Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b25e8a31-09a1-350c-9242-4f96166f3c30.roa
File: b25e8a31-09a1-350c-9242-4f96166f3c30.roa (raw, json)
Hash identifier: yvxOgyzlgxXts+zb+VEA6DlMCbRfhnTKmggsN9k4wYA=
Subject key identifier: 30:78:67:E5:32:0E:CB:8D:1E:03:B6:DA:E1:C5:D4:9B:DC:30:CA:72
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E42B8C48FEDFC181E13880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b25e8a31-09a1-350c-9242-4f96166f3c30.roa
Signing time: Thu 01 May 2025 16:34:52 +0000
ROA not before: Thu 01 May 2025 16:34:52 +0000
ROA not after: Wed 30 Jul 2025 16:34:52 +0000
asID: 22773
IP address blocks: 2600:880a:1108::/46 maxlen: 46
Validation: Failed, certificate revoked on Thu 01 May 2025 22:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e4:2b:8c:48:fe:df:c1:81:e1:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:34:52 2025 GMT
Not After : Jul 30 16:34:52 2025 GMT
Subject: CN=4b0f02e8-53e8-4c5e-baae-1ef52a4fa136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:0d:fc:e6:cd:5b:93:79:cb:19:f2:8e:07:
d5:6a:e1:bb:19:49:17:ce:8c:d4:7d:be:d6:a6:e0:
72:db:36:1e:51:d2:dd:7d:01:44:08:8a:99:25:cb:
58:39:93:56:42:19:c7:53:8e:81:ac:0c:f5:f0:0a:
15:a4:17:b3:d4:c8:5b:05:bc:c1:7a:08:20:a6:6e:
6c:25:a4:20:61:bc:89:1c:06:09:9c:11:48:65:7d:
16:5f:cf:69:8a:e9:16:01:39:fc:26:80:1f:34:ae:
5b:44:f2:a1:dc:a1:28:73:a7:df:c2:06:9d:2b:17:
f8:0b:06:00:fe:12:93:97:e6:b7:81:18:e8:b5:d6:
e6:b4:71:4e:14:1b:74:89:d0:5a:1a:a8:8c:ab:4c:
e2:e2:7b:be:3b:6d:48:45:ce:4a:fa:5e:13:15:0a:
c9:6c:92:85:1c:80:ea:7e:f0:89:04:03:ca:ad:9d:
c8:2d:f2:61:b4:c9:f6:33:17:fe:14:69:46:6d:a4:
0c:a6:6e:5b:1e:d0:d3:3e:02:0b:41:d2:75:c9:ec:
56:36:7f:16:49:db:8b:22:72:f2:b0:fc:9a:81:e1:
1e:75:8d:a1:aa:de:a3:87:f6:88:74:05:92:11:01:
8a:49:f6:e0:6a:9c:fb:70:9b:19:cf:47:5b:1b:bd:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:67:E5:32:0E:CB:8D:1E:03:B6:DA:E1:C5:D4:9B:DC:30:CA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b25e8a31-09a1-350c-9242-4f96166f3c30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:880a:1108::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:10:9b:33:d6:2b:19:15:6f:48:71:79:a9:5f:cb:0e:9c:b6:
2a:25:c5:59:a1:01:5e:ba:d3:e6:11:f2:92:ce:9b:69:a4:cd:
40:0e:ed:7e:64:13:4f:f9:26:dd:59:6c:78:b2:38:c8:1a:50:
7b:08:6b:63:b6:6b:e0:c9:6e:d5:cc:9c:ea:10:eb:7c:b6:0f:
09:5e:c0:97:d0:fa:7e:66:29:8a:94:d0:44:6b:d0:8f:8d:c7:
61:09:f4:53:a6:c7:c7:cb:5d:82:72:af:f0:41:4a:21:b5:45:
3f:db:74:58:08:d9:53:23:17:01:62:44:02:5a:10:bd:b7:93:
e6:c8:17:73:2f:fa:3f:37:15:8e:57:e9:7d:a4:3b:41:b9:f7:
c4:fb:c6:80:ab:b7:e2:dc:10:9e:9e:d0:fd:fd:ac:e9:23:b9:
8e:84:c8:1a:fd:01:fe:e3:3a:b8:fd:69:73:e3:ba:9f:a2:2e:
0d:de:45:ac:37:82:59:41:2b:76:27:8a:80:c9:92:4b:11:08:
f7:22:37:6b:7a:03:b7:2a:88:c9:a3:d2:3e:25:db:a4:e5:46:
f5:3b:0b:a3:69:6a:df:19:cd:80:a7:98:8b:c3:48:d7:97:6f:
eb:65:a2:32:41:2a:21:04:1d:cf:15:fe:b1:55:cb:b6:cf:03:
dc:1a:02:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm15CuMSP7fwYHhOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzQ1MloXDTI1MDczMDE2MzQ1MlowLzEtMCsGA1UEAxMk
NGIwZjAyZTgtNTNlOC00YzVlLWJhYWUtMWVmNTJhNGZhMTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM0N/ObNW5N5yxnyjgfVauG7GUkXzozUfb7W
puBy2zYeUdLdfQFECIqZJctYOZNWQhnHU46BrAz18AoVpBez1MhbBbzBegggpm5s
JaQgYbyJHAYJnBFIZX0WX89piukWATn8JoAfNK5bRPKh3KEoc6ffwgadKxf4CwYA
/hKTl+a3gRjotdbmtHFOFBt0idBaGqiMq0zi4nu+O21IRc5K+l4TFQrJbJKFHIDq
fvCJBAPKrZ3ILfJhtMn2Mxf+FGlGbaQMpm5bHtDTPgILQdJ1yexWNn8WSduLInLy
sPyageEedY2hqt6jh/aIdAWSEQGKSfbgapz7cJsZz0dbG700AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDB4Z+UyDsuNHgO22uHF1JvcMMpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjI1ZThhMzEtMDlhMS0z
NTBjLTkyNDItNGY5NjE2NmYzYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCIChEI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGwQmzPWKxkVb0hxealfyw6ctiolxVmhAV660+YR8pLOm2mkzUAO
7X5kE0/5Jt1ZbHiyOMgaUHsIa2O2a+DJbtXMnOoQ63y2DwlewJfQ+n5mKYqU0ERr
0I+Nx2EJ9FOmx8fLXYJyr/BBSiG1RT/bdFgI2VMjFwFiRAJaEL23k+bIF3Mv+j83
FY5X6X2kO0G598T7xoCrt+LcEJ6e0P39rOkjuY6EyBr9Af7jOrj9aXPjup+iLg3e
Raw3gllBK3YnioDJkksRCPciN2t6A7cqiMmj0j4l26TlRvU7C6Npat8ZzYCnmIvD
SNeXb+tlojJBKiEEHc8V/rFVy7bPA9waAi4=
-----END CERTIFICATE-----
Generated at Thu May 15 05:03:07 2025 by rpki-client