Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f3b7ef3-92a3-3bee-ad78-5025ef440d7f.roa
File: 9f3b7ef3-92a3-3bee-ad78-5025ef440d7f.roa (raw, json)
Hash identifier: vM2mok3Qsv0bx2QkR8smFjvBxBR7mtR0Zhnv13QkdBY=
Subject key identifier: BC:D3:C2:47:1E:7D:E9:E9:D5:59:FF:BF:8E:7A:E6:DC:73:D5:D7:66
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E132DA6023533C8E02B400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f3b7ef3-92a3-3bee-ad78-5025ef440d7f.roa
Signing time: Thu 01 May 2025 16:28:53 +0000
ROA not before: Thu 01 May 2025 16:28:53 +0000
ROA not after: Wed 30 Jul 2025 16:28:53 +0000
asID: 22773
IP address blocks: 98.167.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:32:da:60:23:53:3c:8e:02:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:53 2025 GMT
Not After : Jul 30 16:28:53 2025 GMT
Subject: CN=87874cd5-5868-4060-8ed1-bf7d7b1d0a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:7e:d3:81:e7:6f:8a:ba:35:fe:fd:4c:cb:
89:b6:b7:3f:cd:04:a1:3a:12:29:09:47:94:a0:6b:
a9:cf:2d:60:b7:5c:9d:37:36:51:21:70:fd:61:bb:
f5:fc:16:74:b8:a5:fb:ba:c7:60:fa:61:ac:00:17:
24:77:5f:69:0d:ea:9b:a2:e6:92:29:1c:49:ee:84:
e6:af:1a:9a:d0:55:0a:83:92:32:e9:ce:7c:8b:a2:
97:dc:c1:bd:a0:2a:5a:76:45:f8:c4:09:4d:db:9a:
f2:93:2c:1a:14:07:71:5b:40:0b:94:fd:8b:9b:2e:
2d:d6:42:11:66:a7:dc:83:47:8f:af:40:24:b2:68:
3a:11:48:34:a0:61:dd:8a:a7:65:22:1e:4f:8b:32:
5d:dc:d6:4a:b8:5f:7e:ff:de:36:cd:0d:2c:db:6e:
9e:95:e1:8c:84:d1:fe:97:44:fa:55:a9:b0:0e:30:
53:a0:76:86:eb:c4:fb:85:1d:f4:8c:ff:a5:81:48:
77:98:0d:7e:b2:e9:5e:a5:7a:ea:91:3c:ac:67:22:
c0:d9:1a:f1:fa:e2:30:22:27:75:bf:bd:21:71:b6:
01:f9:14:0b:5c:0f:16:cf:f6:17:25:9e:54:5d:b7:
ad:55:01:e9:5f:a7:a1:36:c4:2e:70:34:44:7f:7e:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:C2:47:1E:7D:E9:E9:D5:59:FF:BF:8E:7A:E6:DC:73:D5:D7:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f3b7ef3-92a3-3bee-ad78-5025ef440d7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.167.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:09:d6:b0:e0:91:52:86:4c:4c:0b:14:8e:97:b8:2a:cb:39:
39:81:96:6a:a1:9e:3b:46:5e:da:13:2c:8c:99:9b:8b:7c:b1:
c6:55:75:6d:5b:bc:86:92:c7:63:9c:f4:1b:17:54:3d:d2:69:
89:81:a3:11:78:2d:33:8a:04:fa:2e:15:a5:1f:93:f5:ed:a3:
c8:cf:0a:25:f7:93:8e:95:e0:7f:85:e5:57:f1:38:2d:89:97:
3c:66:e6:63:e7:96:ff:15:c0:bf:a4:4f:de:5f:b1:12:94:9a:
d7:49:0f:00:c7:73:86:af:2d:b1:0f:97:7d:93:b5:53:86:f3:
d5:87:ba:f7:73:e5:bd:f4:cd:6f:86:e6:f9:6f:9d:31:de:45:
90:be:6a:94:e5:d3:56:78:0d:49:a6:0d:b6:72:fa:81:5a:13:
a8:be:31:06:b5:75:a6:d4:0e:8e:6c:c8:31:b1:84:37:27:63:
85:31:f8:61:0e:c5:fd:bc:72:2e:cc:03:cb:8b:95:c5:91:93:
b2:67:0e:52:8d:5f:4f:7d:92:7e:03:5a:98:5a:15:67:56:e9:
9f:5f:b8:e1:af:00:70:bc:3d:7f:e5:b6:0a:f7:4d:06:01:eb:
1b:4e:2f:ab:ef:ce:fd:12:35:97:09:b8:a9:72:ca:66:13:c7:
50:00:78:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14TLaYCNTPI4CtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2Mjg1M1oXDTI1MDczMDE2Mjg1M1owLzEtMCsGA1UEAxMk
ODc4NzRjZDUtNTg2OC00MDYwLThlZDEtYmY3ZDdiMWQwYTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknB+04Hnb4q6Nf79TMuJtrc/zQShOhIpCUeU
oGupzy1gt1ydNzZRIXD9Ybv1/BZ0uKX7usdg+mGsABckd19pDeqbouaSKRxJ7oTm
rxqa0FUKg5Iy6c58i6KX3MG9oCpadkX4xAlN25rykywaFAdxW0ALlP2Lmy4t1kIR
Zqfcg0ePr0Aksmg6EUg0oGHdiqdlIh5PizJd3NZKuF9+/942zQ0s226eleGMhNH+
l0T6VamwDjBToHaG68T7hR30jP+lgUh3mA1+sulepXrqkTysZyLA2Rrx+uIwIid1
v70hcbYB+RQLXA8Wz/YXJZ5UXbetVQHpX6ehNsQucDREf34SUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzTwkcefenp1Vn/v4565txz1ddmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWYzYjdlZjMtOTJhMy0z
YmVlLWFkNzgtNTAyNWVmNDQwZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqeIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAJ1rDgkVKGTEwLFI6XuCrLOTmBlmqhnjtGXtoTLIyZm4t8scZVdW1b
vIaSx2Oc9BsXVD3SaYmBoxF4LTOKBPouFaUfk/Xto8jPCiX3k46V4H+F5VfxOC2J
lzxm5mPnlv8VwL+kT95fsRKUmtdJDwDHc4avLbEPl32TtVOG89WHuvdz5b30zW+G
5vlvnTHeRZC+apTl01Z4DUmmDbZy+oFaE6i+MQa1dabUDo5syDGxhDcnY4Ux+GEO
xf28ci7MA8uLlcWRk7JnDlKNX099kn4DWphaFWdW6Z9fuOGvAHC8PX/ltgr3TQYB
6xtOL6vvzv0SNZcJuKlyymYTx1AAeMg=
-----END CERTIFICATE-----
Generated at Thu May 15 02:18:56 2025 by rpki-client