Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/696b1ff7-1cc6-3a61-b848-d7f44a8283e4.roa
File: 696b1ff7-1cc6-3a61-b848-d7f44a8283e4.roa (raw, json)
Hash identifier: 1sDPdjZbrMHMepWTPdfPd5hCfhm9eWMLxEEK1mBWTe4=
Subject key identifier: 62:E4:0F:0F:61:C5:66:D8:73:A5:C7:69:F4:CB:03:35:96:61:1D:AC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCE11C5C36C1EEFA59D880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/696b1ff7-1cc6-3a61-b848-d7f44a8283e4.roa
Signing time: Thu 01 May 2025 16:20:11 +0000
ROA not before: Thu 01 May 2025 16:20:11 +0000
ROA not after: Wed 30 Jul 2025 16:20:11 +0000
asID: 22773
IP address blocks: 24.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:e1:1c:5c:36:c1:ee:fa:59:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:11 2025 GMT
Not After : Jul 30 16:20:11 2025 GMT
Subject: CN=28c4a8cb-0200-4ad8-8775-de052673bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:95:35:be:c8:7e:46:c1:76:6d:5f:b4:27:
60:00:a1:f5:a3:a5:ba:7b:48:d0:12:43:01:24:31:
cc:77:b6:de:76:45:e9:3a:9a:cf:61:7f:fb:00:9e:
ff:0f:bf:d0:fe:dd:88:c3:d7:da:d3:3b:b0:37:67:
24:95:d2:79:cc:81:e4:99:f7:3b:04:6e:ad:ba:79:
95:61:07:72:4d:99:7d:89:ef:cf:88:f6:a3:95:4a:
74:bd:25:87:b4:26:94:f1:ae:32:39:e5:ec:41:16:
67:55:3b:55:28:ba:fd:a7:67:77:2c:8e:b5:5e:24:
a1:69:ac:7e:b0:2e:5b:8b:11:3e:41:91:1f:bc:cb:
c4:3d:71:95:29:ba:bd:60:68:c4:29:58:93:b9:98:
71:12:af:db:82:73:ca:ea:20:a7:4e:36:32:e8:66:
85:ed:7a:ce:d6:e9:81:9b:02:fa:ec:a8:a5:f9:7b:
b1:d5:37:17:f7:ef:ab:b3:d0:b6:03:03:d9:65:17:
7a:76:2f:e2:2c:44:a8:45:69:e3:5d:c9:ad:57:7a:
c4:9d:a0:6d:2f:48:1c:2e:40:91:c7:f9:20:b8:23:
0b:7f:b8:03:38:c9:26:eb:ba:06:1b:74:dd:29:85:
82:a6:b4:e7:fb:55:8a:e3:13:58:74:20:fe:90:fc:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:0F:0F:61:C5:66:D8:73:A5:C7:69:F4:CB:03:35:96:61:1D:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/696b1ff7-1cc6-3a61-b848-d7f44a8283e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:bd:ad:35:56:f4:89:e5:e3:42:72:2e:73:63:9a:a2:28:3e:
76:ad:e0:79:b9:9f:1c:f1:41:96:ae:ba:b4:36:aa:8a:65:4e:
75:f8:bc:06:7a:d1:bd:03:d9:d5:11:2e:22:68:0d:55:8b:c0:
a9:99:fd:6b:34:a3:fb:a0:21:08:ee:6a:99:6b:fc:62:b7:43:
ff:50:6d:73:b6:ef:7d:fd:7e:1f:6d:a4:62:6e:91:18:eb:ce:
88:bc:4f:a8:0d:23:48:3a:89:13:7e:23:64:49:e7:1a:a4:b0:
c3:83:3e:cd:99:11:2e:a7:27:a3:c0:78:17:cb:32:eb:d8:ca:
72:e6:2f:c2:36:4c:0e:58:ae:5b:b8:d2:fe:af:46:a8:24:03:
07:a7:8f:ad:fd:8e:95:13:bc:10:70:9c:fa:b4:5c:62:88:dc:
f8:88:75:6a:02:39:2a:26:e3:20:51:9d:6d:5a:9b:18:fe:52:
5d:ea:d9:99:9d:0d:bb:3e:d8:a0:5c:0d:10:8f:f3:75:20:90:
eb:f3:05:4a:32:d3:0a:45:1f:51:19:81:26:8b:a0:f8:bd:3d:
52:33:f6:3f:d5:bd:92:00:0e:03:da:90:ca:c0:62:83:cd:bf:
9a:a1:fe:15:58:18:dd:d4:6d:61:c2:1e:99:9d:fe:5b:32:a7:
7a:e1:13:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13OEcXDbB7vpZ2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjAxMVoXDTI1MDczMDE2MjAxMVowLzEtMCsGA1UEAxMk
MjhjNGE4Y2ItMDIwMC00YWQ4LTg3NzUtZGUwNTI2NzNiZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEuVNb7IfkbBdm1ftCdgAKH1o6W6e0jQEkMB
JDHMd7bedkXpOprPYX/7AJ7/D7/Q/t2Iw9fa0zuwN2ckldJ5zIHkmfc7BG6tunmV
YQdyTZl9ie/PiPajlUp0vSWHtCaU8a4yOeXsQRZnVTtVKLr9p2d3LI61XiShaax+
sC5bixE+QZEfvMvEPXGVKbq9YGjEKViTuZhxEq/bgnPK6iCnTjYy6GaF7XrO1umB
mwL67Kil+Xux1TcX9++rs9C2AwPZZRd6di/iLESoRWnjXcmtV3rEnaBtL0gcLkCR
x/kguCMLf7gDOMkm67oGG3TdKYWCprTn+1WK4xNYdCD+kPx7/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGLkDw9hxWbYc6XHafTLAzWWYR2sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjk2YjFmZjctMWNjNi0z
YTYxLWI4NDgtZDdmNDRhODI4M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPv5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKa9rTVW9Inl40JyLnNjmqIoPnat4Hm5nxzxQZauurQ2qoplTnX4vAZ6
0b0D2dURLiJoDVWLwKmZ/Ws0o/ugIQjuaplr/GK3Q/9QbXO27339fh9tpGJukRjr
zoi8T6gNI0g6iRN+I2RJ5xqksMODPs2ZES6nJ6PAeBfLMuvYynLmL8I2TA5Yrlu4
0v6vRqgkAwenj639jpUTvBBwnPq0XGKI3PiIdWoCOSom4yBRnW1amxj+Ul3q2Zmd
Dbs+2KBcDRCP83UgkOvzBUoy0wpFH1EZgSaLoPi9PVIz9j/VvZIADgPakMrAYoPN
v5qh/hVYGN3UbWHCHpmd/lsyp3rhEx8=
-----END CERTIFICATE-----
Generated at Thu May 15 01:28:01 2025 by rpki-client