Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb815665-1ea0-34c3-be5c-513c950798be.roa
File: cb815665-1ea0-34c3-be5c-513c950798be.roa (raw, json)
Hash identifier: 0wgIYnr/Ru3P7fX6rCYO9fW5fn/sTyyMx1ycKHNSQyY=
Subject key identifier: 1A:37:03:A4:E9:63:D5:8C:2E:D6:05:26:E5:A0:53:F5:C9:EE:7D:65
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FABD9C5912A776435A8180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb815665-1ea0-34c3-be5c-513c950798be.roa
Signing time: Thu 01 May 2025 17:20:21 +0000
ROA not before: Thu 01 May 2025 17:20:21 +0000
ROA not after: Wed 30 Jul 2025 17:20:21 +0000
asID: 22773
IP address blocks: 72.193.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:bd:9c:59:12:a7:76:43:5a:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:20:21 2025 GMT
Not After : Jul 30 17:20:21 2025 GMT
Subject: CN=9575bc0a-b9e1-4704-9794-f3f461124a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:f4:70:4b:96:9f:26:cb:6c:00:be:e8:15:
ab:9c:4b:81:77:f7:22:ae:b1:c6:23:fc:dd:9d:fc:
bd:e3:f4:b8:cb:1a:a6:39:ff:8e:d8:1b:87:1c:fa:
c2:e0:93:aa:97:0d:e4:8a:6d:7c:31:17:44:e8:a9:
ac:8e:22:dd:97:bb:e6:9c:63:15:76:44:7e:b3:ca:
71:2e:ea:d3:f7:63:fd:19:d2:73:36:28:48:fb:b0:
c6:29:04:f1:5d:20:37:05:40:14:da:5e:9d:88:c5:
4c:1b:89:48:aa:d4:7e:c2:9c:5d:05:ec:db:cc:18:
8d:87:04:c7:61:0b:5f:21:81:36:d2:2c:36:a4:fc:
71:27:3a:ee:20:88:27:3a:de:01:0d:aa:7f:f4:67:
ca:2d:e0:27:2f:9f:e8:1a:15:72:cf:25:75:bc:ad:
28:e5:b5:ef:a5:f7:33:11:bf:a2:22:bd:36:e7:e2:
1f:20:20:07:e3:e4:53:e4:33:17:20:7c:c2:ee:bf:
dd:5a:e9:a0:05:66:5d:1a:c4:80:91:da:28:15:97:
ef:d4:63:f5:41:47:c6:29:71:c3:24:eb:32:6e:1d:
db:25:ca:58:8b:5a:49:b6:da:4e:23:37:bd:85:e8:
bf:69:09:10:ba:64:63:86:91:48:a8:9b:51:26:24:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:37:03:A4:E9:63:D5:8C:2E:D6:05:26:E5:A0:53:F5:C9:EE:7D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb815665-1ea0-34c3-be5c-513c950798be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.193.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:34:88:9b:bc:b1:f7:1e:fc:ae:79:27:df:dc:a4:24:5d:0d:
88:7a:8b:f0:b3:80:c8:91:ea:91:b3:45:8e:7c:61:3c:90:0c:
6d:f7:e2:a8:fd:ab:49:32:c1:cc:2e:81:91:31:f2:cf:b7:06:
5d:e4:9d:29:cd:07:49:5e:bc:15:6d:1d:c9:c2:92:38:57:c4:
79:67:c1:bf:0a:3d:b3:ea:8f:5b:d4:82:96:94:f9:fb:e6:a0:
50:cf:02:2c:27:98:06:34:1b:18:2d:dd:16:23:88:30:26:ba:
ae:66:8e:9f:21:87:22:6b:79:c0:9e:28:df:21:ca:23:af:d5:
0e:f8:7a:d3:34:f9:5c:ba:06:5b:d4:2b:e3:1d:0e:31:3d:ad:
25:6b:b0:d5:74:ce:8d:0b:1c:02:39:ba:b8:87:09:d3:85:71:
c4:19:f2:25:28:6f:aa:dc:5f:a2:09:35:02:f4:70:2c:3c:93:
25:f0:80:50:3d:df:ee:71:dc:68:f6:57:ce:07:7a:c1:51:df:
f6:52:fe:36:1e:28:46:a5:75:f3:af:96:14:d0:d3:7c:78:4f:
da:0b:89:14:59:48:d2:6e:2a:39:a7:01:6c:af:ec:3a:1c:53:
d3:b3:72:54:28:2d:d9:60:18:fe:f2:2d:d5:7e:9a:c4:dd:cc:
c8:db:48:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+r2cWRKndkNagYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MjAyMVoXDTI1MDczMDE3MjAyMVowLzEtMCsGA1UEAxMk
OTU3NWJjMGEtYjllMS00NzA0LTk3OTQtZjNmNDYxMTI0YTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYP0cEuWnybLbAC+6BWrnEuBd/cirrHGI/zd
nfy94/S4yxqmOf+O2BuHHPrC4JOqlw3kim18MRdE6KmsjiLdl7vmnGMVdkR+s8px
LurT92P9GdJzNihI+7DGKQTxXSA3BUAU2l6diMVMG4lIqtR+wpxdBezbzBiNhwTH
YQtfIYE20iw2pPxxJzruIIgnOt4BDap/9GfKLeAnL5/oGhVyzyV1vK0o5bXvpfcz
Eb+iIr025+IfICAH4+RT5DMXIHzC7r/dWumgBWZdGsSAkdooFZfv1GP1QUfGKXHD
JOsybh3bJcpYi1pJttpOIze9hei/aQkQumRjhpFIqJtRJiQb0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBo3A6TpY9WMLtYFJuWgU/XJ7n1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I4MTU2NjUtMWVhMC0z
NGMzLWJlNWMtNTEzYzk1MDc5OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACE0iJu8sfce/K55J9/cpCRdDYh6i/CzgMiR6pGzRY58YTyQDG334qj9
q0kywcwugZEx8s+3Bl3knSnNB0levBVtHcnCkjhXxHlnwb8KPbPqj1vUgpaU+fvm
oFDPAiwnmAY0Gxgt3RYjiDAmuq5mjp8hhyJrecCeKN8hyiOv1Q74etM0+Vy6BlvU
K+MdDjE9rSVrsNV0zo0LHAI5uriHCdOFccQZ8iUob6rcX6IJNQL0cCw8kyXwgFA9
3+5x3Gj2V84HesFR3/ZS/jYeKEaldfOvlhTQ03x4T9oLiRRZSNJuKjmnAWyv7Doc
U9OzclQoLdlgGP7yLdV+msTdzMjbSEw=
-----END CERTIFICATE-----
Generated at Thu May 15 08:52:45 2025 by rpki-client