Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9f07001-95e2-39d6-8431-70996ebe2079.roa
File: c9f07001-95e2-39d6-8431-70996ebe2079.roa (raw, json)
Hash identifier: YtMz1RxY/3pSnkqAcp0QEGoODlh6Tmp+PNKzqcPWLFI=
Subject key identifier: 5C:1C:45:36:BB:12:FA:8B:C3:91:EF:7C:C5:A4:1E:DE:D9:4B:F7:E5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD0EC38623876A8336C000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9f07001-95e2-39d6-8431-70996ebe2079.roa
Signing time: Thu 01 May 2025 16:20:32 +0000
ROA not before: Thu 01 May 2025 16:20:32 +0000
ROA not after: Wed 30 Jul 2025 16:20:32 +0000
asID: 22773
IP address blocks: 68.2.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:0e:c3:86:23:87:6a:83:36:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:32 2025 GMT
Not After : Jul 30 16:20:32 2025 GMT
Subject: CN=c90d52ea-8204-45f4-bcf8-e1ad1ec443b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:ca:f6:d6:94:37:9c:20:d1:4a:80:98:5d:
39:25:16:ae:d5:76:35:cb:3d:31:27:11:7b:02:d4:
c2:c6:29:e1:21:74:93:71:62:66:29:02:57:95:e4:
ba:59:00:5c:b5:ac:23:5f:2c:c5:94:5b:29:12:5b:
f5:71:27:bf:63:7e:17:8d:3e:07:f5:ca:94:db:a2:
d4:af:c4:02:2d:74:c3:31:eb:60:bb:20:de:09:9d:
ac:45:1d:98:41:26:c9:b0:8b:e6:40:55:d0:a4:c7:
93:ab:86:9e:c5:a8:d5:23:69:a7:76:74:a5:14:6b:
9a:5e:bd:ed:bc:79:4a:7f:77:6a:f1:18:f1:6f:67:
02:d4:73:33:81:e0:f2:02:32:3c:3d:f4:0a:2f:0a:
f8:6f:8c:b0:a8:26:42:7f:99:f8:96:80:ed:c8:3e:
f9:a5:ae:db:5d:bf:d5:e0:2c:ec:79:d1:a4:56:cc:
6f:26:48:77:f1:fc:29:19:fb:35:cf:a5:52:06:20:
fc:85:15:07:6b:20:9b:ec:ac:32:58:6e:d0:e2:81:
9e:39:d0:53:51:a3:82:39:75:57:61:17:63:c1:1b:
b1:9c:4f:ec:39:60:01:8b:e8:fd:9e:d2:59:f4:d6:
5b:4a:76:00:f7:02:e4:c5:ce:a3:3b:78:74:f5:b7:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:45:36:BB:12:FA:8B:C3:91:EF:7C:C5:A4:1E:DE:D9:4B:F7:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9f07001-95e2-39d6-8431-70996ebe2079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:39:c2:2e:5f:6d:96:37:ef:7a:36:97:5e:2e:14:e0:23:c5:
0c:3c:84:f7:c9:6a:4f:05:68:51:b8:ba:5c:83:a3:f7:23:f8:
39:a4:5f:78:16:33:92:61:c9:ac:de:d4:15:a0:9f:9d:c2:7b:
0c:03:00:8f:e3:5b:c2:0e:76:49:af:f4:ce:f7:69:36:83:21:
22:c7:c9:e9:b6:6f:ba:26:da:ba:c5:ad:9e:28:5b:98:d2:45:
29:4c:60:0a:c8:d7:f9:ab:ad:64:ab:77:5b:c2:5f:33:d5:8c:
cc:d0:a9:82:01:27:22:be:cc:9e:87:e2:81:09:8b:21:9a:ac:
10:f2:a8:39:28:23:e9:f6:b6:4c:fb:99:7e:84:5d:4d:0e:8d:
22:86:96:ae:57:6d:91:2f:6f:95:91:69:74:27:e3:66:a7:2a:
1a:f9:1e:db:ed:57:b8:f0:03:2f:29:be:a9:24:19:cf:e0:ff:
5d:c9:d7:4f:36:a0:1b:56:ec:9f:0f:41:f0:e2:39:6f:95:16:
ba:aa:77:5f:44:83:c0:e4:a7:89:22:a5:c2:0f:ed:c1:a7:c2:
44:1e:8d:d1:84:29:80:be:c2:d7:63:8a:0e:3c:d7:de:48:13:
9b:fa:04:17:7c:6b:2c:17:ca:4a:b1:bc:d3:c3:c9:80:e9:dd:
92:af:66:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13Q7DhiOHaoM2wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjAzMloXDTI1MDczMDE2MjAzMlowLzEtMCsGA1UEAxMk
YzkwZDUyZWEtODIwNC00NWY0LWJjZjgtZTFhZDFlYzQ0M2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rzK9taUN5wg0UqAmF05JRau1XY1yz0xJxF7
AtTCxinhIXSTcWJmKQJXleS6WQBctawjXyzFlFspElv1cSe/Y34XjT4H9cqU26LU
r8QCLXTDMetguyDeCZ2sRR2YQSbJsIvmQFXQpMeTq4aexajVI2mndnSlFGuaXr3t
vHlKf3dq8Rjxb2cC1HMzgeDyAjI8PfQKLwr4b4ywqCZCf5n4loDtyD75pa7bXb/V
4CzsedGkVsxvJkh38fwpGfs1z6VSBiD8hRUHayCb7KwyWG7Q4oGeOdBTUaOCOXVX
YRdjwRuxnE/sOWABi+j9ntJZ9NZbSnYA9wLkxc6jO3h09bc6OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwcRTa7EvqLw5HvfMWkHt7ZS/flMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzlmMDcwMDEtOTVlMi0z
OWQ2LTg0MzEtNzA5OTZlYmUyMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHI5wi5fbZY373o2l14uFOAjxQw8hPfJak8FaFG4ulyDo/cj+DmkX3gW
M5Jhyaze1BWgn53CewwDAI/jW8IOdkmv9M73aTaDISLHyem2b7om2rrFrZ4oW5jS
RSlMYArI1/mrrWSrd1vCXzPVjMzQqYIBJyK+zJ6H4oEJiyGarBDyqDkoI+n2tkz7
mX6EXU0OjSKGlq5XbZEvb5WRaXQn42anKhr5HtvtV7jwAy8pvqkkGc/g/13J1082
oBtW7J8PQfDiOW+VFrqqd19Eg8Dkp4kipcIP7cGnwkQejdGEKYC+wtdjig48195I
E5v6BBd8aywXykqxvNPDyYDp3ZKvZu0=
-----END CERTIFICATE-----
Generated at Thu May 15 02:42:46 2025 by rpki-client