Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2fbfb6b-640b-3245-83d4-455a72b925e3.roa
File: d2fbfb6b-640b-3245-83d4-455a72b925e3.roa (raw, json)
Hash identifier: jAq7y0/bb4nqEyo9CJwl7Jski0Y4wqF4bkAc3SLSF8k=
Subject key identifier: 37:B0:E9:D8:FE:C0:F1:31:BA:4B:11:D0:E5:A0:E5:77:76:32:99:C9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDD7CF2B0FE6260EAEAB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2fbfb6b-640b-3245-83d4-455a72b925e3.roa
Signing time: Thu 01 May 2025 16:22:07 +0000
ROA not before: Thu 01 May 2025 16:22:07 +0000
ROA not after: Wed 30 Jul 2025 16:22:07 +0000
asID: 22773
IP address blocks: 68.109.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:d7:cf:2b:0f:e6:26:0e:ae:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:07 2025 GMT
Not After : Jul 30 16:22:07 2025 GMT
Subject: CN=9903e57a-8eef-4232-a527-b075cb2d1b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:29:9b:d6:17:01:fa:dd:42:18:2c:5f:35:
5d:77:60:54:a1:ae:a5:5e:0a:4c:e0:8c:e9:d0:22:
b1:ba:1e:cd:40:b1:29:29:fe:6e:82:04:85:b4:63:
61:7d:2a:58:0b:0e:bd:c7:a5:15:aa:59:a3:24:2c:
0f:95:59:12:89:92:08:bd:54:cc:7b:6c:b0:2a:a6:
bb:b9:a6:a7:50:65:7e:21:d1:d5:38:6d:18:f5:09:
7f:16:08:b6:c2:0b:26:10:2d:36:85:4b:ef:31:b0:
56:e6:d9:7a:f6:9d:15:e4:00:59:60:25:c8:e4:5a:
3c:83:29:e2:11:a2:d1:33:39:81:df:dc:31:42:83:
9b:7f:5d:8b:99:08:5a:62:29:2b:ce:9a:24:9e:db:
88:6d:b1:fb:55:1a:dc:7a:0f:2a:d1:fc:f6:e8:af:
3d:38:9d:43:86:47:f2:e9:39:32:62:44:84:3d:10:
ef:30:4a:7f:6e:b6:48:fc:af:d4:8b:ba:b2:63:95:
e3:01:31:f9:ac:48:f2:b5:9a:dd:ce:41:f3:44:47:
71:ac:84:c9:4d:c6:32:2c:bb:2e:32:5d:0c:46:4b:
66:b3:45:23:50:c5:98:7d:85:5e:e9:e4:21:34:16:
82:62:bf:8d:0e:4f:ac:ec:31:62:86:9a:54:ef:03:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:E9:D8:FE:C0:F1:31:BA:4B:11:D0:E5:A0:E5:77:76:32:99:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2fbfb6b-640b-3245-83d4-455a72b925e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.109.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:bb:ee:86:49:f2:5c:94:e6:31:1e:dc:79:a8:a3:5a:50:ec:
41:3a:e4:c4:b8:b0:1d:74:75:de:6c:06:db:0d:9c:cc:60:bb:
81:57:20:bb:aa:13:b0:8b:ed:f4:57:ff:a7:39:d3:68:43:1a:
54:37:36:d6:8a:a1:56:69:d9:af:a8:2d:3a:05:05:cd:fe:01:
e3:6b:75:53:14:19:60:20:13:1d:9e:74:c6:e7:76:e8:38:d8:
a6:a7:17:e8:82:f6:bb:9b:af:4c:40:1f:f9:17:2a:76:fd:dd:
09:1a:23:48:20:3a:b0:e0:c7:11:5c:8a:fd:c5:dc:d9:37:a7:
c7:3a:6e:99:44:70:52:91:33:96:95:46:0f:81:9d:be:d1:4d:
25:7d:72:6a:1a:3e:bd:3e:58:30:6a:14:47:dc:ac:fd:07:e4:
64:73:46:84:da:85:30:9b:46:e6:99:09:68:7d:76:d3:5e:d7:
de:f2:bf:ab:1c:45:b7:7b:f6:f2:88:6c:7f:32:8d:05:2c:0f:
a2:a4:52:4f:3a:91:1f:16:2d:11:f5:5c:1c:a4:8b:fa:ad:5d:
da:76:f3:69:eb:b3:0b:8c:46:47:b0:ec:f5:47:46:be:90:ed:
3f:01:82:92:c3:be:4d:70:f6:a1:f4:6c:e7:e0:63:40:69:8b:
c6:52:00:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13dfPKw/mJg6uqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjIwN1oXDTI1MDczMDE2MjIwN1owLzEtMCsGA1UEAxMk
OTkwM2U1N2EtOGVlZi00MjMyLWE1MjctYjA3NWNiMmQxYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAwpm9YXAfrdQhgsXzVdd2BUoa6lXgpM4Izp
0CKxuh7NQLEpKf5uggSFtGNhfSpYCw69x6UVqlmjJCwPlVkSiZIIvVTMe2ywKqa7
uaanUGV+IdHVOG0Y9Ql/Fgi2wgsmEC02hUvvMbBW5tl69p0V5ABZYCXI5Fo8gyni
EaLRMzmB39wxQoObf12LmQhaYikrzpokntuIbbH7VRrceg8q0fz26K89OJ1Dhkfy
6TkyYkSEPRDvMEp/brZI/K/Ui7qyY5XjATH5rEjytZrdzkHzREdxrITJTcYyLLsu
Ml0MRktms0UjUMWYfYVe6eQhNBaCYr+NDk+s7DFihppU7wNP8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDew6dj+wPExuksR0OWg5Xd2MpnJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDJmYmZiNmItNjQwYi0z
MjQ1LTgzZDQtNDU1YTcyYjkyNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG2eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKS77oZJ8lyU5jEe3Hmoo1pQ7EE65MS4sB10dd5sBtsNnMxgu4FXILuq
E7CL7fRX/6c502hDGlQ3NtaKoVZp2a+oLToFBc3+AeNrdVMUGWAgEx2edMbndug4
2KanF+iC9rubr0xAH/kXKnb93QkaI0ggOrDgxxFciv3F3Nk3p8c6bplEcFKRM5aV
Rg+Bnb7RTSV9cmoaPr0+WDBqFEfcrP0H5GRzRoTahTCbRuaZCWh9dtNe197yv6sc
Rbd79vKIbH8yjQUsD6KkUk86kR8WLRH1XByki/qtXdp282nrswuMRkew7PVHRr6Q
7T8BgpLDvk1w9qH0bOfgY0Bpi8ZSAJ8=
-----END CERTIFICATE-----
Generated at Thu May 15 02:16:53 2025 by rpki-client