Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/994dfc3e-0100-32c2-ab38-5f2314b2606f.roa
File: 994dfc3e-0100-32c2-ab38-5f2314b2606f.roa (raw, json)
Hash identifier: 0CadbqlTj4B+1KAP+BnnE/qXaSmDol6DQFLO4vaHKXM=
Subject key identifier: 37:62:B6:39:4E:86:56:F5:C3:D5:02:75:1B:FC:0C:7C:25:F0:37:6C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCE18AF35B4AE66E4C3C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/994dfc3e-0100-32c2-ab38-5f2314b2606f.roa
Signing time: Thu 01 May 2025 16:20:11 +0000
ROA not before: Thu 01 May 2025 16:20:11 +0000
ROA not after: Wed 30 Jul 2025 16:20:11 +0000
asID: 22773
IP address blocks: 24.251.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:e1:8a:f3:5b:4a:e6:6e:4c:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:11 2025 GMT
Not After : Jul 30 16:20:11 2025 GMT
Subject: CN=f2ea14f1-2534-4c40-92f7-91b1b7bc4c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:90:13:f1:cc:de:8b:c2:b8:1a:f6:7b:d0:
d2:b6:a9:2c:19:cb:0e:1f:6b:55:03:23:da:de:d3:
7c:30:3c:f4:8d:2f:da:ee:a5:9c:61:4b:e9:f5:ea:
22:10:fc:6d:e5:51:ed:87:1d:ad:9f:35:77:7c:20:
92:af:da:a5:27:6a:d1:c8:eb:3b:8d:95:a9:a5:a0:
74:7f:c6:24:ec:74:6f:86:1d:d5:6b:11:1f:85:01:
fb:06:5c:c2:c4:ec:0e:14:04:34:e5:f5:ed:f1:ee:
af:d0:c3:a9:4b:ba:1b:84:a7:a9:96:9d:68:1f:82:
d0:44:6e:34:04:c9:60:9d:c9:b9:03:fb:7d:6d:8a:
3a:87:81:f1:aa:6a:56:b9:c4:1c:dc:89:45:19:ab:
9c:1e:3d:85:36:0b:42:34:45:52:5e:a6:05:41:24:
9b:43:09:a4:d9:78:78:14:9a:e3:18:d5:c5:a9:f5:
dc:8c:9f:0b:53:ec:ea:b0:79:37:fb:cc:69:f4:3a:
ff:e0:5d:eb:5e:63:31:39:e1:78:e5:f7:a4:ee:5d:
8a:a8:cd:bf:0c:27:7b:23:80:c0:8f:08:81:54:69:
6a:0c:9b:21:ca:5b:36:39:3e:ff:f8:83:aa:d3:cf:
84:87:2a:ce:17:a6:09:83:69:1d:1a:1b:0c:16:1d:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:B6:39:4E:86:56:F5:C3:D5:02:75:1B:FC:0C:7C:25:F0:37:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/994dfc3e-0100-32c2-ab38-5f2314b2606f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:80:74:58:52:3b:bd:5b:0c:63:6e:ac:b5:97:01:24:32:8b:
87:74:a5:7b:8f:70:fd:4a:ab:84:b3:65:11:ee:6e:85:64:b3:
55:d4:ef:d3:09:8b:3b:97:b0:41:a6:b9:f6:63:b1:21:5e:1d:
04:24:46:c2:8a:94:57:77:09:ef:5b:49:14:1a:55:a2:a7:8b:
c8:ac:5d:04:33:f9:32:f0:71:66:0f:52:bb:0c:56:d4:16:46:
22:a1:ac:1c:0b:a5:56:e2:2c:db:1e:74:4f:f2:d0:25:73:c7:
c4:14:1b:0e:d7:f5:03:15:b2:6d:fa:e9:1f:7d:fb:54:c7:fb:
2f:5e:bb:54:d8:3b:32:bc:6b:76:20:3d:c4:43:99:3b:53:e4:
22:4f:55:98:bb:8a:ed:8b:07:8f:40:5d:eb:ff:a9:15:07:39:
72:35:60:f7:02:2e:84:da:a9:3b:b5:15:0a:54:91:c2:12:db:
86:ab:ec:5e:1b:24:e3:77:11:32:e9:fa:b5:84:3b:7b:55:f8:
f3:df:eb:0d:ca:54:f8:98:d2:0b:45:94:da:52:91:ed:cb:0a:
5b:96:06:42:8e:3c:88:05:4c:93:a4:37:78:be:b3:ca:10:1d:
be:c8:57:20:d6:47:58:88:61:20:58:05:92:76:2e:3f:84:28:
e8:6e:fb:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13OGK81tK5m5MPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjAxMVoXDTI1MDczMDE2MjAxMVowLzEtMCsGA1UEAxMk
ZjJlYTE0ZjEtMjUzNC00YzQwLTkyZjctOTFiMWI3YmM0YzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iyQE/HM3ovCuBr2e9DStqksGcsOH2tVAyPa
3tN8MDz0jS/a7qWcYUvp9eoiEPxt5VHthx2tnzV3fCCSr9qlJ2rRyOs7jZWppaB0
f8Yk7HRvhh3VaxEfhQH7BlzCxOwOFAQ05fXt8e6v0MOpS7obhKeplp1oH4LQRG40
BMlgncm5A/t9bYo6h4HxqmpWucQc3IlFGaucHj2FNgtCNEVSXqYFQSSbQwmk2Xh4
FJrjGNXFqfXcjJ8LU+zqsHk3+8xp9Dr/4F3rXmMxOeF45fek7l2KqM2/DCd7I4DA
jwiBVGlqDJshyls2OT7/+IOq08+EhyrOF6YJg2kdGhsMFh0JgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDditjlOhlb1w9UCdRv8DHwl8DdsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk0ZGZjM2UtMDEwMC0z
MmMyLWFiMzgtNWYyMzE0YjI2MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPv6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSAdFhSO71bDGNurLWXASQyi4d0pXuPcP1Kq4SzZRHuboVks1XU79MJ
izuXsEGmufZjsSFeHQQkRsKKlFd3Ce9bSRQaVaKni8isXQQz+TLwcWYPUrsMVtQW
RiKhrBwLpVbiLNsedE/y0CVzx8QUGw7X9QMVsm366R99+1TH+y9eu1TYOzK8a3Yg
PcRDmTtT5CJPVZi7iu2LB49AXev/qRUHOXI1YPcCLoTaqTu1FQpUkcIS24ar7F4b
JON3ETLp+rWEO3tV+PPf6w3KVPiY0gtFlNpSke3LCluWBkKOPIgFTJOkN3i+s8oQ
Hb7IVyDWR1iIYSBYBZJ2Lj+EKOhu+00=
-----END CERTIFICATE-----
Generated at Thu May 15 05:15:19 2025 by rpki-client