Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b8e7880-4f82-333e-b519-f94d76af3d22.roa
File: 7b8e7880-4f82-333e-b519-f94d76af3d22.roa (raw, json)
Hash identifier: Y1HsbO6aXQJ/cxXCqf2jLEQmKKVbpt6rx6uW4PioybY=
Subject key identifier: 62:CA:63:AF:DE:58:18:AC:CE:ED:0B:F1:E0:75:40:9F:2A:F4:9F:97
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE470DE66585077ABA1680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b8e7880-4f82-333e-b519-f94d76af3d22.roa
Signing time: Thu 01 May 2025 16:23:00 +0000
ROA not before: Thu 01 May 2025 16:23:00 +0000
ROA not after: Wed 30 Jul 2025 16:23:00 +0000
asID: 22773
IP address blocks: 68.231.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:47:0d:e6:65:85:07:7a:ba:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:00 2025 GMT
Not After : Jul 30 16:23:00 2025 GMT
Subject: CN=651d8b4d-24bc-44ac-8a7d-3173a38d09af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:ac:67:02:99:a7:50:d7:3e:f7:58:4d:ea:
01:9e:57:35:4a:44:49:db:7e:d4:1f:b4:67:d1:fb:
5f:18:7f:c3:ca:fc:e8:e1:81:bc:9a:ee:0a:63:33:
72:71:48:36:9f:67:53:8d:d6:4a:9c:57:b6:f0:47:
17:03:75:c5:b0:f6:2b:63:97:2c:d4:94:41:2f:cd:
81:b2:e0:eb:75:6f:38:e8:53:ae:aa:90:f4:cf:6d:
15:52:9d:d2:79:fb:2d:14:18:d3:48:cf:4c:1e:f1:
38:46:3d:1b:da:c7:5b:e1:cd:11:f3:29:5a:e8:22:
8d:73:7b:78:54:3f:50:46:0f:0f:91:e5:31:df:f7:
a2:2d:19:b7:89:f6:c0:3f:2e:94:b5:1b:33:7b:c0:
7c:de:1e:e6:2e:6b:8c:2c:2a:b9:cf:c8:08:66:1b:
df:54:00:91:4f:d7:9f:4d:21:be:3a:d6:9d:96:38:
4d:40:ed:1e:33:fd:f7:44:41:e7:00:8c:3a:07:b2:
c0:82:9e:23:ed:fc:df:af:20:17:66:af:77:5e:ba:
c3:68:96:b2:e7:11:02:31:57:f2:13:d3:75:ef:38:
a2:db:28:be:cf:51:ae:52:8a:f2:a8:c9:1b:84:26:
d1:99:b7:45:13:15:30:b3:f9:a8:22:88:54:af:10:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:63:AF:DE:58:18:AC:CE:ED:0B:F1:E0:75:40:9F:2A:F4:9F:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b8e7880-4f82-333e-b519-f94d76af3d22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:25:e7:64:86:c8:16:63:07:96:a9:5b:78:2b:1b:d3:57:a7:
d6:6d:02:0d:c8:aa:9f:f1:43:19:e4:ce:07:4b:5b:98:57:98:
aa:4d:aa:68:8d:70:ca:90:6e:58:63:de:af:4b:11:1c:a5:34:
c7:ff:3b:a3:19:d0:81:2f:e1:cb:5e:34:0a:8f:60:32:c9:63:
79:99:8a:f2:07:5a:16:73:d5:39:4f:80:da:18:ce:f0:0e:40:
45:a6:eb:74:19:87:5d:46:52:89:17:83:63:7e:7b:fd:78:c4:
2d:34:dd:2f:44:6a:4c:4e:8c:21:08:eb:d1:d1:81:4e:ba:d3:
de:a8:6d:31:1b:f4:da:14:6c:14:21:c7:bd:23:57:d7:8d:7d:
3b:57:26:14:f3:3a:19:e8:e6:3b:82:de:10:c0:7c:20:ad:dd:
91:22:79:e4:9a:2c:f3:e6:bb:7a:56:ba:cc:8b:0b:5b:8e:a2:
57:4e:22:00:66:5e:ce:20:80:47:08:a7:d0:76:42:14:d8:63:
fa:37:f1:2e:70:3e:19:e4:7a:da:c7:0e:a2:99:d3:0e:04:cc:
46:c4:64:87:31:f2:1e:31:80:0b:95:75:d0:d1:35:72:86:bb:
e0:b5:b5:91:9f:ac:ae:5e:f2:a5:9d:2d:95:e7:e0:81:ca:f3:
66:b3:a2:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13kcN5mWFB3q6FoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjMwMFoXDTI1MDczMDE2MjMwMFowLzEtMCsGA1UEAxMk
NjUxZDhiNGQtMjRiYy00NGFjLThhN2QtMzE3M2EzOGQwOWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ2sZwKZp1DXPvdYTeoBnlc1SkRJ237UH7Rn
0ftfGH/Dyvzo4YG8mu4KYzNycUg2n2dTjdZKnFe28EcXA3XFsPYrY5cs1JRBL82B
suDrdW846FOuqpD0z20VUp3SefstFBjTSM9MHvE4Rj0b2sdb4c0R8yla6CKNc3t4
VD9QRg8PkeUx3/eiLRm3ifbAPy6UtRsze8B83h7mLmuMLCq5z8gIZhvfVACRT9ef
TSG+OtadljhNQO0eM/33REHnAIw6B7LAgp4j7fzfryAXZq93XrrDaJay5xECMVfy
E9N17zii2yi+z1GuUoryqMkbhCbRmbdFExUws/moIohUrxC/3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGLKY6/eWBiszu0L8eB1QJ8q9J+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2I4ZTc4ODAtNGY4Mi0z
MzNlLWI1MTktZjk0ZDc2YWYzZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROdbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYl52SGyBZjB5apW3grG9NXp9ZtAg3Iqp/xQxnkzgdLW5hXmKpNqmiN
cMqQblhj3q9LERylNMf/O6MZ0IEv4cteNAqPYDLJY3mZivIHWhZz1TlPgNoYzvAO
QEWm63QZh11GUokXg2N+e/14xC003S9EakxOjCEI69HRgU66096obTEb9NoUbBQh
x70jV9eNfTtXJhTzOhno5juC3hDAfCCt3ZEieeSaLPPmu3pWusyLC1uOoldOIgBm
Xs4ggEcIp9B2QhTYY/o38S5wPhnketrHDqKZ0w4EzEbEZIcx8h4xgAuVddDRNXKG
u+C1tZGfrK5e8qWdLZXn4IHK82azotg=
-----END CERTIFICATE-----
Generated at Thu May 15 02:21:11 2025 by rpki-client