Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f73d425-8cd8-3069-9774-4047ac249d6f.roa
File: 9f73d425-8cd8-3069-9774-4047ac249d6f.roa (raw, json)
Hash identifier: WtM+3aigAusJSlZx8MAIdSLmPz1V3JVhpoJwJkLKb38=
Subject key identifier: 1F:1E:8D:BC:AF:BE:F9:5C:4D:FE:C2:1A:A1:58:A9:FF:7A:14:5E:66
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCB10E7518C0900F3E3100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f73d425-8cd8-3069-9774-4047ac249d6f.roa
Signing time: Thu 01 May 2025 16:19:48 +0000
ROA not before: Thu 01 May 2025 16:19:48 +0000
ROA not after: Wed 30 Jul 2025 16:19:48 +0000
asID: 22773
IP address blocks: 24.251.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:b1:0e:75:18:c0:90:0f:3e:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:19:48 2025 GMT
Not After : Jul 30 16:19:48 2025 GMT
Subject: CN=7dfa2493-b0f2-40d4-b720-9129493b90c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:4e:77:25:e0:37:ca:ab:91:ab:a6:59:53:
ac:0c:a0:ae:ba:29:9a:ff:4f:a0:42:62:c9:8e:1a:
89:93:3a:48:5a:94:65:88:e9:d4:d7:ee:14:df:f2:
c4:ef:76:df:0e:5a:bf:6c:aa:dc:a7:1f:6c:8f:2d:
63:e9:9b:7d:ac:85:30:19:b7:0c:2c:b3:3d:8f:eb:
96:43:c5:31:59:7b:d3:11:eb:7b:4b:25:59:18:c9:
9b:68:68:33:10:c1:d3:11:06:61:1b:0e:38:c3:83:
c2:4d:2e:84:7e:3f:d0:63:7c:04:34:b0:5b:45:f0:
fc:6d:f2:e5:12:b5:1f:67:91:b9:d7:24:86:69:21:
2a:eb:d2:5b:b1:f2:a3:8a:da:c9:f3:26:9d:e0:b7:
3a:3d:c2:05:ce:19:a1:f2:fc:23:2e:90:30:b0:47:
25:32:24:62:47:e7:0b:60:bb:e3:f2:33:ae:2a:4b:
d3:7e:ad:2e:7f:e6:fd:64:9b:01:98:6d:08:b0:3f:
72:26:0c:e9:08:aa:23:0b:20:59:7c:d0:e6:37:8a:
89:a0:3f:67:68:c1:8a:17:19:d7:e8:29:dd:56:1d:
01:61:a9:7e:e8:a7:47:96:cd:2d:6d:4d:a4:3f:04:
2d:97:9e:96:4d:66:02:07:f9:0f:cb:f6:6b:47:b3:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:8D:BC:AF:BE:F9:5C:4D:FE:C2:1A:A1:58:A9:FF:7A:14:5E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f73d425-8cd8-3069-9774-4047ac249d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:1a:df:82:b7:61:40:20:b9:df:fc:df:aa:eb:28:45:86:ac:
06:02:35:4d:e4:97:07:f2:28:0c:1e:06:8c:49:b2:65:4a:b2:
10:dd:6c:d7:2e:a6:65:12:75:46:7b:66:64:40:c2:7a:cc:73:
bf:73:d9:17:5b:7e:9f:ad:ba:62:9c:b6:f0:da:4e:89:aa:f9:
26:b9:8d:2b:58:fb:dc:30:f3:bb:b2:25:56:62:bb:5d:05:cd:
b5:44:ba:25:50:f4:0e:16:8f:d3:1a:2b:8b:1d:59:83:1a:35:
01:3a:c9:62:3e:bc:18:e2:38:5d:58:5a:a8:7e:61:d1:e2:0c:
45:7f:5e:44:5c:2b:ef:c1:ed:d4:68:63:3b:fc:db:f5:a2:d3:
ee:77:a6:ac:48:20:8a:ea:43:1a:38:3b:2e:fc:5d:a8:a6:fd:
af:07:95:29:54:c0:ef:88:15:5a:ea:c4:d1:c1:c5:11:42:9f:
35:76:c2:c0:95:b1:fa:89:c7:ea:60:5a:49:ef:6a:5c:f8:7e:
11:b0:a5:e3:56:5e:13:eb:92:03:4b:1f:3f:5b:c3:8b:ec:f9:
1b:8c:27:11:e3:c0:94:3c:cb:08:ce:15:b5:ec:95:69:08:5e:
ad:ea:ea:f1:7e:b7:7b:98:64:d4:a2:50:83:2a:64:2f:ae:54:
ac:a7:37:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13LEOdRjAkA8+MQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MTk0OFoXDTI1MDczMDE2MTk0OFowLzEtMCsGA1UEAxMk
N2RmYTI0OTMtYjBmMi00MGQ0LWI3MjAtOTEyOTQ5M2I5MGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjJOdyXgN8qrkaumWVOsDKCuuima/0+gQmLJ
jhqJkzpIWpRliOnU1+4U3/LE73bfDlq/bKrcpx9sjy1j6Zt9rIUwGbcMLLM9j+uW
Q8UxWXvTEet7SyVZGMmbaGgzEMHTEQZhGw44w4PCTS6Efj/QY3wENLBbRfD8bfLl
ErUfZ5G51ySGaSEq69JbsfKjitrJ8yad4Lc6PcIFzhmh8vwjLpAwsEclMiRiR+cL
YLvj8jOuKkvTfq0uf+b9ZJsBmG0IsD9yJgzpCKojCyBZfNDmN4qJoD9naMGKFxnX
6CndVh0BYal+6KdHls0tbU2kPwQtl56WTWYCB/kPy/ZrR7PF1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8ejbyvvvlcTf7CGqFYqf96FF5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWY3M2Q0MjUtOGNkOC0z
MDY5LTk3NzQtNDA0N2FjMjQ5ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPsKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMa34K3YUAgud/836rrKEWGrAYCNU3klwfyKAweBoxJsmVKshDdbNcu
pmUSdUZ7ZmRAwnrMc79z2Rdbfp+tumKctvDaTomq+Sa5jStY+9ww87uyJVZiu10F
zbVEuiVQ9A4Wj9MaK4sdWYMaNQE6yWI+vBjiOF1YWqh+YdHiDEV/XkRcK+/B7dRo
Yzv82/Wi0+53pqxIIIrqQxo4Oy78Xaim/a8HlSlUwO+IFVrqxNHBxRFCnzV2wsCV
sfqJx+pgWknvalz4fhGwpeNWXhPrkgNLHz9bw4vs+RuMJxHjwJQ8ywjOFbXslWkI
Xq3q6vF+t3uYZNSiUIMqZC+uVKynN/c=
-----END CERTIFICATE-----
Generated at Thu May 15 02:45:57 2025 by rpki-client