Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca179dc0-5722-372d-88d9-f036b95c548f.roa
File: ca179dc0-5722-372d-88d9-f036b95c548f.roa (raw, json)
Hash identifier: 8G15QLdq3kWQ613zT4F7hkoLdd/28PpZ/ga5QIs3Uv0=
Subject key identifier: 8A:AA:A7:FA:C2:C2:A3:63:45:07:DF:57:E6:09:A9:5D:A2:AD:77:20
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0138CCB037623196DDED0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca179dc0-5722-372d-88d9-f036b95c548f.roa
Signing time: Thu 01 May 2025 16:26:37 +0000
ROA not before: Thu 01 May 2025 16:26:37 +0000
ROA not after: Wed 30 Jul 2025 16:26:37 +0000
asID: 22773
IP address blocks: 72.208.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:13:8c:cb:03:76:23:19:6d:de:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:26:37 2025 GMT
Not After : Jul 30 16:26:37 2025 GMT
Subject: CN=7ec5405b-3dff-43d6-b1ae-b2079f074c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:b3:8a:73:b4:2f:8d:a6:07:d3:b6:8c:54:
6a:c2:eb:7b:60:fd:6d:6e:20:40:9b:1b:8e:e1:fa:
42:8b:e9:88:cf:5d:d3:87:78:da:de:43:67:07:35:
04:6c:ce:83:b6:1d:c7:f9:a1:2f:de:88:50:dd:73:
ad:5a:c2:40:04:ab:e7:a4:b7:91:96:d3:af:8e:a4:
51:b6:16:70:e0:a0:c8:33:60:de:4a:90:f8:8b:7e:
91:0b:a8:df:ae:c5:40:ea:4c:91:3e:ab:e1:ae:2a:
07:10:29:d9:aa:80:e8:0f:1f:e0:60:81:a3:43:c2:
78:4d:40:7e:6c:c3:11:8b:e1:d8:9e:6f:51:01:28:
49:7f:1e:e7:de:66:c1:29:96:50:93:2a:fb:2f:45:
80:7f:02:c7:01:b6:04:84:94:02:0a:1e:2b:d8:92:
e0:94:c4:5e:f6:f4:32:76:ad:e3:e5:2e:96:eb:c3:
02:26:2a:48:35:5a:cd:14:cd:41:29:15:42:f4:f6:
06:ff:67:27:12:2e:14:a4:8f:06:57:ba:68:0e:40:
9c:10:2b:78:15:03:5b:e9:d3:cb:3a:e8:33:e9:42:
58:a7:4d:00:99:8e:6a:e5:48:06:60:28:5d:30:57:
1b:9e:e0:6a:48:ad:33:79:be:ee:b6:99:23:4a:ae:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:A7:FA:C2:C2:A3:63:45:07:DF:57:E6:09:A9:5D:A2:AD:77:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca179dc0-5722-372d-88d9-f036b95c548f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:02:b5:c2:ef:eb:f1:ed:27:a7:2d:cb:58:17:24:44:e8:3f:
e7:fa:49:93:be:89:ee:4c:a8:3a:60:0e:8a:16:55:9a:8a:3b:
db:6d:71:2d:0c:92:a1:9e:3c:05:6e:bc:f4:b3:05:77:f8:e1:
32:1c:1a:bb:8f:5f:f8:eb:11:78:ec:7a:e2:68:92:a6:c1:91:
bb:78:9d:be:93:a5:cf:70:ad:8e:3a:af:fe:cd:31:0d:07:75:
f8:15:22:74:2c:98:ac:83:b5:ad:fb:9f:93:d4:8a:6c:87:a8:
ce:a0:4a:76:3b:03:e3:aa:43:6c:bc:4e:d6:0f:1f:22:36:a2:
80:94:35:6a:4b:89:50:66:4d:d0:f2:8f:cd:2a:3e:7d:05:7b:
29:91:6d:c1:9b:95:4b:18:da:af:3f:dd:98:9b:a8:ce:fc:72:
d7:03:a4:55:6e:56:65:b3:0a:cd:a4:d2:c0:6e:46:62:fb:f7:
78:a6:2f:0b:d2:31:38:dc:c6:6f:68:aa:5f:ae:f2:7a:f2:b4:
c9:75:2b:1c:55:ec:3f:92:4c:11:14:95:e4:7f:7c:fc:79:6c:
c7:e9:5b:14:52:38:2c:14:df:e1:c7:61:bc:74:71:44:bd:08:
59:af:da:74:4d:5e:ac:06:4e:e6:0e:fc:67:1c:a4:72:c9:e7:
e3:2b:de:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14BOMywN2Ixlt3tAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjYzN1oXDTI1MDczMDE2MjYzN1owLzEtMCsGA1UEAxMk
N2VjNTQwNWItM2RmZi00M2Q2LWIxYWUtYjIwNzlmMDc0Yzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1azinO0L42mB9O2jFRqwut7YP1tbiBAmxuO
4fpCi+mIz13Th3ja3kNnBzUEbM6Dth3H+aEv3ohQ3XOtWsJABKvnpLeRltOvjqRR
thZw4KDIM2DeSpD4i36RC6jfrsVA6kyRPqvhrioHECnZqoDoDx/gYIGjQ8J4TUB+
bMMRi+HYnm9RAShJfx7n3mbBKZZQkyr7L0WAfwLHAbYEhJQCCh4r2JLglMRe9vQy
dq3j5S6W68MCJipINVrNFM1BKRVC9PYG/2cnEi4UpI8GV7poDkCcECt4FQNb6dPL
Ougz6UJYp00AmY5q5UgGYChdMFcbnuBqSK0zeb7utpkjSq6PiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIqqp/rCwqNjRQffV+YJqV2irXcgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ExNzlkYzAtNTcyMi0z
NzJkLTg4ZDktZjAzNmI5NWM1NDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUCtcLv6/HtJ6cty1gXJEToP+f6SZO+ie5MqDpgDooWVZqKO9ttcS0M
kqGePAVuvPSzBXf44TIcGruPX/jrEXjseuJokqbBkbt4nb6Tpc9wrY46r/7NMQ0H
dfgVInQsmKyDta37n5PUimyHqM6gSnY7A+OqQ2y8TtYPHyI2ooCUNWpLiVBmTdDy
j80qPn0FeymRbcGblUsY2q8/3ZibqM78ctcDpFVuVmWzCs2k0sBuRmL793imLwvS
MTjcxm9oql+u8nrytMl1KxxV7D+STBEUleR/fPx5bMfpWxRSOCwU3+HHYbx0cUS9
CFmv2nRNXqwGTuYO/GccpHLJ5+Mr3nU=
-----END CERTIFICATE-----
Generated at Thu May 15 02:30:39 2025 by rpki-client