Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/525a7c85-2f98-3545-a786-6fc83c87a7d4.roa
File: 525a7c85-2f98-3545-a786-6fc83c87a7d4.roa (raw, json)
Hash identifier: flVzfQcXlnWRa/U62WD997HyGUGDjD+lU6tX+9WuJWc=
Subject key identifier: 66:21:C6:8E:85:E3:6A:FE:90:EB:E4:26:26:86:FF:1A:BF:84:56:1C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEC26FEC88C5FADC2DD0D0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/525a7c85-2f98-3545-a786-6fc83c87a7d4.roa
Signing time: Thu 01 May 2025 16:23:58 +0000
ROA not before: Thu 01 May 2025 16:23:58 +0000
ROA not after: Wed 30 Jul 2025 16:23:58 +0000
asID: 22773
IP address blocks: 70.172.102.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:c2:6f:ec:88:c5:fa:dc:2d:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:58 2025 GMT
Not After : Jul 30 16:23:58 2025 GMT
Subject: CN=3b1468dc-f82b-4bac-bc7e-1049d1515166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:08:6e:42:5a:5d:21:60:60:8a:e9:85:fa:
08:60:59:06:a6:1c:64:7f:50:0d:62:5f:fb:7a:de:
92:4c:36:76:53:1d:3c:cd:67:3c:22:3c:ac:74:b2:
23:20:c0:0b:f6:84:d9:4d:79:86:eb:e7:73:63:e9:
80:23:c6:14:9f:79:00:b7:14:36:45:41:fa:b0:96:
d2:e4:b4:ee:e3:0a:6d:97:b8:41:18:8e:7a:35:c1:
af:b3:62:fb:05:75:30:5c:67:4f:d2:75:e3:7d:ec:
2d:e6:6f:67:76:b8:35:23:65:ea:25:67:48:39:85:
30:03:91:58:6c:78:e1:45:ce:eb:36:8f:d6:22:05:
63:8a:a6:92:7c:32:04:7c:f5:7f:91:d6:03:0b:e4:
10:16:bb:e2:2a:7b:3b:d1:01:a5:11:2b:18:17:bd:
5e:39:7e:32:c2:da:3d:22:70:aa:b9:3d:08:d2:32:
58:6e:5c:5f:8e:5e:51:fa:38:52:b3:ac:0d:73:c1:
b8:ec:42:70:51:b1:1a:6e:e2:70:3c:eb:f3:32:32:
d4:24:a3:cc:15:5e:9e:1f:53:ab:7f:a2:30:d6:42:
8d:ec:67:8d:6a:cd:39:99:fc:62:71:c3:bc:af:83:
a2:6a:d6:c3:c2:2a:cf:50:71:86:03:6d:a0:ef:86:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:21:C6:8E:85:E3:6A:FE:90:EB:E4:26:26:86:FF:1A:BF:84:56:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/525a7c85-2f98-3545-a786-6fc83c87a7d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:df:a6:e0:a1:54:7b:72:7b:0b:ec:fc:6b:ed:bd:35:fc:2f:
26:e8:77:75:70:c0:eb:84:88:06:ce:9d:2a:cd:3a:32:59:02:
92:45:dc:6e:d8:e2:38:4d:af:2e:be:e3:f4:92:8e:c8:10:f7:
27:65:75:62:b6:00:32:67:d3:57:a5:d4:f7:27:c1:62:03:5c:
e6:1f:e7:30:20:3a:bc:09:d6:69:8a:7f:8a:f4:ca:50:fd:93:
85:a5:df:0e:4d:e0:e1:43:5c:cb:97:ec:74:8f:20:b9:2e:8f:
6c:6e:44:41:44:4e:23:6d:da:87:55:01:b9:6b:7a:3e:f8:12:
03:39:04:29:f5:65:cd:bf:c6:d8:4e:f6:d9:41:65:ea:07:fa:
ac:19:93:f6:ed:5c:af:f5:24:b6:d8:15:a7:70:9f:b8:da:e9:
bf:46:3d:40:01:e5:8b:65:8a:90:1a:2a:ca:cb:90:32:d3:64:
98:34:23:d0:c1:49:43:5d:0c:44:8f:ae:73:28:34:be:5d:f4:
29:25:c9:be:f2:63:81:92:91:82:49:49:80:f2:ad:a6:9c:05:
8f:38:14:a5:34:41:81:d6:11:9b:00:ef:a9:2b:db:a1:3d:6e:
c0:e3:cc:03:6f:86:bb:83:7c:5e:07:29:39:f8:88:1f:30:41:
4a:22:37:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13sJv7IjF+twt0NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjM1OFoXDTI1MDczMDE2MjM1OFowLzEtMCsGA1UEAxMk
M2IxNDY4ZGMtZjgyYi00YmFjLWJjN2UtMTA0OWQxNTE1MTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcIIbkJaXSFgYIrphfoIYFkGphxkf1ANYl/7
et6STDZ2Ux08zWc8IjysdLIjIMAL9oTZTXmG6+dzY+mAI8YUn3kAtxQ2RUH6sJbS
5LTu4wptl7hBGI56NcGvs2L7BXUwXGdP0nXjfewt5m9ndrg1I2XqJWdIOYUwA5FY
bHjhRc7rNo/WIgVjiqaSfDIEfPV/kdYDC+QQFrviKns70QGlESsYF71eOX4ywto9
InCquT0I0jJYblxfjl5R+jhSs6wNc8G47EJwUbEabuJwPOvzMjLUJKPMFV6eH1Or
f6Iw1kKN7GeNas05mfxiccO8r4OiatbDwirPUHGGA22g74YEVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYhxo6F42r+kOvkJiaG/xq/hFYcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI1YTdjODUtMmY5OC0z
NTQ1LWE3ODYtNmZjODNjODdhN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3fpuChVHtyewvs/GvtvTX8Lybod3VwwOuEiAbOnSrNOjJZApJF3G7Y
4jhNry6+4/SSjsgQ9ydldWK2ADJn01el1PcnwWIDXOYf5zAgOrwJ1mmKf4r0ylD9
k4Wl3w5N4OFDXMuX7HSPILkuj2xuREFETiNt2odVAblrej74EgM5BCn1Zc2/xthO
9tlBZeoH+qwZk/btXK/1JLbYFadwn7ja6b9GPUAB5YtlipAaKsrLkDLTZJg0I9DB
SUNdDESPrnMoNL5d9Cklyb7yY4GSkYJJSYDyraacBY84FKU0QYHWEZsA76kr26E9
bsDjzANvhruDfF4HKTn4iB8wQUoiNyk=
-----END CERTIFICATE-----
Generated at Thu May 15 02:21:47 2025 by rpki-client