Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf609bff-2989-3d60-a7a7-ee0f75c56012.roa
File: bf609bff-2989-3d60-a7a7-ee0f75c56012.roa (raw, json)
Hash identifier: a1zKHDZtM6FPQ4ybz5xyPu/vrnni6UFHcjaFe6qcLho=
Subject key identifier: B3:4C:A7:35:7D:8B:CF:78:4A:0E:D6:79:F6:07:9D:DA:F5:F0:9B:B7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDD546444935210F2E1700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf609bff-2989-3d60-a7a7-ee0f75c56012.roa
Signing time: Thu 01 May 2025 16:22:06 +0000
ROA not before: Thu 01 May 2025 16:22:06 +0000
ROA not after: Wed 30 Jul 2025 16:22:06 +0000
asID: 22773
IP address blocks: 68.109.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:d5:46:44:49:35:21:0f:2e:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:06 2025 GMT
Not After : Jul 30 16:22:06 2025 GMT
Subject: CN=4063425e-f70a-4787-bc1d-c02972a26c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:e3:04:68:a5:ed:71:7c:ff:0c:2c:33:49:
f3:1d:24:6e:f2:1e:e1:2e:8c:79:f8:51:39:89:8b:
bf:81:f3:37:60:89:ef:07:c9:03:d4:0d:52:a7:f0:
8f:a0:d7:0e:dd:bb:db:17:45:bd:42:bf:a3:36:3d:
d0:a6:e0:3b:21:8f:b8:61:9d:7e:20:0e:b9:b1:74:
51:ee:00:88:79:a9:27:cc:e7:bf:af:ba:57:99:2a:
16:7a:1c:3a:60:7e:a3:65:a7:0e:60:b2:c5:b4:ce:
83:04:34:82:33:20:81:01:e4:5e:d9:8e:78:c2:7b:
c1:7b:1f:7c:c7:d9:ef:94:7c:ed:9b:1f:0e:ed:2f:
47:16:49:b0:4c:b3:9f:da:4d:3a:59:bd:34:32:11:
4a:88:25:d7:e4:aa:e8:bd:8a:0a:86:13:34:25:61:
cd:9d:3b:a5:d7:03:fe:f9:64:82:5c:8b:85:35:07:
54:26:26:53:a4:70:32:03:39:6c:89:54:7b:4d:f9:
18:af:2d:0f:6b:14:1d:38:03:05:02:b2:17:bc:44:
04:66:e7:2e:1f:2a:50:34:9e:f5:a5:f7:58:d2:1f:
46:5a:9e:11:73:81:54:a4:b2:ce:0e:4a:43:ed:28:
d7:24:a4:f7:13:21:ea:53:72:59:17:2e:76:70:ae:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4C:A7:35:7D:8B:CF:78:4A:0E:D6:79:F6:07:9D:DA:F5:F0:9B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf609bff-2989-3d60-a7a7-ee0f75c56012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.109.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:cc:be:fb:c8:ab:b0:36:dc:bf:c2:72:2b:95:34:92:2c:06:
39:74:37:cb:e0:d6:85:a0:b9:7b:9b:6f:ef:83:1a:c4:5f:63:
34:4c:24:b3:e5:c2:57:70:c2:da:98:c6:82:a9:30:f5:36:23:
a2:02:54:86:0f:4f:eb:8d:78:b4:b4:b0:69:ff:65:21:18:f8:
46:ec:3d:42:07:98:59:0f:cc:a7:d0:f0:64:a8:61:f7:8c:9c:
c2:2b:60:06:9b:0d:29:4e:18:9a:65:45:53:e3:cb:71:89:94:
36:6e:dc:4e:1b:7e:e8:91:5c:af:36:94:41:4a:9a:d7:8e:f3:
d8:8b:2b:2e:e4:58:1a:43:bf:9d:df:3c:e2:d1:3a:05:6e:aa:
eb:ad:8a:d3:27:b4:b2:2b:4a:97:5d:52:ed:5f:be:31:4f:8e:
24:bf:57:48:c4:27:5a:3d:fc:66:80:38:ad:87:35:e5:0a:f1:
14:0d:4c:80:6d:1b:86:8d:c4:1a:3f:9b:cc:46:81:1e:0d:0b:
6a:e6:fc:ca:09:6b:fd:61:20:8a:5c:30:ea:af:a1:4a:79:ef:
58:f5:1b:0e:44:55:6c:2e:d1:54:c6:40:00:4d:cb:1d:92:d2:
2d:79:24:95:8c:cc:3e:bd:86:0e:90:12:21:20:d4:15:af:44:
f2:0e:dd:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13dVGREk1IQ8uFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjIwNloXDTI1MDczMDE2MjIwNlowLzEtMCsGA1UEAxMk
NDA2MzQyNWUtZjcwYS00Nzg3LWJjMWQtYzAyOTcyYTI2YzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdnjBGil7XF8/wwsM0nzHSRu8h7hLox5+FE5
iYu/gfM3YInvB8kD1A1Sp/CPoNcO3bvbF0W9Qr+jNj3QpuA7IY+4YZ1+IA65sXRR
7gCIeaknzOe/r7pXmSoWehw6YH6jZacOYLLFtM6DBDSCMyCBAeRe2Y54wnvBex98
x9nvlHztmx8O7S9HFkmwTLOf2k06Wb00MhFKiCXX5KrovYoKhhM0JWHNnTul1wP+
+WSCXIuFNQdUJiZTpHAyAzlsiVR7TfkYry0PaxQdOAMFArIXvEQEZucuHypQNJ71
pfdY0h9GWp4Rc4FUpLLODkpD7SjXJKT3EyHqU3JZFy52cK6dCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLNMpzV9i894Sg7WefYHndr18Ju3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY2MDliZmYtMjk4OS0z
ZDYwLWE3YTctZWUwZjc1YzU2MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG2UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3MvvvIq7A23L/CciuVNJIsBjl0N8vg1oWguXubb++DGsRfYzRMJLPl
wldwwtqYxoKpMPU2I6ICVIYPT+uNeLS0sGn/ZSEY+EbsPUIHmFkPzKfQ8GSoYfeM
nMIrYAabDSlOGJplRVPjy3GJlDZu3E4bfuiRXK82lEFKmteO89iLKy7kWBpDv53f
POLROgVuquutitMntLIrSpddUu1fvjFPjiS/V0jEJ1o9/GaAOK2HNeUK8RQNTIBt
G4aNxBo/m8xGgR4NC2rm/MoJa/1hIIpcMOqvoUp571j1Gw5EVWwu0VTGQABNyx2S
0i15JJWMzD69hg6QEiEg1BWvRPIO3dI=
-----END CERTIFICATE-----
Generated at Thu May 15 02:42:38 2025 by rpki-client