Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf5101f8-b213-38bf-95e4-7bb6d65fe702.roa
File: cf5101f8-b213-38bf-95e4-7bb6d65fe702.roa (raw, json)
Hash identifier: mBpS5ZPSV4Eb9UnQu/rn1B8DKqGL2s/c9WpkYqwctmM=
Subject key identifier: 80:B9:2C:F4:34:BC:48:79:F7:B2:7E:C2:33:E1:37:48:5A:B8:89:1B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDA86A693F46D27522E200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf5101f8-b213-38bf-95e4-7bb6d65fe702.roa
Signing time: Thu 01 May 2025 16:21:45 +0000
ROA not before: Thu 01 May 2025 16:21:45 +0000
ROA not after: Wed 30 Jul 2025 16:21:45 +0000
asID: 22773
IP address blocks: 68.104.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:a8:6a:69:3f:46:d2:75:22:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:45 2025 GMT
Not After : Jul 30 16:21:45 2025 GMT
Subject: CN=73aea1de-cad5-4dfc-ad03-972c4e582e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:fa:81:e7:e3:4a:d6:89:41:0c:ff:09:be:
0b:eb:6f:1a:6a:6e:a5:b8:57:1b:4a:15:07:1d:cb:
3d:00:8b:ef:84:41:d1:6f:ee:b6:15:cc:55:ab:84:
35:5e:db:cf:fe:6f:92:66:61:a8:cf:fc:69:61:2a:
12:d0:f9:6b:de:82:18:06:53:d1:bc:cc:df:75:be:
3d:55:8f:2c:d7:f0:6d:f4:94:82:f7:c7:20:07:15:
b0:ce:45:06:19:32:e0:b9:68:0d:a5:59:7e:41:7d:
94:a7:b2:e2:03:cd:78:d9:c6:4f:1f:0a:29:f4:45:
a4:96:e0:0a:ce:0b:c4:79:db:30:c4:39:a1:ec:a2:
82:0e:7f:e6:db:32:cb:9a:4a:c0:39:a7:31:ee:5f:
95:25:b7:e0:3f:70:07:48:d2:31:47:6a:58:5f:96:
26:4b:a9:e2:22:90:86:59:21:69:fb:55:d6:0e:07:
3b:58:89:fc:84:4a:ae:b2:9a:22:4d:64:53:c3:f2:
5b:23:e5:e3:95:4a:52:86:6d:9a:1f:ef:ad:b8:49:
40:12:f9:bc:85:5f:19:06:f0:73:ad:d9:d5:ee:0f:
66:37:7f:f6:30:10:ee:e8:76:dc:4b:e4:c2:c2:d7:
b7:ba:16:46:91:72:62:a4:dc:48:f5:e2:38:c8:34:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:2C:F4:34:BC:48:79:F7:B2:7E:C2:33:E1:37:48:5A:B8:89:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf5101f8-b213-38bf-95e4-7bb6d65fe702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.104.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:91:68:8d:6b:d6:b3:4f:c3:30:4b:85:e6:d6:56:68:0b:c1:
4e:3f:c7:1e:de:0f:6d:c1:2b:7b:b2:27:29:c6:bc:9a:b2:b6:
4e:5e:72:31:4c:10:8b:e2:c6:89:34:5b:09:52:fb:bf:04:ff:
1f:78:5e:9b:46:9b:68:ea:3f:c2:af:0a:f8:33:0c:37:14:17:
dc:b6:bf:5e:34:22:c6:47:2c:bf:8a:8b:8d:93:65:3d:24:83:
61:a0:19:bb:7c:f7:a6:65:40:6c:86:c8:25:d6:4f:63:16:56:
4e:7e:9c:f6:18:9b:24:7e:c5:7d:ff:72:d3:29:b2:c7:7a:c5:
35:3c:ff:43:1f:33:a6:01:65:2d:65:29:50:f3:a6:2f:16:d6:
04:c1:98:ef:6e:7b:87:78:1c:2a:8a:b2:09:04:91:9a:c3:4d:
2c:23:4e:1d:3c:c2:3e:7b:47:f9:1c:1b:37:b6:09:6a:82:80:
90:58:ac:b7:d2:13:84:14:2d:3d:3b:aa:7b:50:47:f8:f6:8b:
3b:b4:7d:23:f9:5d:41:96:a6:91:9e:23:3d:76:62:36:87:dd:
de:db:b4:d5:27:35:b7:37:5d:a6:74:d6:e0:4d:b2:02:0c:b9:
c5:e5:b7:17:89:1b:e7:b1:28:3a:44:54:0e:6f:d2:be:49:e9:
77:eb:23:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13ahqaT9G0nUi4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjE0NVoXDTI1MDczMDE2MjE0NVowLzEtMCsGA1UEAxMk
NzNhZWExZGUtY2FkNS00ZGZjLWFkMDMtOTcyYzRlNTgyZTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZz6gefjStaJQQz/Cb4L628aam6luFcbShUH
Hcs9AIvvhEHRb+62FcxVq4Q1XtvP/m+SZmGoz/xpYSoS0Plr3oIYBlPRvMzfdb49
VY8s1/Bt9JSC98cgBxWwzkUGGTLguWgNpVl+QX2Up7LiA8142cZPHwop9EWkluAK
zgvEedswxDmh7KKCDn/m2zLLmkrAOacx7l+VJbfgP3AHSNIxR2pYX5YmS6niIpCG
WSFp+1XWDgc7WIn8hEquspoiTWRTw/JbI+XjlUpShm2aH++tuElAEvm8hV8ZBvBz
rdnV7g9mN3/2MBDu6HbcS+TCwte3uhZGkXJipNxI9eI4yDQy7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIC5LPQ0vEh597J+wjPhN0hauIkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Y1MTAxZjgtYjIxMy0z
OGJmLTk1ZTQtN2JiNmQ2NWZlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGjoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGORaI1r1rNPwzBLhebWVmgLwU4/xx7eD23BK3uyJynGvJqytk5ecjFM
EIvixok0WwlS+78E/x94XptGm2jqP8KvCvgzDDcUF9y2v140IsZHLL+Ki42TZT0k
g2GgGbt896ZlQGyGyCXWT2MWVk5+nPYYmyR+xX3/ctMpssd6xTU8/0MfM6YBZS1l
KVDzpi8W1gTBmO9ue4d4HCqKsgkEkZrDTSwjTh08wj57R/kcGze2CWqCgJBYrLfS
E4QULT07qntQR/j2izu0fSP5XUGWppGeIz12YjaH3d7btNUnNbc3XaZ01uBNsgIM
ucXltxeJG+exKDpEVA5v0r5J6XfrI/I=
-----END CERTIFICATE-----
Generated at Thu May 15 02:45:56 2025 by rpki-client