Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72a2d4ef-50ec-3747-a57c-c1a8f61c651a.roa
File: 72a2d4ef-50ec-3747-a57c-c1a8f61c651a.roa (raw, json)
Hash identifier: bfUsxgxQtm4Hbj0zG08vltKmdVRRLXs7D41qF29q5Po=
Subject key identifier: 25:B1:7D:87:D3:64:65:F5:DB:73:FE:2B:2C:6E:6E:6C:A5:8D:B2:FE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE83ADB37E71FD9956FCC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72a2d4ef-50ec-3747-a57c-c1a8f61c651a.roa
Signing time: Thu 01 May 2025 16:23:28 +0000
ROA not before: Thu 01 May 2025 16:23:28 +0000
ROA not after: Wed 30 Jul 2025 16:23:28 +0000
asID: 22773
IP address blocks: 70.162.182.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:83:ad:b3:7e:71:fd:99:56:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:28 2025 GMT
Not After : Jul 30 16:23:28 2025 GMT
Subject: CN=84ba172d-3ab9-48e5-957b-ac3c7d118219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:9a:21:71:41:b7:fc:a4:85:b2:b6:d9:36:
5e:f4:cf:1e:47:3c:f5:01:4f:db:71:4f:fc:72:a4:
03:a6:fa:d1:33:99:d9:ab:bd:98:31:73:d4:72:f4:
ff:17:1b:c3:28:ab:7b:f3:62:03:6c:0c:bc:71:90:
3a:df:2d:cf:a1:8a:33:d3:03:4b:5d:d2:2a:05:33:
3a:e2:ce:04:96:66:9f:b4:a8:8a:86:e5:25:81:3f:
3b:13:6c:1a:91:04:91:f4:94:c6:28:83:9f:20:ea:
0e:ba:bd:94:a6:46:a4:84:1d:dd:29:d8:fd:29:d5:
25:9a:7d:23:a6:68:ed:3b:0b:d2:76:e0:35:8c:b8:
28:2d:53:17:87:b9:5b:d5:95:82:04:05:b4:0c:56:
12:90:8c:73:43:06:0f:db:b0:57:62:2f:d2:80:31:
31:cf:ec:9e:f1:71:00:8e:32:14:4b:e7:c7:50:20:
e0:08:4e:6f:1f:9b:eb:a8:fc:51:ed:13:2d:73:0d:
b0:ed:86:5a:e3:61:0c:19:a1:c1:59:50:51:50:54:
8e:af:1b:ef:b5:16:d2:d7:68:4d:71:cd:18:08:67:
91:d9:ce:c7:b3:a4:a6:38:94:09:61:de:c7:dc:a9:
b3:32:eb:25:fb:2d:d8:86:5f:31:c6:2a:b5:d2:89:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B1:7D:87:D3:64:65:F5:DB:73:FE:2B:2C:6E:6E:6C:A5:8D:B2:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72a2d4ef-50ec-3747-a57c-c1a8f61c651a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.162.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:04:5f:7c:01:cf:8e:9f:b8:d7:be:dd:c8:78:01:6b:93:6e:
e0:57:2d:09:5e:8f:96:f4:64:78:b9:cc:c9:03:c3:de:a7:12:
96:ac:99:40:10:73:a2:5d:9c:f1:f8:46:04:7c:77:7a:88:a6:
18:1d:ff:d2:73:2a:01:52:f0:a2:ee:76:a4:c4:51:67:e2:e0:
a7:4c:e6:d2:a8:ae:b8:85:8d:5e:ee:54:5f:38:b5:ca:16:81:
0b:b7:98:0e:e7:24:ec:a4:38:e4:da:f4:f2:7f:f3:ff:a3:92:
fb:8f:23:c5:e1:db:2c:62:96:78:b6:17:d5:5e:34:9e:a4:5f:
e7:2e:ec:a8:fe:4b:23:22:ab:e4:25:32:75:73:a5:16:18:b8:
f7:de:9d:a0:cf:c4:b0:6a:54:29:8b:cd:54:63:42:d0:5e:a9:
70:61:a4:b3:cd:63:df:6b:a8:e1:72:2e:06:84:50:a2:ce:ee:
ff:bb:44:e8:4e:01:4a:c2:6b:22:3d:cd:e0:c9:b6:f9:7f:8e:
22:92:0e:90:fd:75:e7:e0:3a:e7:9a:cc:e7:16:d3:17:40:45:
d2:ba:18:76:4b:a1:35:c4:7d:e0:47:cd:7c:fe:dc:7b:71:fb:
95:e1:a3:03:3d:12:2b:fa:32:4b:06:1e:48:43:87:33:f6:c3:
f9:26:46:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13oOts35x/ZlW/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjMyOFoXDTI1MDczMDE2MjMyOFowLzEtMCsGA1UEAxMk
ODRiYTE3MmQtM2FiOS00OGU1LTk1N2ItYWMzYzdkMTE4MjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe2aIXFBt/ykhbK22TZe9M8eRzz1AU/bcU/8
cqQDpvrRM5nZq72YMXPUcvT/FxvDKKt782IDbAy8cZA63y3PoYoz0wNLXdIqBTM6
4s4ElmaftKiKhuUlgT87E2wakQSR9JTGKIOfIOoOur2UpkakhB3dKdj9KdUlmn0j
pmjtOwvSduA1jLgoLVMXh7lb1ZWCBAW0DFYSkIxzQwYP27BXYi/SgDExz+ye8XEA
jjIUS+fHUCDgCE5vH5vrqPxR7RMtcw2w7YZa42EMGaHBWVBRUFSOrxvvtRbS12hN
cc0YCGeR2c7Hs6SmOJQJYd7H3KmzMusl+y3Yhl8xxiq10ol/WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWxfYfTZGX123P+KyxubmyljbL+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzJhMmQ0ZWYtNTBlYy0z
NzQ3LWE1N2MtYzFhOGY2MWM2NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqK2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMEX3wBz46fuNe+3ch4AWuTbuBXLQlej5b0ZHi5zMkDw96nEpasmUAQ
c6JdnPH4RgR8d3qIphgd/9JzKgFS8KLudqTEUWfi4KdM5tKorriFjV7uVF84tcoW
gQu3mA7nJOykOOTa9PJ/8/+jkvuPI8Xh2yxilni2F9VeNJ6kX+cu7Kj+SyMiq+Ql
MnVzpRYYuPfenaDPxLBqVCmLzVRjQtBeqXBhpLPNY99rqOFyLgaEUKLO7v+7ROhO
AUrCayI9zeDJtvl/jiKSDpD9defgOueazOcW0xdARdK6GHZLoTXEfeBHzXz+3Htx
+5XhowM9Eiv6MksGHkhDhzP2w/kmRvY=
-----END CERTIFICATE-----
Generated at Thu May 15 01:11:14 2025 by rpki-client