Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64bdefa8-1c64-31d9-9d5a-e0cd5a0f7cc2.roa
File: 64bdefa8-1c64-31d9-9d5a-e0cd5a0f7cc2.roa (raw, json)
Hash identifier: xQtHo0hMyfdYBPA/dd0x2Cf0nMokY6P40frKNa6Eog8=
Subject key identifier: 9E:9D:04:68:D7:D8:D2:C5:8B:48:38:A6:D5:69:DD:25:38:2F:26:54
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E17E6F9CBA864F0AD2AE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64bdefa8-1c64-31d9-9d5a-e0cd5a0f7cc2.roa
Signing time: Thu 01 May 2025 16:29:29 +0000
ROA not before: Thu 01 May 2025 16:29:29 +0000
ROA not after: Wed 30 Jul 2025 16:29:29 +0000
asID: 22773
IP address blocks: 98.177.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:7e:6f:9c:ba:86:4f:0a:d2:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:29 2025 GMT
Not After : Jul 30 16:29:29 2025 GMT
Subject: CN=7e6a89d0-8371-40e6-9923-6d0a6fb23aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:15:9b:0f:3d:e4:83:64:b4:bd:5a:11:b8:
27:1e:3b:07:78:63:f2:e3:fe:4b:cf:0e:5f:9b:70:
f2:41:13:50:af:c1:22:0a:e1:52:7c:6c:e8:19:f4:
f8:5e:0e:40:af:99:1a:2c:27:e3:c1:d0:0a:8c:7a:
e3:9a:81:3b:76:64:fd:2e:c4:5d:cc:3d:fd:40:fb:
b9:b7:56:d0:cf:eb:2d:2d:e7:70:a2:55:9e:c7:97:
d8:e0:62:15:67:0e:df:19:a9:9e:98:a8:08:70:fa:
a0:e2:82:f1:0f:fc:6e:33:07:51:65:36:e1:58:25:
a1:73:10:37:f3:bc:c5:b5:f5:cb:4e:74:85:30:a1:
a7:56:01:f9:8b:53:4b:0c:9f:e2:e7:5b:29:48:21:
83:a8:ee:3a:4d:ab:b3:19:54:79:2b:30:09:83:40:
bf:6e:98:72:5d:e9:3b:56:ed:bf:2d:f4:53:cf:a1:
59:da:cd:b5:d6:16:a5:29:c2:2e:c9:36:a1:4d:ef:
b7:df:38:9c:49:b9:2a:52:b7:31:3f:0a:45:d0:77:
08:03:42:c0:b7:ef:88:a8:e4:10:63:4a:96:0c:b7:
c6:b7:5b:bf:6d:a2:89:f4:6d:09:4d:dc:ec:c1:99:
a7:6e:1c:ec:0f:04:ec:cb:ba:40:53:7b:45:23:f6:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:04:68:D7:D8:D2:C5:8B:48:38:A6:D5:69:DD:25:38:2F:26:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64bdefa8-1c64-31d9-9d5a-e0cd5a0f7cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.177.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:82:3c:ea:07:d0:c7:4a:40:d0:e1:4f:f9:ad:e7:31:84:35:
14:0a:a6:ec:09:a6:d3:cf:d4:0c:98:7a:4a:f8:ee:cf:cd:2a:
37:01:31:ec:92:63:66:7e:3e:0a:23:ae:bc:3d:2a:c8:a0:28:
2c:c8:bb:f6:80:80:85:cc:ca:67:5c:c5:bc:d6:b1:ff:04:a6:
2d:6e:e6:ae:7e:b9:96:77:3d:7c:41:9e:bf:54:e7:1f:3e:01:
ac:ae:10:1e:5c:ea:e4:e2:67:44:db:75:af:5d:c0:ab:af:fa:
46:6d:b2:5a:4f:bd:7a:26:9c:aa:5c:33:1b:3d:e7:79:ff:d5:
fb:0d:d2:59:6f:fa:df:14:45:31:1b:10:f9:9d:f9:45:e9:66:
0e:8f:7d:2f:ad:05:2f:e2:23:3b:ad:a2:4a:c6:e8:77:6e:0b:
62:4b:54:2c:d4:24:b5:b4:cd:a8:13:14:db:aa:46:5d:fe:a7:
90:f7:c5:50:41:54:a8:01:ae:28:bb:29:63:37:7a:1d:44:01:
8c:39:ba:41:84:1c:7a:7f:30:77:54:55:ac:be:15:bc:58:a8:
ab:40:db:c3:d3:9c:87:bf:95:44:9f:cf:33:da:c2:8e:d9:01:
9c:fa:1e:16:a0:63:62:66:c8:3a:88:92:75:06:55:de:0f:b7:
6d:07:cc:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14X5vnLqGTwrSroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjkyOVoXDTI1MDczMDE2MjkyOVowLzEtMCsGA1UEAxMk
N2U2YTg5ZDAtODM3MS00MGU2LTk5MjMtNmQwYTZmYjIzYWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp48Vmw895INktL1aEbgnHjsHeGPy4/5Lzw5f
m3DyQRNQr8EiCuFSfGzoGfT4Xg5Ar5kaLCfjwdAKjHrjmoE7dmT9LsRdzD39QPu5
t1bQz+stLedwolWex5fY4GIVZw7fGamemKgIcPqg4oLxD/xuMwdRZTbhWCWhcxA3
87zFtfXLTnSFMKGnVgH5i1NLDJ/i51spSCGDqO46TauzGVR5KzAJg0C/bphyXek7
Vu2/LfRTz6FZ2s211halKcIuyTahTe+33zicSbkqUrcxPwpF0HcIA0LAt++IqOQQ
Y0qWDLfGt1u/baKJ9G0JTdzswZmnbhzsDwTsy7pAU3tFI/blqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6dBGjX2NLFi0g4ptVp3SU4LyZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjRiZGVmYTgtMWM2NC0z
MWQ5LTlkNWEtZTBjZDVhMGY3Y2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrFZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSCPOoH0MdKQNDhT/mt5zGENRQKpuwJptPP1AyYekr47s/NKjcBMeyS
Y2Z+Pgojrrw9KsigKCzIu/aAgIXMymdcxbzWsf8Epi1u5q5+uZZ3PXxBnr9U5x8+
AayuEB5c6uTiZ0Tbda9dwKuv+kZtslpPvXomnKpcMxs953n/1fsN0llv+t8URTEb
EPmd+UXpZg6PfS+tBS/iIzutokrG6HduC2JLVCzUJLW0zagTFNuqRl3+p5D3xVBB
VKgBrii7KWM3eh1EAYw5ukGEHHp/MHdUVay+FbxYqKtA28PTnIe/lUSfzzPawo7Z
AZz6HhagY2JmyDqIknUGVd4Pt20HzL0=
-----END CERTIFICATE-----
Generated at Thu May 15 02:00:34 2025 by rpki-client