Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8a4a1c6-9d10-3e30-8c6c-001bc1c88759.roa
File: b8a4a1c6-9d10-3e30-8c6c-001bc1c88759.roa (raw, json)
Hash identifier: 7csbMcEJKwey8JeI5G9V76QYHftX6htsvvbsD+vHReQ=
Subject key identifier: F5:68:98:63:38:74:DA:52:7A:79:C8:DD:6C:69:46:85:AA:A1:1A:8D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E04F2BAEA7B9124A991700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8a4a1c6-9d10-3e30-8c6c-001bc1c88759.roa
Signing time: Thu 01 May 2025 16:27:05 +0000
ROA not before: Thu 01 May 2025 16:27:05 +0000
ROA not after: Wed 30 Jul 2025 16:27:05 +0000
asID: 22773
IP address blocks: 72.211.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:4f:2b:ae:a7:b9:12:4a:99:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:05 2025 GMT
Not After : Jul 30 16:27:05 2025 GMT
Subject: CN=5a07764d-82d1-4082-938d-77e133881306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:9a:89:d9:63:4a:ff:07:ef:52:c0:19:61:
89:f3:f0:67:9c:ce:40:7f:bf:46:25:93:a2:c0:2b:
21:2d:ae:67:ee:55:e0:f9:90:bd:32:10:e5:b0:12:
d3:ea:f6:e1:78:cd:c3:55:a9:74:8b:c4:c7:57:a8:
ba:27:a4:0c:18:f3:20:3b:3e:5a:77:9f:03:6a:85:
55:14:2b:17:f9:5d:b7:6a:bc:3a:be:11:36:1d:87:
71:90:24:6c:d7:91:44:45:31:5d:70:ed:b2:a0:3d:
7e:d4:3d:1e:68:51:aa:41:97:42:b0:5d:8d:65:1d:
1d:a3:21:9a:0e:af:c3:f4:43:31:e1:b0:25:e3:97:
3a:4d:eb:e9:3b:ba:38:35:b5:d3:31:52:20:a1:ad:
60:96:0a:d7:79:91:60:49:18:0d:01:fa:b4:33:0f:
24:18:3f:f5:18:fd:9c:a4:7f:36:0d:60:13:67:5e:
cb:f8:51:f9:41:22:36:1c:75:87:a7:70:ae:4c:78:
63:72:b1:30:85:87:39:5b:ba:0b:7d:ab:97:53:4e:
bd:cd:63:da:f9:a9:9f:30:ad:b2:11:37:9d:8d:fe:
d8:ca:a5:0c:0c:5d:02:d5:8d:73:46:19:30:57:bd:
e2:3b:83:64:0a:ac:2c:ec:f1:db:6f:4f:69:3c:8d:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:98:63:38:74:DA:52:7A:79:C8:DD:6C:69:46:85:AA:A1:1A:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8a4a1c6-9d10-3e30-8c6c-001bc1c88759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.211.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:1f:12:ab:78:a6:9c:4b:ff:30:8b:5f:91:86:e6:86:b4:67:
47:52:e7:8a:d6:90:58:95:b9:0b:e3:a6:fb:11:17:28:b0:cc:
0a:93:ae:23:fd:a0:4d:9d:e5:12:fc:06:37:6d:3a:4b:f3:47:
6c:49:b7:2d:56:16:4f:98:5d:ae:0d:16:4d:09:c8:4b:2e:b7:
62:63:b1:aa:a7:46:1c:82:b2:98:bc:6b:4b:15:d8:bf:1f:8c:
c8:61:5c:1e:4d:6e:89:be:ac:eb:d8:1a:54:c5:94:1f:ca:f4:
a8:16:b7:2e:38:7b:80:35:30:6a:19:2a:7b:4c:62:b4:28:55:
7c:28:dd:11:61:c8:6d:32:c0:cb:68:7c:c1:be:ad:57:e0:15:
c0:eb:72:1d:22:d3:f2:ab:cb:b6:bf:50:1d:f1:6a:50:5d:d9:
f3:32:d5:b3:bc:28:63:b3:b3:db:1d:8a:fe:07:3a:e6:1b:00:
1c:32:58:04:a4:67:01:79:be:e1:99:81:22:c0:5f:6f:82:da:
bf:2e:0b:55:83:75:bd:d5:c5:8f:e3:12:ff:da:7c:14:ba:a8:
66:07:fc:53:40:63:8d:a5:e0:90:e5:d7:9f:2e:fe:a6:9d:3d:
d6:d3:fb:a3:9c:71:8f:82:5e:a7:f3:ea:c7:95:26:47:58:67:
24:e5:0b:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14E8rrqe5EkqZFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjcwNVoXDTI1MDczMDE2MjcwNVowLzEtMCsGA1UEAxMk
NWEwNzc2NGQtODJkMS00MDgyLTkzOGQtNzdlMTMzODgxMzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3eaidljSv8H71LAGWGJ8/BnnM5Af79GJZOi
wCshLa5n7lXg+ZC9MhDlsBLT6vbheM3DVal0i8THV6i6J6QMGPMgOz5ad58DaoVV
FCsX+V23arw6vhE2HYdxkCRs15FERTFdcO2yoD1+1D0eaFGqQZdCsF2NZR0doyGa
Dq/D9EMx4bAl45c6TevpO7o4NbXTMVIgoa1glgrXeZFgSRgNAfq0Mw8kGD/1GP2c
pH82DWATZ17L+FH5QSI2HHWHp3CuTHhjcrEwhYc5W7oLfauXU069zWPa+amfMK2y
ETedjf7YyqUMDF0C1Y1zRhkwV73iO4NkCqws7PHbb09pPI1BdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPVomGM4dNpSennI3WxpRoWqoRqNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjhhNGExYzYtOWQxMC0z
ZTMwLThjNmMtMDAxYmMxYzg4NzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNO/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsfEqt4ppxL/zCLX5GG5oa0Z0dS54rWkFiVuQvjpvsRFyiwzAqTriP9
oE2d5RL8BjdtOkvzR2xJty1WFk+YXa4NFk0JyEsut2JjsaqnRhyCspi8a0sV2L8f
jMhhXB5Nbom+rOvYGlTFlB/K9KgWty44e4A1MGoZKntMYrQoVXwo3RFhyG0ywMto
fMG+rVfgFcDrch0i0/Kry7a/UB3xalBd2fMy1bO8KGOzs9sdiv4HOuYbABwyWASk
ZwF5vuGZgSLAX2+C2r8uC1WDdb3VxY/jEv/afBS6qGYH/FNAY42l4JDl158u/qad
PdbT+6OccY+CXqfz6seVJkdYZyTlCw8=
-----END CERTIFICATE-----
Generated at Thu May 15 04:58:59 2025 by rpki-client