2NsKRj7lVnraapzq+5
y22tcW6fRXh+lxqbOkM6B7s2ropVKVO9IGAIcEuH+VUFZEho8BVsgu5Jzz1iAggf
SxFQyCtPcZk+JZfT4zKaVu6nCmzPv8zpIXfixZMwkzBoiN11c2P25eDBp2tFG8GE
h5ZMPG6pDQRZ6pjg+k57QA5gK+O3a30=
-----END CERTIFICATE-----
Generated at Thu May 15 04:58:51 2025 by rpki-client