Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/941af60c-67c6-35d9-a84c-d8360eb533c7.roa
File: 941af60c-67c6-35d9-a84c-d8360eb533c7.roa (raw, json)
Hash identifier: cBnOdyZJu71ZpCf8s4wgHpbd1GjoafmXhVs4i5llVqA=
Subject key identifier: 72:38:5A:26:93:FB:B1:12:C8:01:86:0E:EC:EB:08:B5:9E:2C:C8:6D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E1043D1C34AEFFB17B7480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/941af60c-67c6-35d9-a84c-d8360eb533c7.roa
Signing time: Thu 01 May 2025 16:28:31 +0000
ROA not before: Thu 01 May 2025 16:28:31 +0000
ROA not after: Wed 30 Jul 2025 16:28:31 +0000
asID: 22773
IP address blocks: 98.165.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:04:3d:1c:34:ae:ff:b1:7b:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:31 2025 GMT
Not After : Jul 30 16:28:31 2025 GMT
Subject: CN=b6316b84-8d33-45a5-9e78-ad3ec9b4396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:e8:bb:68:b2:80:11:78:8d:bb:e9:bd:5a:
35:76:29:e9:9d:66:5a:d4:9f:40:0e:0f:d0:3b:03:
39:05:3e:f7:32:ea:f4:fc:34:e1:5b:04:9f:b6:88:
f8:ea:88:7a:ad:2c:6a:21:03:45:72:89:53:a5:e1:
ce:bc:ab:e6:55:e0:01:3e:82:c0:41:1c:ea:85:e1:
70:64:bc:1b:6e:f6:f5:59:e3:90:cb:f2:57:0c:96:
10:73:94:fd:ea:7e:95:57:68:b8:4e:90:a6:e8:ed:
3b:f1:fa:44:ff:aa:86:4e:62:78:52:86:7c:32:d3:
22:d9:e9:6b:26:d1:e9:8c:b1:a2:66:4f:59:a8:2f:
ae:95:f1:27:f7:17:94:77:f8:16:e2:65:cc:55:ba:
f1:e8:eb:e8:01:da:18:54:c8:07:4b:da:da:b7:89:
4f:6f:b3:d9:e1:ce:bf:7b:c7:ec:66:a0:89:ba:0b:
12:53:9f:8d:79:0a:7c:a2:bc:93:0b:45:23:a9:8e:
3a:0f:47:a5:21:9b:4d:4d:35:ec:a8:21:6b:b4:84:
0a:9c:db:f8:64:5d:0d:6c:bd:e9:5f:e1:0e:1b:e0:
f9:b1:29:86:93:17:4d:e7:48:2e:25:0e:ed:76:37:
b8:94:a6:ee:10:61:77:25:08:fb:be:94:bb:79:4d:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:5A:26:93:FB:B1:12:C8:01:86:0E:EC:EB:08:B5:9E:2C:C8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/941af60c-67c6-35d9-a84c-d8360eb533c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.165.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:9f:91:87:f7:38:7c:4a:a3:5e:b9:f4:04:98:85:ea:58:10:
25:64:99:79:c0:5c:07:59:1b:f7:7a:4e:9d:f2:2b:f9:df:5f:
4f:ca:15:40:b5:b6:6b:42:1d:4f:96:d2:b5:36:15:7d:2f:4d:
f1:f3:0d:66:32:bc:71:a6:0e:b8:13:5b:fd:c1:83:58:41:71:
c4:9e:94:5f:dc:cd:47:0e:2d:ca:58:97:fe:e4:26:2d:24:50:
dd:55:96:ca:37:c6:92:18:ef:43:80:26:aa:d4:fa:01:8a:d6:
85:08:ba:b9:c1:14:79:7c:91:05:ed:97:ff:2e:dd:11:85:76:
b0:ae:e2:70:3e:7b:56:a3:4f:1f:98:de:de:6d:e2:42:26:02:
69:54:2f:c6:1f:bd:4d:d7:d1:bc:0a:cf:ce:9b:bd:4b:08:4e:
0c:e8:cb:df:34:ac:6d:c5:dd:85:1b:78:8c:fa:83:2b:4f:e1:
ce:91:ac:6d:97:d1:de:dd:a1:89:45:cd:e9:a0:c2:6a:a5:47:
1a:a5:20:d8:8e:0b:2e:55:60:40:52:0d:ed:29:7b:90:92:49:
48:42:44:8f:6a:0e:7a:28:8f:1d:b5:77:fc:19:15:95:8a:11:
d2:30:fb:76:fc:88:08:be:78:49:c1:06:94:9b:2a:27:bc:38:
a0:ee:30:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14QQ9HDSu/7F7dIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjgzMVoXDTI1MDczMDE2MjgzMVowLzEtMCsGA1UEAxMk
YjYzMTZiODQtOGQzMy00NWE1LTllNzgtYWQzZWM5YjQzOTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGPou2iygBF4jbvpvVo1dinpnWZa1J9ADg/Q
OwM5BT73Mur0/DThWwSftoj46oh6rSxqIQNFcolTpeHOvKvmVeABPoLAQRzqheFw
ZLwbbvb1WeOQy/JXDJYQc5T96n6VV2i4TpCm6O078fpE/6qGTmJ4UoZ8MtMi2elr
JtHpjLGiZk9ZqC+ulfEn9xeUd/gW4mXMVbrx6OvoAdoYVMgHS9rat4lPb7PZ4c6/
e8fsZqCJugsSU5+NeQp8oryTC0UjqY46D0elIZtNTTXsqCFrtIQKnNv4ZF0NbL3p
X+EOG+D5sSmGkxdN50guJQ7tdje4lKbuEGF3JQj7vpS7eU03JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHI4WiaT+7ESyAGGDuzrCLWeLMhtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQxYWY2MGMtNjdjNi0z
NWQ5LWE4NGMtZDgzNjBlYjUzM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqUkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+fkYf3OHxKo1659ASYhepYECVkmXnAXAdZG/d6Tp3yK/nfX0/KFUC1
tmtCHU+W0rU2FX0vTfHzDWYyvHGmDrgTW/3Bg1hBccSelF/czUcOLcpYl/7kJi0k
UN1Vlso3xpIY70OAJqrU+gGK1oUIurnBFHl8kQXtl/8u3RGFdrCu4nA+e1ajTx+Y
3t5t4kImAmlUL8YfvU3X0bwKz86bvUsITgzoy980rG3F3YUbeIz6gytP4c6RrG2X
0d7doYlFzemgwmqlRxqlINiOCy5VYEBSDe0pe5CSSUhCRI9qDnoojx21d/wZFZWK
EdIw+3b8iAi+eEnBBpSbKie8OKDuMEg=
-----END CERTIFICATE-----
Generated at Thu May 15 01:23:10 2025 by rpki-client