Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3b8ada8-fce4-3a18-bfd2-ac4b3768ceac.roa
File: d3b8ada8-fce4-3a18-bfd2-ac4b3768ceac.roa (raw, json)
Hash identifier: UZmBUXraGa1ZlTLLOR+JPlVQQ5Nqi816LdMAYGRsM/g=
Subject key identifier: 8D:81:47:66:28:AF:EE:D1:13:0E:1B:A0:2E:C9:10:21:73:96:7D:B0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2C35E4924BA0FB5939E40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3b8ada8-fce4-3a18-bfd2-ac4b3768ceac.roa
Signing time: Thu 01 May 2025 16:32:02 +0000
ROA not before: Thu 01 May 2025 16:32:02 +0000
ROA not after: Wed 30 Jul 2025 16:32:02 +0000
asID: 22773
IP address blocks: 2600:8800:3e04::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:c3:5e:49:24:ba:0f:b5:93:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:32:02 2025 GMT
Not After : Jul 30 16:32:02 2025 GMT
Subject: CN=67063288-af17-4c6d-b817-64653a2b19d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:62:e9:eb:fa:df:5c:d8:0d:b0:c3:a3:69:
47:ea:15:ef:be:eb:36:f5:7a:69:03:6f:59:e0:6f:
04:bf:73:85:b7:7c:4c:9c:04:f8:e4:b7:42:13:5c:
04:21:cd:7c:b9:66:cb:4f:3d:7b:50:46:1b:07:17:
f3:5d:2f:b1:d1:78:bf:81:b2:ca:b1:ea:30:d0:95:
d8:f1:ce:9f:11:7f:60:57:5b:b8:f8:35:f3:c1:d2:
3f:10:04:1d:d3:3d:3f:00:08:7c:9a:cc:c9:58:b1:
2c:e7:da:f9:e3:a8:ae:6e:f9:0e:84:a4:c5:68:87:
27:dd:7d:a4:ca:3d:73:47:4c:e8:43:0f:72:9c:54:
23:33:e9:57:e5:52:50:2d:c0:40:13:47:60:53:92:
14:bd:af:52:95:fc:e9:a9:c8:15:df:d9:75:ab:6c:
af:ef:ce:64:8e:f2:ae:45:b5:48:ff:8f:b0:b6:d4:
42:a6:19:cf:9d:ba:6b:95:40:b7:18:23:bc:aa:c3:
ba:ec:1a:d4:b8:57:b5:f4:c3:36:af:a6:3e:a4:b4:
c7:a5:db:fb:a2:7d:08:52:ee:ed:d6:a0:93:c7:f0:
dc:71:e4:f9:4b:a2:2e:f9:b5:27:c2:d7:d4:7f:90:
f1:5e:9d:76:b6:a0:d5:63:0a:da:98:ea:b5:cf:ae:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:47:66:28:AF:EE:D1:13:0E:1B:A0:2E:C9:10:21:73:96:7D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3b8ada8-fce4-3a18-bfd2-ac4b3768ceac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:3e04::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:31:16:e0:dd:d4:ea:9a:f5:2b:d0:b3:d1:04:15:db:6d:48:
40:4e:84:5f:19:db:35:d3:7d:b4:7e:20:40:27:7a:c3:87:9e:
c4:e6:00:e2:59:6b:84:54:28:b5:39:77:fd:f1:23:28:44:87:
1d:9b:0a:0f:78:2d:35:33:c0:ab:d5:0d:cb:c6:a6:39:3a:7f:
e9:c0:5e:3f:86:67:08:70:38:61:7f:e5:a6:05:f3:72:40:54:
31:5f:bb:c1:6a:1e:e3:0b:1f:19:6b:27:4c:f9:09:13:93:a4:
c7:b9:ff:99:e8:a5:92:76:32:ac:b8:74:ab:95:02:f6:e8:2b:
e5:e9:ec:64:68:30:66:54:5a:7f:09:9a:26:fa:a1:6a:ba:ac:
56:b6:45:d5:c7:56:61:2b:ba:56:f8:0e:a7:e0:fe:81:ec:24:
9d:14:db:41:31:59:99:6b:86:44:34:f7:67:54:2b:f1:68:4f:
8a:09:e0:a4:32:92:50:17:aa:59:e6:0b:ae:f9:9b:1c:41:02:
05:af:c8:ff:33:60:84:cb:01:1b:ad:62:a3:c9:ad:bf:eb:7d:
5d:67:7b:4c:cb:ca:08:1e:8d:70:7b:c0:ea:2f:05:7c:c1:e2:
aa:64:df:4d:b7:91:5b:bf:59:5f:17:a7:25:75:55:7a:88:b7:
00:d2:4f:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm14sNeSSS6D7WTnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzIwMloXDTI1MDczMDE2MzIwMlowLzEtMCsGA1UEAxMk
NjcwNjMyODgtYWYxNy00YzZkLWI4MTctNjQ2NTNhMmIxOWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDxi6ev631zYDbDDo2lH6hXvvus29XppA29Z
4G8Ev3OFt3xMnAT45LdCE1wEIc18uWbLTz17UEYbBxfzXS+x0Xi/gbLKseow0JXY
8c6fEX9gV1u4+DXzwdI/EAQd0z0/AAh8mszJWLEs59r546iubvkOhKTFaIcn3X2k
yj1zR0zoQw9ynFQjM+lX5VJQLcBAE0dgU5IUva9SlfzpqcgV39l1q2yv785kjvKu
RbVI/4+wttRCphnPnbprlUC3GCO8qsO67BrUuFe19MM2r6Y+pLTHpdv7on0IUu7t
1qCTx/DcceT5S6Iu+bUnwtfUf5DxXp12tqDVYwramOq1z651wQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI2BR2Yor+7REw4boC7JECFzln2wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNiOGFkYTgtZmNlNC0z
YTE4LWJmZDItYWM0YjM3NjhjZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD4E
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG0xFuDd1Oqa9SvQs9EEFdttSEBOhF8Z2zXTfbR+IEAnesOHnsTm
AOJZa4RUKLU5d/3xIyhEhx2bCg94LTUzwKvVDcvGpjk6f+nAXj+GZwhwOGF/5aYF
83JAVDFfu8FqHuMLHxlrJ0z5CROTpMe5/5nopZJ2Mqy4dKuVAvboK+Xp7GRoMGZU
Wn8Jmib6oWq6rFa2RdXHVmErulb4Dqfg/oHsJJ0U20ExWZlrhkQ092dUK/FoT4oJ
4KQyklAXqlnmC675mxxBAgWvyP8zYITLARutYqPJrb/rfV1ne0zLyggejXB7wOov
BXzB4qpk3023kVu/WV8XpyV1VXqItwDSTzo=
-----END CERTIFICATE-----
Generated at Thu May 15 01:26:50 2025 by rpki-client