Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d39f8067-5e39-3d3d-9c0d-6513f16bc252.roa
File: d39f8067-5e39-3d3d-9c0d-6513f16bc252.roa (raw, json)
Hash identifier: 3bt+o2NMtNOcebHO9c3wgbwrVbB4/E1zxXEiUpXAuRs=
Subject key identifier: 23:4C:81:04:A7:15:84:B3:3E:15:27:D1:4E:03:69:71:2B:28:88:F9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DEF63423A3995B0C224D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d39f8067-5e39-3d3d-9c0d-6513f16bc252.roa
Signing time: Thu 01 May 2025 16:24:23 +0000
ROA not before: Thu 01 May 2025 16:24:23 +0000
ROA not after: Wed 30 Jul 2025 16:24:23 +0000
asID: 22773
IP address blocks: 70.176.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:f6:34:23:a3:99:5b:0c:22:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:24:23 2025 GMT
Not After : Jul 30 16:24:23 2025 GMT
Subject: CN=28d79645-f1e0-4191-8bf9-ba67cfa64571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:1c:9b:bf:f8:e0:94:03:e6:12:12:f9:76:
dc:ab:fb:d4:e7:b2:1c:44:7d:4e:e5:c7:f6:33:bf:
3b:24:86:56:64:92:64:3a:56:49:d5:af:f6:3c:97:
9a:a6:74:90:bc:f4:cd:da:06:02:7d:7b:e6:86:56:
a0:cd:30:52:07:c1:93:98:4e:07:4e:09:3b:b8:c8:
e9:db:a6:87:c3:d8:81:95:6a:c2:01:f4:51:4a:aa:
88:3f:56:a5:67:34:60:54:80:5a:b1:d6:10:9a:83:
84:06:a2:e7:f0:d1:d5:df:ba:c0:60:10:80:12:e6:
ac:07:fe:70:a9:9a:87:45:6e:54:27:aa:7a:27:60:
7e:96:9c:de:02:f9:cc:16:c2:0a:d0:52:26:62:52:
20:fe:d1:cb:03:e8:18:c9:7f:c3:d7:5b:2d:8c:68:
59:6a:a8:58:2e:01:09:e6:9a:77:f3:57:89:95:d4:
29:65:f5:ad:8c:97:5e:52:60:1c:12:24:0b:1f:e7:
0b:e4:96:81:09:98:f7:4d:cc:01:f5:24:8b:66:6c:
ef:89:ef:09:1c:5a:e3:45:61:34:5b:ea:19:34:6e:
64:3d:d8:be:72:e2:58:79:e3:e4:55:d7:1b:8f:51:
5c:64:72:76:19:e5:71:50:60:5e:b9:b2:07:12:11:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:81:04:A7:15:84:B3:3E:15:27:D1:4E:03:69:71:2B:28:88:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d39f8067-5e39-3d3d-9c0d-6513f16bc252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.176.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:a7:15:97:5c:f0:eb:dd:ad:b7:79:54:98:8d:08:7a:62:ba:
78:14:7d:52:3e:c3:bf:a5:1d:83:c3:8d:33:7b:6c:ac:a4:f2:
b6:27:76:55:ff:06:6d:f3:41:d4:f4:f2:96:a7:9b:d6:be:39:
a9:de:2c:4b:3c:bc:5f:2a:c9:d0:91:92:c5:a2:3e:a0:ce:4c:
33:d3:e8:18:ec:60:e4:55:9c:44:c9:2d:24:cd:36:d3:18:04:
8c:24:4d:5e:17:e6:a8:a4:2f:96:83:74:7e:fa:0b:87:8b:e0:
08:01:30:0d:f0:aa:8d:3c:0f:a5:5b:5b:3e:62:fa:db:34:62:
e2:bc:f6:c1:a6:53:93:69:f1:61:a9:22:da:e2:fd:54:a0:6d:
90:b2:2d:1a:eb:70:2d:22:13:62:d8:6a:70:03:3a:1e:64:d9:
8c:28:c6:2f:bf:25:02:28:85:e5:ca:a3:f5:44:4b:3a:4a:c0:
c5:50:d8:bb:65:a0:ee:3d:32:9f:dc:87:4d:ac:3c:c4:ec:2e:
3c:b1:6c:15:aa:b4:26:cf:f9:79:e6:eb:12:f9:1c:a2:4e:c8:
2a:4b:e1:16:b5:4e:40:b6:69:aa:02:6d:38:b0:8a:97:23:dc:
5f:4b:66:48:9d:15:cb:f0:de:ab:e2:05:83:e3:83:e9:ef:ae:
4b:3d:df:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13vY0I6OZWwwiTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjQyM1oXDTI1MDczMDE2MjQyM1owLzEtMCsGA1UEAxMk
MjhkNzk2NDUtZjFlMC00MTkxLThiZjktYmE2N2NmYTY0NTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkQcm7/44JQD5hIS+Xbcq/vU57IcRH1O5cf2
M787JIZWZJJkOlZJ1a/2PJeapnSQvPTN2gYCfXvmhlagzTBSB8GTmE4HTgk7uMjp
26aHw9iBlWrCAfRRSqqIP1alZzRgVIBasdYQmoOEBqLn8NHV37rAYBCAEuasB/5w
qZqHRW5UJ6p6J2B+lpzeAvnMFsIK0FImYlIg/tHLA+gYyX/D11stjGhZaqhYLgEJ
5pp381eJldQpZfWtjJdeUmAcEiQLH+cL5JaBCZj3TcwB9SSLZmzvie8JHFrjRWE0
W+oZNG5kPdi+cuJYeePkVdcbj1FcZHJ2GeVxUGBeubIHEhFqYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNMgQSnFYSzPhUn0U4DaXErKIj5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDM5ZjgwNjctNWUzOS0z
ZDNkLTljMGQtNjUxM2YxNmJjMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrB5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+nFZdc8Ovdrbd5VJiNCHpiungUfVI+w7+lHYPDjTN7bKyk8rYndlX/
Bm3zQdT08panm9a+OaneLEs8vF8qydCRksWiPqDOTDPT6BjsYORVnETJLSTNNtMY
BIwkTV4X5qikL5aDdH76C4eL4AgBMA3wqo08D6VbWz5i+ts0YuK89sGmU5Np8WGp
Itri/VSgbZCyLRrrcC0iE2LYanADOh5k2Ywoxi+/JQIoheXKo/VESzpKwMVQ2Ltl
oO49Mp/ch02sPMTsLjyxbBWqtCbP+Xnm6xL5HKJOyCpL4Ra1TkC2aaoCbTiwipcj
3F9LZkidFcvw3qviBYPjg+nvrks9304=
-----END CERTIFICATE-----
Generated at Thu May 15 01:23:21 2025 by rpki-client