Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e19833-9d09-313b-8d8d-88f1a105dc70.roa
File: 66e19833-9d09-313b-8d8d-88f1a105dc70.roa (raw, json)
Hash identifier: Vv5raBs5n7oUZVuUL99yKW5ZsbQzyBgg0JOw7lvzDKk=
Subject key identifier: B3:B4:BF:8D:BA:75:BD:E1:C2:4F:F3:59:37:C8:B1:0F:20:40:88:B1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FABEFD3F710C5EA29F0200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e19833-9d09-313b-8d8d-88f1a105dc70.roa
Signing time: Thu 01 May 2025 17:20:21 +0000
ROA not before: Thu 01 May 2025 17:20:21 +0000
ROA not after: Wed 30 Jul 2025 17:20:21 +0000
asID: 22773
IP address blocks: 72.193.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:be:fd:3f:71:0c:5e:a2:9f:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:21 2025 GMT
Not After : Jul 30 17:20:21 2025 GMT
Subject: CN=a078da9e-7d89-41f1-9a68-f76fffbacbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:f0:12:2b:79:43:c0:fd:6b:6f:4b:b6:a5:
d9:c4:ab:4e:5a:af:46:b3:f6:00:f8:6d:13:4a:d4:
8b:fe:39:b2:db:6c:c3:00:e9:63:27:d4:f8:6e:a9:
f0:bb:49:82:7b:51:1b:d0:4b:f6:ca:9a:c0:d4:07:
82:ae:dd:c1:63:2b:26:9a:29:69:35:07:cf:85:2a:
7e:c4:e7:fb:26:a2:52:a8:eb:a9:ee:cb:db:6f:1f:
dc:eb:48:cf:08:19:e9:0d:9f:3f:40:65:b0:21:7e:
35:39:f3:08:38:b8:a5:fc:41:36:14:9f:cd:bb:20:
f7:13:97:95:b4:e5:1d:48:46:2e:08:c0:0c:ea:ac:
04:6a:64:ff:e6:59:8f:e2:9d:86:d9:c5:a0:cf:e6:
4a:c5:de:d0:4b:0d:72:ef:23:d5:f6:74:13:80:35:
90:ad:17:02:87:7c:6e:71:02:66:87:cf:f9:d9:06:
4a:ef:59:89:de:d6:6c:06:8f:81:b4:76:5a:0c:08:
7d:91:03:ff:da:fc:61:b4:d5:8c:39:86:30:b2:a2:
e7:fa:fe:27:4c:50:19:c8:f9:49:17:09:a6:7d:0b:
cf:8b:5e:d8:47:2b:f1:d4:b8:f8:db:85:ff:cd:99:
a8:03:f2:1d:b3:ec:79:ce:b5:09:da:df:92:ca:6b:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:BF:8D:BA:75:BD:E1:C2:4F:F3:59:37:C8:B1:0F:20:40:88:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e19833-9d09-313b-8d8d-88f1a105dc70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.193.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:39:a1:1b:99:b1:24:69:68:77:b7:36:ce:87:db:72:fa:21:
c4:14:85:ba:eb:e2:47:54:1a:21:25:79:91:6f:c8:f5:78:56:
cb:58:ea:51:f8:13:26:a8:bd:92:09:c4:e3:52:eb:6f:4a:08:
0d:35:cc:d6:10:5d:da:06:43:6f:e7:35:3e:ca:71:47:29:88:
fb:93:e4:12:78:b1:f0:ad:7a:55:83:dd:5b:8f:f3:7e:1e:94:
98:6c:65:7c:2b:8c:f5:3a:25:6f:f1:80:a2:73:c7:1b:b9:f0:
0f:73:74:5a:40:52:96:91:e7:8e:76:3f:85:72:26:29:68:a9:
3b:a1:9b:4f:ea:89:3f:f5:a6:19:70:29:11:8d:8b:fd:e7:79:
23:9c:9c:7a:f6:e0:50:c5:9c:ec:12:a2:21:76:3f:36:64:86:
62:03:a3:09:db:01:50:8a:6c:84:65:e6:d1:10:c3:70:c3:53:
8e:0a:c0:f8:f4:7a:8f:f5:19:1b:8f:23:28:63:c1:43:1a:77:
9f:bf:6c:fc:53:bf:65:7c:3a:ea:70:96:9b:66:f6:06:11:12:
7b:02:e1:e9:8d:83:ac:d1:6e:9b:44:c9:35:ec:02:da:ca:6f:
33:61:8a:83:39:e4:f4:4f:1e:3f:d6:11:02:8f:6f:0f:94:6b:
ba:0f:d8:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+r79P3EMXqKfAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MjAyMVoXDTI1MDczMDE3MjAyMVowLzEtMCsGA1UEAxMk
YTA3OGRhOWUtN2Q4OS00MWYxLTlhNjgtZjc2ZmZmYmFjYmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gjwEit5Q8D9a29LtqXZxKtOWq9Gs/YA+G0T
StSL/jmy22zDAOljJ9T4bqnwu0mCe1Eb0Ev2yprA1AeCrt3BYysmmilpNQfPhSp+
xOf7JqJSqOup7svbbx/c60jPCBnpDZ8/QGWwIX41OfMIOLil/EE2FJ/NuyD3E5eV
tOUdSEYuCMAM6qwEamT/5lmP4p2G2cWgz+ZKxd7QSw1y7yPV9nQTgDWQrRcCh3xu
cQJmh8/52QZK71mJ3tZsBo+BtHZaDAh9kQP/2vxhtNWMOYYwsqLn+v4nTFAZyPlJ
FwmmfQvPi17YRyvx1Lj424X/zZmoA/Ids+x5zrUJ2t+SymuqsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO0v426db3hwk/zWTfIsQ8gQIixMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjZlMTk4MzMtOWQwOS0z
MTNiLThkOGQtODhmMWExMDVkYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMEmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc5oRuZsSRpaHe3Ns6H23L6IcQUhbrr4kdUGiEleZFvyPV4VstY6lH4
EyaovZIJxONS629KCA01zNYQXdoGQ2/nNT7KcUcpiPuT5BJ4sfCtelWD3VuP834e
lJhsZXwrjPU6JW/xgKJzxxu58A9zdFpAUpaR5452P4VyJiloqTuhm0/qiT/1phlw
KRGNi/3neSOcnHr24FDFnOwSoiF2PzZkhmIDownbAVCKbIRl5tEQw3DDU44KwPj0
eo/1GRuPIyhjwUMad5+/bPxTv2V8Oupwlptm9gYREnsC4emNg6zRbptEyTXsAtrK
bzNhioM55PRPHj/WEQKPbw+Ua7oP2H8=
-----END CERTIFICATE-----
Generated at Thu May 15 02:43:40 2025 by rpki-client