Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4eaefe9e-a928-3dc3-96ef-a5743e6ba807.roa
File: 4eaefe9e-a928-3dc3-96ef-a5743e6ba807.roa (raw, json)
Hash identifier: WnOQ01HsiasVuz94Y02zc5O3FpDlnDyIx4e1/OaScd8=
Subject key identifier: E2:74:A1:77:DB:A3:D4:C6:72:E8:C3:61:99:C2:DB:7A:4A:55:BD:34
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCDB4DEDB3587BAF1704C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4eaefe9e-a928-3dc3-96ef-a5743e6ba807.roa
Signing time: Thu 01 May 2025 16:20:08 +0000
ROA not before: Thu 01 May 2025 16:20:08 +0000
ROA not after: Wed 30 Jul 2025 16:20:08 +0000
asID: 22773
IP address blocks: 24.251.208.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:db:4d:ed:b3:58:7b:af:17:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:08 2025 GMT
Not After : Jul 30 16:20:08 2025 GMT
Subject: CN=c68592d7-f33e-4437-99b3-42c0b260156a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:04:19:2c:1b:96:a2:23:1a:7b:e2:3d:2b:
ff:2d:63:54:ac:05:89:33:ec:68:2d:14:9c:b3:a4:
2e:53:9a:92:b0:10:e1:4d:82:a8:4d:e1:c2:c1:01:
fe:ed:ce:b8:da:18:64:56:48:7f:7b:c7:d9:8b:a2:
22:13:f5:d1:5b:c1:06:64:a1:c4:78:8d:ac:32:ac:
46:40:b5:aa:8c:10:e9:90:da:95:c1:8c:85:35:4b:
05:8f:19:da:22:b8:e0:0d:61:b9:5e:32:2e:2e:89:
11:50:80:13:37:1d:4a:c6:bc:d5:78:f8:9e:3c:f5:
3b:28:65:85:ca:1b:b4:48:f5:74:57:be:57:df:d9:
a9:21:07:d4:0e:75:9d:d3:e4:04:7f:50:71:51:6b:
d5:7f:3e:9f:5c:f3:f5:3b:7b:fa:6a:df:6b:59:74:
b4:08:df:d0:f7:56:92:cf:4c:ab:b8:57:e1:44:ff:
0f:8a:78:13:90:2e:ae:3e:b9:d2:47:c9:8d:80:e8:
60:d9:3d:36:4e:ad:3b:2a:00:27:8c:2b:2c:34:dd:
bd:c8:4f:de:03:ef:ca:4e:f8:20:fb:2b:66:8b:ae:
9f:3d:4d:bf:13:0b:43:63:87:27:2c:cb:54:69:c4:
9f:a8:b2:2e:71:60:d5:f6:47:24:b8:b0:71:19:4e:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:A1:77:DB:A3:D4:C6:72:E8:C3:61:99:C2:DB:7A:4A:55:BD:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4eaefe9e-a928-3dc3-96ef-a5743e6ba807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8a:95:ab:d3:9f:ad:1b:1c:62:8d:a0:8f:9b:9c:05:24:5b:
92:42:b3:9b:08:c9:01:4f:8f:e5:20:8d:25:3e:0f:1b:cb:d7:
3d:2b:af:9f:7c:f1:8b:c7:23:aa:a1:1d:75:08:71:5a:3f:8e:
4b:93:18:eb:65:88:fa:e3:5c:bd:22:44:7c:81:f2:3a:e6:9f:
09:51:1f:81:ee:62:e7:5c:89:25:fc:0e:ec:90:31:55:49:9e:
ad:8b:9d:e5:ab:86:50:fe:ec:29:c4:64:40:59:dc:cb:42:e6:
0e:1e:91:c3:65:2f:9b:8a:31:57:f9:d0:58:de:90:f5:e1:81:
e7:aa:db:4d:49:34:ee:3d:61:ec:6a:24:ee:bd:40:96:e6:79:
35:ff:84:91:d8:1b:73:ad:59:11:0a:94:4d:00:b3:5f:42:d2:
93:77:d4:3a:5e:26:1c:11:84:5d:e5:c8:ba:aa:07:97:d7:88:
f5:af:fd:6f:c7:eb:57:56:35:6c:4b:1d:bb:b2:6e:f4:76:8f:
6b:e3:4c:84:28:6e:e0:dd:a3:f8:b1:33:ce:09:85:c3:08:2c:
ed:d7:3f:a4:7d:19:d0:08:7f:58:1c:0d:bb:d1:2c:bf:4f:55:
10:43:01:df:34:51:0f:e7:f3:5d:c2:f7:d1:27:e9:1f:b2:98:
0e:a1:29:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13NtN7bNYe68XBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjAwOFoXDTI1MDczMDE2MjAwOFowLzEtMCsGA1UEAxMk
YzY4NTkyZDctZjMzZS00NDM3LTk5YjMtNDJjMGIyNjAxNTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrMEGSwblqIjGnviPSv/LWNUrAWJM+xoLRSc
s6QuU5qSsBDhTYKoTeHCwQH+7c642hhkVkh/e8fZi6IiE/XRW8EGZKHEeI2sMqxG
QLWqjBDpkNqVwYyFNUsFjxnaIrjgDWG5XjIuLokRUIATNx1KxrzVePiePPU7KGWF
yhu0SPV0V75X39mpIQfUDnWd0+QEf1BxUWvVfz6fXPP1O3v6at9rWXS0CN/Q91aS
z0yruFfhRP8PingTkC6uPrnSR8mNgOhg2T02Tq07KgAnjCssNN29yE/eA+/KTvgg
+ytmi66fPU2/EwtDY4cnLMtUacSfqLIucWDV9kckuLBxGU7UVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJ0oXfbo9TGcujDYZnC23pKVb00MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGVhZWZlOWUtYTkyOC0z
ZGMzLTk2ZWYtYTU3NDNlNmJhODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGKlavTn60bHGKNoI+bnAUkW5JCs5sIyQFPj+UgjSU+DxvL1z0rr598
8YvHI6qhHXUIcVo/jkuTGOtliPrjXL0iRHyB8jrmnwlRH4HuYudciSX8DuyQMVVJ
nq2LneWrhlD+7CnEZEBZ3MtC5g4ekcNlL5uKMVf50FjekPXhgeeq201JNO49Yexq
JO69QJbmeTX/hJHYG3OtWREKlE0As19C0pN31DpeJhwRhF3lyLqqB5fXiPWv/W/H
61dWNWxLHbuybvR2j2vjTIQobuDdo/ixM84JhcMILO3XP6R9GdAIf1gcDbvRLL9P
VRBDAd80UQ/n813C99En6R+ymA6hKaE=
-----END CERTIFICATE-----
Generated at Thu May 15 01:15:36 2025 by rpki-client