Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e68a4a0a-fd5e-3643-821e-0f7c03dab062.roa
File: e68a4a0a-fd5e-3643-821e-0f7c03dab062.roa (raw, json)
Hash identifier: xNefzyMsvxUEjXdtjNiLnbOsUSmhs5w507IKTHzD2r4=
Subject key identifier: B5:0D:94:2E:BA:C2:C9:6E:A7:C3:BF:5E:04:50:AF:F9:86:61:8A:83
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0C4BDAFA6CBECC12B4200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e68a4a0a-fd5e-3643-821e-0f7c03dab062.roa
Signing time: Thu 01 May 2025 16:28:01 +0000
ROA not before: Thu 01 May 2025 16:28:01 +0000
ROA not after: Wed 30 Jul 2025 16:28:01 +0000
asID: 22773
IP address blocks: 72.222.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:c4:bd:af:a6:cb:ec:c1:2b:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:01 2025 GMT
Not After : Jul 30 16:28:01 2025 GMT
Subject: CN=f72503ae-f894-4c95-b31c-bd012abce423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:bc:6c:82:93:b0:df:ed:02:a8:4d:eb:ff:
8a:6d:4c:38:42:03:02:a5:98:21:10:5f:b2:8d:58:
1d:4a:53:31:41:16:df:39:2a:03:ce:91:a1:fa:71:
23:18:e3:f1:92:ee:53:10:43:ca:d3:10:d7:0c:7d:
87:c3:01:b5:10:b7:af:37:1f:3e:df:f2:dc:45:fd:
0a:8d:86:cd:de:62:cd:f8:3c:e6:ed:7a:7a:87:bf:
d0:e8:24:51:12:09:2f:17:69:2b:96:a3:76:f2:37:
61:50:63:4f:6c:84:30:bd:98:10:8b:03:5b:bb:26:
65:84:f9:07:44:3c:d2:6f:8b:66:84:07:78:db:b7:
53:fb:6e:89:87:c5:db:29:29:6d:4b:3b:03:a1:fb:
1b:f0:ab:d3:e1:fb:01:18:f0:98:df:87:f5:df:ab:
b0:c1:05:fd:86:fe:b4:91:a2:84:48:e8:26:19:53:
0e:d5:61:8a:3d:b0:8f:63:94:ba:1c:54:05:18:95:
dd:ad:43:1d:a4:a2:43:9e:f5:d8:c0:26:8b:04:7a:
82:7b:7a:54:81:70:25:70:29:72:ce:36:70:b1:71:
c4:a0:43:73:04:54:38:b5:f9:a9:b5:ab:04:50:a0:
34:43:f3:74:0d:0f:c3:99:0d:de:8f:a9:a3:f1:60:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0D:94:2E:BA:C2:C9:6E:A7:C3:BF:5E:04:50:AF:F9:86:61:8A:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e68a4a0a-fd5e-3643-821e-0f7c03dab062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.222.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:7b:c6:90:ce:d9:cf:f2:23:39:26:ab:38:1a:49:e5:89:e9:
92:43:2d:5c:a1:c9:d7:10:3a:9d:ce:bc:0f:9e:66:d0:8a:f2:
6b:41:74:0f:25:31:a7:4f:5f:9d:b7:7a:30:df:ff:b2:5e:d1:
fb:8b:13:b0:0a:75:d6:1d:1a:0e:29:75:1e:42:3c:19:98:1a:
09:a7:a6:ea:56:23:79:4d:ae:a9:b6:fb:e3:6f:3f:f7:72:88:
4a:f3:0e:8e:d2:3d:e2:03:5c:38:71:da:90:ee:c6:a1:36:60:
54:86:62:2e:96:58:1d:90:5c:f9:44:dd:05:f1:2d:bb:fb:20:
c3:55:87:16:a2:10:b5:1d:9f:4c:a8:4f:11:a5:f1:9e:89:4c:
25:5b:99:df:75:86:31:19:6e:15:37:4c:46:49:f6:a2:af:e6:
65:62:7c:90:4e:27:29:be:bf:b0:18:32:a7:ee:c8:0e:c2:2b:
3e:c2:1a:45:b7:4b:3f:42:c9:c8:bf:76:32:40:3e:4e:c0:44:
d7:7a:79:58:dd:bf:39:b1:e5:0a:a0:a4:fe:4b:ed:da:da:a3:
3f:cc:a9:94:64:6d:a5:0d:a7:d7:01:99:ab:72:13:5a:d0:49:
8b:36:a7:0f:d2:bc:19:23:92:98:44:31:7c:5b:5a:d9:d1:2a:
62:f2:c2:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14MS9r6bL7MErQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjgwMVoXDTI1MDczMDE2MjgwMVowLzEtMCsGA1UEAxMk
ZjcyNTAzYWUtZjg5NC00Yzk1LWIzMWMtYmQwMTJhYmNlNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7q8bIKTsN/tAqhN6/+KbUw4QgMCpZghEF+y
jVgdSlMxQRbfOSoDzpGh+nEjGOPxku5TEEPK0xDXDH2HwwG1ELevNx8+3/LcRf0K
jYbN3mLN+Dzm7Xp6h7/Q6CRREgkvF2krlqN28jdhUGNPbIQwvZgQiwNbuyZlhPkH
RDzSb4tmhAd427dT+26Jh8XbKSltSzsDofsb8KvT4fsBGPCY34f136uwwQX9hv60
kaKESOgmGVMO1WGKPbCPY5S6HFQFGJXdrUMdpKJDnvXYwCaLBHqCe3pUgXAlcCly
zjZwsXHEoENzBFQ4tfmptasEUKA0Q/N0DQ/DmQ3ej6mj8WB53QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLUNlC66wslup8O/XgRQr/mGYYqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTY4YTRhMGEtZmQ1ZS0z
NjQzLTgyMWUtMGY3YzAzZGFiMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGp7xpDO2c/yIzkmqzgaSeWJ6ZJDLVyhydcQOp3OvA+eZtCK8mtBdA8l
MadPX523ejDf/7Je0fuLE7AKddYdGg4pdR5CPBmYGgmnpupWI3lNrqm2++NvP/dy
iErzDo7SPeIDXDhx2pDuxqE2YFSGYi6WWB2QXPlE3QXxLbv7IMNVhxaiELUdn0yo
TxGl8Z6JTCVbmd91hjEZbhU3TEZJ9qKv5mVifJBOJym+v7AYMqfuyA7CKz7CGkW3
Sz9Cyci/djJAPk7ARNd6eVjdvzmx5QqgpP5L7draoz/MqZRkbaUNp9cBmatyE1rQ
SYs2pw/SvBkjkphEMXxbWtnRKmLywo8=
-----END CERTIFICATE-----
Generated at Thu May 15 01:33:56 2025 by rpki-client