Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f3174b-4fe9-32e1-8e93-1f7fd22a3be2.roa
File: f2f3174b-4fe9-32e1-8e93-1f7fd22a3be2.roa (raw, json)
Hash identifier: McZ5KlwhRy7OPNsNw3LiHPynDDkh4/3AB1ksHi72lB4=
Subject key identifier: 98:57:66:0A:72:6E:3C:04:D2:BA:96:6C:AA:7F:77:84:74:18:3F:9F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5FA2160190B63BD7241CBC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f3174b-4fe9-32e1-8e93-1f7fd22a3be2.roa
Signing time: Thu 01 May 2025 17:19:07 +0000
ROA not before: Thu 01 May 2025 17:19:07 +0000
ROA not after: Wed 30 Jul 2025 17:19:07 +0000
asID: 22773
IP address blocks: 68.229.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:fa:21:60:19:0b:63:bd:72:41:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:19:07 2025 GMT
Not After : Jul 30 17:19:07 2025 GMT
Subject: CN=eb33d337-fe0b-42b7-8a1a-0b8c74a4f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:18:f9:e3:9e:e8:8d:30:7e:94:4a:37:ed:
7c:41:c2:25:c8:1e:3e:80:0a:72:18:84:e1:2a:9c:
98:37:ac:75:79:52:27:b9:23:ea:f9:86:db:89:a3:
22:34:06:9e:14:19:c4:57:f9:1b:34:bc:a8:b7:33:
3c:87:84:9f:2a:8d:33:ea:ac:a8:b3:f9:2c:73:ca:
aa:fb:1f:6f:de:af:20:73:52:94:4c:1d:88:15:a8:
61:40:1c:89:b5:e9:d5:0a:f6:b3:8c:39:3a:ee:b9:
78:fc:2a:6e:fc:60:17:2e:8a:4a:df:fe:11:40:7b:
9d:04:9f:15:c0:84:50:af:20:77:37:4e:6e:52:d4:
58:a3:59:60:8a:37:66:eb:9c:a6:91:7e:1e:2d:28:
7e:1e:c5:a4:eb:77:97:6c:09:f2:dd:62:22:78:50:
28:04:d3:ae:87:95:41:b9:fb:58:5a:c1:68:63:75:
98:6f:99:ef:19:36:d9:75:e7:33:4f:2a:88:b0:20:
0e:82:db:7f:f6:82:18:82:0e:7a:df:4f:0f:b5:86:
9e:28:ec:6f:e3:fe:7a:e8:c2:cc:2e:6f:bb:09:3b:
9f:31:c3:6f:4c:4f:20:c0:c1:ae:35:99:0b:74:9c:
4c:f9:47:da:b9:12:56:4f:50:bc:90:a3:93:16:f7:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:66:0A:72:6E:3C:04:D2:BA:96:6C:AA:7F:77:84:74:18:3F:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f3174b-4fe9-32e1-8e93-1f7fd22a3be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.229.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:bd:0d:b2:15:c3:56:9e:4b:8b:c2:f0:83:b0:47:82:e0:34:
03:d6:d6:19:8c:5d:99:f0:e4:b1:f3:ca:82:ea:22:5e:d1:63:
fa:ac:91:83:e8:5f:5e:37:8b:52:ca:79:02:c3:17:3e:ac:01:
16:fe:68:d8:72:13:e5:b8:ab:98:cb:c5:14:72:f7:c2:87:3c:
f5:c6:f7:5c:dd:10:d3:09:e5:ed:27:36:51:f3:62:45:28:4d:
26:3e:3b:00:da:65:94:85:f8:fa:00:ed:4b:41:d5:0b:4b:2e:
a1:fe:95:00:1f:3d:5d:d5:b9:21:5a:28:eb:51:15:91:09:a1:
3a:ea:ae:d0:55:81:c3:2d:3f:7a:78:d8:14:41:45:b5:e4:e5:
bb:a1:74:41:9d:a3:ad:30:bc:ad:8d:40:0f:b3:2d:8f:67:a7:
c1:e2:07:6e:38:51:6c:42:d6:cf:4b:b5:d1:fb:64:70:93:0b:
6a:d8:95:3c:f2:65:25:9e:0f:d5:05:d7:46:5c:c4:e6:64:ca:
58:e0:f0:28:7f:d4:e7:cd:36:ab:e1:b8:40:11:69:a8:c7:ab:
14:eb:d6:39:38:11:ed:b1:ba:b8:31:14:e0:d0:d0:b4:2c:fa:
f2:2b:0c:09:24:31:a8:fe:87:d2:ed:ee:50:57:02:c7:18:c1:
c8:fd:40:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+iFgGQtjvXJBy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MTkwN1oXDTI1MDczMDE3MTkwN1owLzEtMCsGA1UEAxMk
ZWIzM2QzMzctZmUwYi00MmI3LThhMWEtMGI4Yzc0YTRmMjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyicY+eOe6I0wfpRKN+18QcIlyB4+gApyGITh
KpyYN6x1eVInuSPq+YbbiaMiNAaeFBnEV/kbNLyotzM8h4SfKo0z6qyos/ksc8qq
+x9v3q8gc1KUTB2IFahhQByJtenVCvazjDk67rl4/Cpu/GAXLopK3/4RQHudBJ8V
wIRQryB3N05uUtRYo1lgijdm65ymkX4eLSh+HsWk63eXbAny3WIieFAoBNOuh5VB
uftYWsFoY3WYb5nvGTbZdeczTyqIsCAOgtt/9oIYgg56308PtYaeKOxv4/566MLM
Lm+7CTufMcNvTE8gwMGuNZkLdJxM+UfauRJWT1C8kKOTFvcICQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhXZgpybjwE0rqWbKp/d4R0GD+fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJmMzE3NGItNGZlOS0z
MmUxLThlOTMtMWY3ZmQyMmEzYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROU3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm9DbIVw1aeS4vC8IOwR4LgNAPW1hmMXZnw5LHzyoLqIl7RY/qskYPo
X143i1LKeQLDFz6sARb+aNhyE+W4q5jLxRRy98KHPPXG91zdENMJ5e0nNlHzYkUo
TSY+OwDaZZSF+PoA7UtB1QtLLqH+lQAfPV3VuSFaKOtRFZEJoTrqrtBVgcMtP3p4
2BRBRbXk5buhdEGdo60wvK2NQA+zLY9np8HiB244UWxC1s9LtdH7ZHCTC2rYlTzy
ZSWeD9UF10ZcxOZkyljg8Ch/1OfNNqvhuEARaajHqxTr1jk4Ee2xurgxFODQ0LQs
+vIrDAkkMaj+h9Lt7lBXAscYwcj9QO0=
-----END CERTIFICATE-----
Generated at Thu May 15 01:36:07 2025 by rpki-client