Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caa4872e-39d6-3222-b8ea-638b79a3b4a6.roa
File: caa4872e-39d6-3222-b8ea-638b79a3b4a6.roa (raw, json)
Hash identifier: h471eUEXC17PVUS38avGDrV7jcBQwMlvgIDu8LmzPFg=
Subject key identifier: 29:77:AC:47:AA:66:06:81:17:CC:A0:40:8A:B4:3C:69:30:31:37:A7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA9844650B905CCAC1DA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caa4872e-39d6-3222-b8ea-638b79a3b4a6.roa
Signing time: Thu 01 May 2025 17:20:03 +0000
ROA not before: Thu 01 May 2025 17:20:03 +0000
ROA not after: Wed 30 Jul 2025 17:20:03 +0000
asID: 22773
IP address blocks: 70.189.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:98:44:65:0b:90:5c:ca:c1:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:03 2025 GMT
Not After : Jul 30 17:20:03 2025 GMT
Subject: CN=e53d1d4d-7030-496d-ba26-8a08751d8a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:a9:06:ee:2e:10:03:ff:e7:7c:dc:74:a1:
e2:ef:d3:5f:b6:89:d4:f0:df:d3:c9:63:51:99:e0:
a2:5f:fc:74:1e:87:6c:a8:76:84:33:52:15:4e:c0:
01:4d:5c:d3:ff:b8:52:98:73:b2:ff:f0:4b:92:b6:
53:db:a3:fc:24:3f:d3:6f:74:45:60:f7:78:fb:cb:
87:15:d1:d2:67:5e:8e:9a:7f:69:b7:ea:2d:a0:4b:
d8:c0:87:1f:a2:74:aa:14:f7:19:c4:a3:08:0b:bd:
a5:8c:61:f4:83:c3:01:26:a2:3c:92:d9:7d:1d:a6:
e5:f9:ee:94:f0:22:d8:77:05:d4:8a:32:e6:bd:75:
27:bc:a4:04:b4:c7:ef:ed:38:5e:de:87:5e:56:9f:
89:5a:92:eb:1a:c6:b5:54:d0:99:fc:8b:3d:9c:67:
7e:46:be:13:48:33:ca:5e:90:0c:a8:68:f0:15:74:
44:c3:dc:99:66:df:92:70:f4:7f:c3:cf:84:ba:39:
77:d9:33:26:f9:32:1b:ee:23:a2:43:f1:cf:c0:d1:
52:03:c9:b8:e7:57:e6:0d:e5:d8:d1:17:c9:dd:e0:
4a:28:ca:5e:cd:7d:e5:94:d1:a6:8b:92:b6:7f:41:
3c:8a:ec:93:0f:45:5c:4f:77:eb:77:2d:fb:50:2d:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:77:AC:47:AA:66:06:81:17:CC:A0:40:8A:B4:3C:69:30:31:37:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/caa4872e-39d6-3222-b8ea-638b79a3b4a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.189.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:57:66:4c:93:c3:da:57:1a:a0:d3:88:46:99:4d:f2:e5:ed:
b2:71:6b:6d:ed:79:aa:23:84:ff:16:89:c7:e2:59:77:36:cd:
76:7e:0e:d0:77:c3:d9:36:81:e8:2b:6d:64:b1:48:2f:18:9d:
e8:87:28:5c:1d:93:8b:97:9a:eb:a9:c4:a6:54:cc:ff:3f:95:
d7:5b:65:f2:ee:67:4e:14:c9:f5:ff:c6:ef:53:39:67:35:c7:
ee:d9:28:06:b9:65:6f:e6:cb:d9:c7:98:6d:4c:ff:70:f5:6f:
50:f4:98:bf:12:7b:6b:6a:04:7f:ab:8e:29:ed:f0:0f:5e:34:
b2:5f:dc:02:37:02:d9:85:66:a5:e3:a1:ef:c3:1a:63:64:7d:
e1:03:44:bc:0d:35:c1:9d:eb:ab:94:91:5e:e2:9a:0c:dc:0d:
9b:9b:aa:62:15:b8:a5:08:b2:8b:16:ec:75:3b:a8:60:c5:2c:
d9:60:52:2c:4c:af:2a:85:f9:c0:7a:0c:10:c3:32:7d:ba:e8:
2e:96:2a:fb:27:f2:89:bd:70:a4:8b:9f:18:5f:01:e2:88:94:
b0:8d:ab:c9:24:5f:7b:e6:f0:d3:40:be:da:62:b2:07:24:9e:
b1:1a:24:62:4c:f0:06:c2:c5:82:0d:4d:41:de:36:94:90:03:
80:07:e5:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+phEZQuQXMrB2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MjAwM1oXDTI1MDczMDE3MjAwM1owLzEtMCsGA1UEAxMk
ZTUzZDFkNGQtNzAzMC00OTZkLWJhMjYtOGEwODc1MWQ4YTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy2pBu4uEAP/53zcdKHi79NftonU8N/TyWNR
meCiX/x0HodsqHaEM1IVTsABTVzT/7hSmHOy//BLkrZT26P8JD/Tb3RFYPd4+8uH
FdHSZ16Omn9pt+otoEvYwIcfonSqFPcZxKMIC72ljGH0g8MBJqI8ktl9Habl+e6U
8CLYdwXUijLmvXUnvKQEtMfv7The3odeVp+JWpLrGsa1VNCZ/Is9nGd+Rr4TSDPK
XpAMqGjwFXREw9yZZt+ScPR/w8+Eujl32TMm+TIb7iOiQ/HPwNFSA8m451fmDeXY
0RfJ3eBKKMpezX3llNGmi5K2f0E8iuyTD0VcT3frdy37UC3gNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCl3rEeqZgaBF8ygQIq0PGkwMTenMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FhNDg3MmUtMzlkNi0z
MjIyLWI4ZWEtNjM4Yjc5YTNiNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVXZkyTw9pXGqDTiEaZTfLl7bJxa23teaojhP8WicfiWXc2zXZ+DtB3
w9k2gegrbWSxSC8YneiHKFwdk4uXmuupxKZUzP8/lddbZfLuZ04UyfX/xu9TOWc1
x+7ZKAa5ZW/my9nHmG1M/3D1b1D0mL8Se2tqBH+rjint8A9eNLJf3AI3AtmFZqXj
oe/DGmNkfeEDRLwNNcGd66uUkV7imgzcDZubqmIVuKUIsosW7HU7qGDFLNlgUixM
ryqF+cB6DBDDMn266C6WKvsn8om9cKSLnxhfAeKIlLCNq8kkX3vm8NNAvtpisgck
nrEaJGJM8AbCxYINTUHeNpSQA4AH5cU=
-----END CERTIFICATE-----
Generated at Thu May 15 08:08:36 2025 by rpki-client