Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e8a0c66-f7dd-3606-b9be-c3ce989d0d38.roa
File: 8e8a0c66-f7dd-3606-b9be-c3ce989d0d38.roa (raw, json)
Hash identifier: wS+UUexshAIRnDWP8y8RHFEoSXrzCcXWKm8RPAhKIOA=
Subject key identifier: BE:74:11:E9:BE:96:AA:08:CC:6B:FC:9D:86:68:61:DE:53:87:5E:1C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE5A61A204B9C6F0624C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e8a0c66-f7dd-3606-b9be-c3ce989d0d38.roa
Signing time: Thu 01 May 2025 16:23:09 +0000
ROA not before: Thu 01 May 2025 16:23:09 +0000
ROA not after: Wed 30 Jul 2025 16:23:09 +0000
asID: 22773
IP address blocks: 68.231.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:5a:61:a2:04:b9:c6:f0:62:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:09 2025 GMT
Not After : Jul 30 16:23:09 2025 GMT
Subject: CN=dd8db74f-ffaf-4a6c-b418-d4ffaee866f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:72:5e:de:7b:d8:72:89:14:b6:cb:1c:01:
7d:41:b7:a1:43:1d:20:8a:c9:d1:7b:ee:fb:75:9d:
36:51:69:d4:01:43:68:64:b0:41:54:cd:29:9d:25:
8f:fa:64:88:7f:9f:a2:ec:cb:4c:c6:1f:1e:c2:4c:
c7:cd:00:2d:f4:78:68:2a:be:89:ed:8c:ce:f0:93:
9c:67:c4:16:c4:17:26:4e:4a:d2:f0:38:bb:63:11:
ec:b8:f8:20:70:85:51:fc:d0:80:cb:08:4c:8e:e2:
43:0a:53:7b:21:c3:98:60:82:65:7e:ec:db:05:34:
b9:4e:35:3b:e0:ce:88:c8:9a:db:f8:8f:4a:b8:03:
4f:e6:07:12:1a:ae:82:e5:12:77:a3:bd:be:86:11:
9c:ef:fc:ff:99:84:10:ee:4b:95:f3:9d:60:3b:9b:
24:61:4d:f8:7e:6c:c5:e7:50:14:d2:65:a3:00:2f:
7e:8c:2f:67:40:08:70:a2:32:f9:9c:bf:cc:1e:c2:
66:7c:13:89:08:74:92:8a:61:e4:32:e3:64:9c:ef:
54:74:af:fb:76:06:43:99:47:71:75:d9:c1:21:22:
9d:a2:25:a6:00:45:fc:c7:de:25:c7:d5:1e:1b:97:
23:0c:8a:cd:c4:ab:d6:14:ae:7b:8c:e5:c2:41:b6:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:11:E9:BE:96:AA:08:CC:6B:FC:9D:86:68:61:DE:53:87:5E:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e8a0c66-f7dd-3606-b9be-c3ce989d0d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:70:bf:85:4c:97:de:d1:c4:6a:99:9d:37:58:ab:43:e2:ab:
b3:1d:1a:a2:3c:12:b9:43:78:0b:ee:df:59:ad:d2:a9:99:40:
3c:69:cd:d5:ec:5e:01:86:ef:ca:bf:91:46:18:a9:76:78:05:
71:ba:0d:aa:06:18:8d:b7:32:0a:88:53:0d:84:51:55:95:18:
c2:f8:47:f1:a5:a4:b5:da:aa:03:3d:d4:98:b0:2d:fa:d1:7e:
6a:57:15:79:8b:a2:f2:b7:02:0d:90:17:4e:ed:15:d6:22:ae:
f9:05:73:1c:1f:a5:d8:07:a7:ad:e1:51:42:f3:c2:14:3b:b4:
7b:51:9e:1c:36:94:a1:30:c7:01:7b:33:3b:15:5c:f2:7a:53:
bf:52:ae:d3:f8:37:83:83:75:9f:60:49:d4:02:ec:6f:ad:f2:
91:00:e6:c2:67:a2:6e:5c:90:51:df:6f:9c:c9:3f:7a:65:22:
a0:af:27:87:6e:4c:c8:79:7f:ee:a8:e7:97:53:ad:c1:0e:94:
08:7e:28:44:19:96:f6:c7:5d:ab:6d:e4:95:07:37:38:98:8a:
d2:b2:84:c5:93:bd:94:94:58:de:56:0f:de:ad:37:4a:0a:c7:
41:df:f8:81:e2:60:d4:8f:9b:29:67:c3:a2:d2:b0:f1:02:8d:
c4:af:91:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13lphogS5xvBiTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjMwOVoXDTI1MDczMDE2MjMwOVowLzEtMCsGA1UEAxMk
ZGQ4ZGI3NGYtZmZhZi00YTZjLWI0MTgtZDRmZmFlZTg2NmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYZyXt572HKJFLbLHAF9QbehQx0gisnRe+77
dZ02UWnUAUNoZLBBVM0pnSWP+mSIf5+i7MtMxh8ewkzHzQAt9HhoKr6J7YzO8JOc
Z8QWxBcmTkrS8Di7YxHsuPggcIVR/NCAywhMjuJDClN7IcOYYIJlfuzbBTS5TjU7
4M6IyJrb+I9KuANP5gcSGq6C5RJ3o72+hhGc7/z/mYQQ7kuV851gO5skYU34fmzF
51AU0mWjAC9+jC9nQAhwojL5nL/MHsJmfBOJCHSSimHkMuNknO9UdK/7dgZDmUdx
ddnBISKdoiWmAEX8x94lx9UeG5cjDIrNxKvWFK57jOXCQbZmAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL50Eem+lqoIzGv8nYZoYd5Th14cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGU4YTBjNjYtZjdkZC0z
NjA2LWI5YmUtYzNjZTk4OWQwZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROe0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVwv4VMl97RxGqZnTdYq0Piq7MdGqI8ErlDeAvu31mt0qmZQDxpzdXs
XgGG78q/kUYYqXZ4BXG6DaoGGI23MgqIUw2EUVWVGML4R/GlpLXaqgM91JiwLfrR
fmpXFXmLovK3Ag2QF07tFdYirvkFcxwfpdgHp63hUULzwhQ7tHtRnhw2lKEwxwF7
MzsVXPJ6U79SrtP4N4ODdZ9gSdQC7G+t8pEA5sJnom5ckFHfb5zJP3plIqCvJ4du
TMh5f+6o55dTrcEOlAh+KEQZlvbHXatt5JUHNziYitKyhMWTvZSUWN5WD96tN0oK
x0Hf+IHiYNSPmylnw6LSsPECjcSvkYU=
-----END CERTIFICATE-----
Generated at Thu May 15 01:25:45 2025 by rpki-client