Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf5d99d9-56c1-3035-8f2f-d006c1e391cf.roa
File: bf5d99d9-56c1-3035-8f2f-d006c1e391cf.roa (raw, json)
Hash identifier: 4rcZd5DIA3VvSfGn9mC1if4BMIFAwjwJghiKpD+XXjY=
Subject key identifier: BA:B4:52:73:B4:B4:1B:66:BC:61:31:D7:D7:17:00:47:1E:0C:B7:86
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEB674C1750A96E0AF1A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf5d99d9-56c1-3035-8f2f-d006c1e391cf.roa
Signing time: Thu 01 May 2025 16:23:52 +0000
ROA not before: Thu 01 May 2025 16:23:52 +0000
ROA not after: Wed 30 Jul 2025 16:23:52 +0000
asID: 22773
IP address blocks: 70.172.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:b6:74:c1:75:0a:96:e0:af:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:23:52 2025 GMT
Not After : Jul 30 16:23:52 2025 GMT
Subject: CN=25243d50-fc63-4f0b-805d-431845fd9c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:b1:91:33:4e:d6:bc:91:d5:0d:8d:40:b0:
99:bf:e6:d0:84:55:4a:c7:ad:47:c4:60:0d:e2:eb:
3b:bc:b7:43:94:cb:d6:0b:57:6a:bf:82:3c:94:87:
b9:ce:b4:40:27:d3:b6:53:54:02:f5:14:73:44:3f:
73:5b:47:ab:a1:a9:f8:59:7c:59:50:63:42:71:b9:
c5:d7:12:54:3b:4b:60:c3:ec:e8:2d:d2:c8:91:44:
1f:ba:78:37:d4:86:a6:41:47:d1:b2:52:12:e0:50:
2d:47:29:a3:d3:63:4e:9c:9c:cd:7c:c8:7b:a9:07:
68:54:29:d0:d1:d6:c9:d8:ce:4d:82:e2:63:5e:ea:
6d:b5:32:6c:0c:ff:38:8e:f1:c3:09:b4:73:a0:06:
a3:49:19:ba:14:f9:22:b5:b5:58:cf:73:b9:2b:5e:
1b:0a:90:45:10:01:32:35:89:f2:9b:70:8a:d1:81:
b4:bf:bb:57:5f:d4:a9:68:7c:b6:fa:0e:db:89:2f:
15:c0:5f:fe:19:5e:ea:d8:b2:5d:7c:79:c2:e4:98:
28:ad:61:f3:d7:10:86:b2:ec:83:63:c2:86:74:21:
ad:45:4f:31:e0:16:59:4c:b7:0d:7f:4c:62:22:9d:
f3:54:48:d1:de:ae:49:9b:8a:36:99:44:f2:79:e3:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:52:73:B4:B4:1B:66:BC:61:31:D7:D7:17:00:47:1E:0C:B7:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf5d99d9-56c1-3035-8f2f-d006c1e391cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:b3:7d:00:c5:6a:9d:48:87:c6:8a:43:90:61:c1:3e:48:22:
35:e8:0f:5d:92:e0:de:cd:ef:e6:6c:ae:3a:68:cc:99:33:98:
64:08:6b:35:05:d2:67:77:7a:96:c1:1f:b8:e3:a0:2d:68:43:
fe:6a:3f:45:d5:3b:6d:5c:5e:45:fd:e5:f0:7f:82:5a:91:09:
9a:3e:e9:27:65:2d:65:fb:f6:07:6d:5a:0b:2b:fc:bd:a5:21:
05:ee:82:37:bd:9e:26:7c:ec:5d:90:30:33:19:5b:22:f1:5d:
9d:f4:a9:61:97:9e:5f:2b:ce:9c:e4:6e:17:74:62:62:5e:2b:
ad:aa:3a:d7:9e:5a:fe:5d:48:41:06:ca:ba:2d:4b:db:7b:f1:
c3:90:4e:28:af:4b:53:c4:23:93:bb:20:42:99:b0:fb:08:fc:
10:5d:04:22:82:13:1f:56:c4:e3:9f:0f:70:11:63:5d:85:0d:
8e:a5:c9:2f:c8:b8:ad:bf:c0:2f:bb:fc:e0:ca:e9:4a:1d:56:
bd:a8:35:e4:b6:0c:4b:60:45:8c:c9:2e:4c:ff:c5:d5:79:e4:
22:f3:09:77:d7:4e:16:27:8d:70:a3:a8:26:18:7b:97:8e:eb:
37:71:aa:df:aa:18:2b:66:3e:6d:f6:3b:d5:8d:bf:db:a0:27:
2b:f7:e3:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13rZ0wXUKluCvGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjM1MloXDTI1MDczMDE2MjM1MlowLzEtMCsGA1UEAxMk
MjUyNDNkNTAtZmM2My00ZjBiLTgwNWQtNDMxODQ1ZmQ5YzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsROxkTNO1ryR1Q2NQLCZv+bQhFVKx61HxGAN
4us7vLdDlMvWC1dqv4I8lIe5zrRAJ9O2U1QC9RRzRD9zW0eroan4WXxZUGNCcbnF
1xJUO0tgw+zoLdLIkUQfung31IamQUfRslIS4FAtRymj02NOnJzNfMh7qQdoVCnQ
0dbJ2M5NguJjXupttTJsDP84jvHDCbRzoAajSRm6FPkitbVYz3O5K14bCpBFEAEy
NYnym3CK0YG0v7tXX9SpaHy2+g7biS8VwF/+GV7q2LJdfHnC5JgorWHz1xCGsuyD
Y8KGdCGtRU8x4BZZTLcNf0xiIp3zVEjR3q5Jm4o2mUTyeePhdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLq0UnO0tBtmvGEx19cXAEceDLeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY1ZDk5ZDktNTZjMS0z
MDM1LThmMmYtZDAwNmMxZTM5MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqwGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWzfQDFap1Ih8aKQ5BhwT5IIjXoD12S4N7N7+ZsrjpozJkzmGQIazUF
0md3epbBH7jjoC1oQ/5qP0XVO21cXkX95fB/glqRCZo+6SdlLWX79gdtWgsr/L2l
IQXugje9niZ87F2QMDMZWyLxXZ30qWGXnl8rzpzkbhd0YmJeK62qOteeWv5dSEEG
yrotS9t78cOQTiivS1PEI5O7IEKZsPsI/BBdBCKCEx9WxOOfD3ARY12FDY6lyS/I
uK2/wC+7/ODK6UodVr2oNeS2DEtgRYzJLkz/xdV55CLzCXfXThYnjXCjqCYYe5eO
6zdxqt+qGCtmPm32O9WNv9ugJyv34zY=
-----END CERTIFICATE-----
Generated at Thu May 15 02:49:10 2025 by rpki-client