Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c30a870-4d3d-35f2-9729-ee91cffd1159.roa
File: 5c30a870-4d3d-35f2-9729-ee91cffd1159.roa (raw, json)
Hash identifier: oiUnNXtFoOhBTQZvBqA3/oWW4NnIx+dB5p8rl7PT3tQ=
Subject key identifier: 66:2C:70:C2:75:14:FF:33:62:73:76:6C:77:10:10:92:DE:23:3F:22
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2DD6061B64DDA55A4B900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c30a870-4d3d-35f2-9729-ee91cffd1159.roa
Signing time: Thu 01 May 2025 16:32:14 +0000
ROA not before: Thu 01 May 2025 16:32:14 +0000
ROA not after: Wed 30 Jul 2025 16:32:14 +0000
asID: 22773
IP address blocks: 2600:8800:3f60::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:dd:60:61:b6:4d:da:55:a4:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:32:14 2025 GMT
Not After : Jul 30 16:32:14 2025 GMT
Subject: CN=68817145-e4d4-4b85-a259-4d0c54da6302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:5f:72:34:75:33:97:24:63:b5:be:f9:01:
89:c4:47:58:c5:92:46:50:a8:1e:2b:bf:fc:50:ae:
a7:b8:9e:f3:b2:0b:dc:a6:9f:1e:d4:2f:ec:91:86:
7f:0b:47:ed:ed:b3:c7:cd:00:0d:e8:cc:9f:79:98:
7b:f0:55:74:c2:6b:b4:06:20:69:e6:51:d3:59:51:
39:59:9a:7d:66:7f:41:87:55:1d:4d:86:6d:a8:04:
c1:09:fe:e2:e8:7d:34:a6:5b:4e:16:65:b1:a9:8d:
ea:0b:bc:fc:37:43:b9:ac:b3:20:ad:b6:2e:37:55:
5a:0d:75:15:23:a8:5f:1e:07:8a:b5:9e:2e:36:00:
a8:d0:1a:c9:5e:4a:e7:1c:0d:22:cf:e4:9d:8b:54:
83:5c:2a:96:e0:09:05:5c:e8:6e:da:25:56:47:67:
f5:c8:54:af:47:df:d2:35:a3:89:08:ca:fb:0c:23:
65:d5:ec:28:a9:d0:bc:9c:47:ab:cb:38:d5:3d:ef:
4e:21:00:66:55:38:e0:93:32:c2:15:1a:c4:a8:2d:
1a:62:bb:bb:a0:47:57:01:11:77:65:91:0a:25:1d:
62:4f:c6:f7:a7:32:e4:8a:c3:2b:43:2e:49:3a:64:
0a:bc:d0:a4:1e:36:e8:ac:88:ed:3e:42:71:ca:53:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:70:C2:75:14:FF:33:62:73:76:6C:77:10:10:92:DE:23:3F:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c30a870-4d3d-35f2-9729-ee91cffd1159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:3f60::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:69:ce:f7:bb:fe:b1:e3:80:3e:6c:36:cd:2b:76:41:20:8e:
96:a8:4b:c1:6a:e4:d9:5a:ea:66:3e:b3:7e:71:72:32:c6:b1:
8d:0a:67:35:61:80:2f:d6:6e:47:29:f3:31:e5:66:79:fc:1d:
51:69:fa:b6:8d:bc:88:53:61:6e:8b:06:e7:76:61:2f:75:eb:
d8:a8:84:07:8e:fb:19:ef:17:4e:80:b7:77:4a:2b:9f:27:11:
da:85:15:ae:f8:e2:90:70:7d:f5:51:90:58:d3:16:b3:bd:66:
3d:0d:42:df:66:84:22:63:54:c3:ec:9e:b5:c6:ea:bc:c6:0c:
17:d5:7b:c7:dc:44:44:0f:2f:02:fd:e4:f1:c4:ec:ca:f5:f3:
2e:87:1f:9c:bd:b1:6c:3f:ab:25:54:f1:fc:d3:70:bc:dd:d7:
99:25:02:07:7b:9c:96:67:3e:58:23:7a:52:1a:73:6e:72:ac:
45:95:7c:42:b2:dc:4b:03:a3:1e:6b:29:bb:3a:15:b1:77:e7:
d1:49:89:4b:14:7c:b5:71:71:f9:f0:95:8a:de:42:4d:bd:ad:
36:eb:c5:7f:6a:ae:17:1f:81:05:6e:f1:f6:35:9c:33:50:cb:
7b:e3:8b:8a:1b:c0:f4:e3:f6:00:15:ab:f1:8a:8e:4d:2e:98:
62:45:0c:1a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm14t1gYbZN2lWkuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzIxNFoXDTI1MDczMDE2MzIxNFowLzEtMCsGA1UEAxMk
Njg4MTcxNDUtZTRkNC00Yjg1LWEyNTktNGQwYzU0ZGE2MzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIBfcjR1M5ckY7W++QGJxEdYxZJGUKgeK7/8
UK6nuJ7zsgvcpp8e1C/skYZ/C0ft7bPHzQAN6MyfeZh78FV0wmu0BiBp5lHTWVE5
WZp9Zn9Bh1UdTYZtqATBCf7i6H00pltOFmWxqY3qC7z8N0O5rLMgrbYuN1VaDXUV
I6hfHgeKtZ4uNgCo0BrJXkrnHA0iz+Sdi1SDXCqW4AkFXOhu2iVWR2f1yFSvR9/S
NaOJCMr7DCNl1ewoqdC8nEeryzjVPe9OIQBmVTjgkzLCFRrEqC0aYru7oEdXARF3
ZZEKJR1iT8b3pzLkisMrQy5JOmQKvNCkHjborIjtPkJxylPL6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGYscMJ1FP8zYnN2bHcQEJLeIz8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWMzMGE4NzAtNGQzZC0z
NWYyLTk3MjktZWU5MWNmZmQxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD9g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADFpzve7/rHjgD5sNs0rdkEgjpaoS8Fq5Nla6mY+s35xcjLGsY0K
ZzVhgC/Wbkcp8zHlZnn8HVFp+raNvIhTYW6LBud2YS9169iohAeO+xnvF06At3dK
K58nEdqFFa744pBwffVRkFjTFrO9Zj0NQt9mhCJjVMPsnrXG6rzGDBfVe8fcREQP
LwL95PHE7Mr18y6HH5y9sWw/qyVU8fzTcLzd15klAgd7nJZnPlgjelIac25yrEWV
fEKy3EsDox5rKbs6FbF359FJiUsUfLVxcfnwlYreQk29rTbrxX9qrhcfgQVu8fY1
nDNQy3vji4obwPTj9gAVq/GKjk0umGJFDBo=
-----END CERTIFICATE-----
Generated at Thu May 15 02:46:40 2025 by rpki-client