Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff7dcac9-7eca-3b6b-bae6-5027be44bf5b.roa
File: ff7dcac9-7eca-3b6b-bae6-5027be44bf5b.roa (raw, json)
Hash identifier: dwVjIT5dtmC5u94wUDaO5VKfcfiY92vi8j9mRCHBo4U=
Subject key identifier: 3E:20:9A:58:42:4C:76:18:49:1E:67:F8:CD:2B:B1:8F:1E:A3:76:44
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E079A409D7C2BD01D7FEC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff7dcac9-7eca-3b6b-bae6-5027be44bf5b.roa
Signing time: Thu 01 May 2025 16:27:26 +0000
ROA not before: Thu 01 May 2025 16:27:26 +0000
ROA not after: Wed 30 Jul 2025 16:27:26 +0000
asID: 22773
IP address blocks: 72.216.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 May 2025 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:79:a4:09:d7:c2:bd:01:d7:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:26 2025 GMT
Not After : Jul 30 16:27:26 2025 GMT
Subject: CN=5c699e4b-590b-4831-9a31-9e45c99e269f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:44:e9:46:93:7e:ff:51:c1:a4:e2:94:c9:
f3:e7:c0:3e:c5:20:a3:09:b4:0a:60:33:35:a6:a8:
63:9e:62:10:22:ed:19:e5:00:0d:3c:39:cd:c0:0f:
7d:00:2b:5a:4b:15:a2:a9:91:32:c5:bd:28:34:f0:
82:1a:9d:65:cb:98:3d:dd:49:2a:5e:4d:89:5f:62:
46:11:1e:77:1d:cc:06:62:a7:5a:dc:8a:c4:60:c9:
1d:7e:0f:cc:f5:5b:c7:ae:9e:49:6b:ec:cc:71:80:
ee:29:35:64:b7:e7:eb:df:3a:96:95:52:54:d5:08:
54:ef:80:31:d1:3b:e1:46:0b:a6:30:4c:6e:3f:4d:
12:90:80:09:f9:a7:a2:fb:6f:08:00:b7:4e:dc:fc:
00:a7:f8:5d:6e:91:ee:a4:e4:40:52:92:df:dd:e8:
17:bc:08:35:93:84:c4:16:67:2d:85:2a:ba:78:fe:
04:f4:68:8f:ae:c7:5c:81:78:6f:42:bf:7a:d1:2b:
c4:20:4e:19:79:16:53:3c:b2:4e:4c:c4:2e:fc:69:
64:68:0c:26:50:fc:7e:ed:14:19:ac:f6:07:91:0b:
86:01:4b:3b:96:0a:0f:bb:b4:38:a6:80:00:e5:09:
2d:24:a7:c6:85:2f:28:50:55:f6:44:c8:d2:5b:de:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:9A:58:42:4C:76:18:49:1E:67:F8:CD:2B:B1:8F:1E:A3:76:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff7dcac9-7eca-3b6b-bae6-5027be44bf5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.216.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ab:a0:6c:2a:eb:53:aa:dc:0b:25:04:8a:4a:40:2c:47:2e:
33:a6:9c:87:83:42:d1:7a:0e:97:6a:f5:b6:07:a3:79:04:f7:
86:1b:38:e5:99:20:e9:13:36:6c:0a:da:5e:b6:62:6a:a4:56:
0b:db:75:e4:39:d5:95:b6:de:64:a4:ba:eb:72:f3:fa:ea:06:
1a:1f:2a:29:0e:6d:de:93:90:f8:6b:04:45:e6:0c:73:c2:4f:
22:56:19:f8:51:9f:e5:0a:c5:d0:89:57:7e:44:78:cd:b3:9e:
c8:4b:04:42:c3:67:76:7f:ec:df:a3:17:64:89:a5:a3:b6:ee:
71:56:d4:15:2b:9a:da:cd:29:0c:d8:c0:cc:22:f0:08:48:c0:
98:66:ab:76:4a:ea:84:11:0a:1e:85:5e:65:ce:53:90:a0:71:
63:15:56:5b:d0:72:f2:72:86:b8:25:dc:25:3e:f8:f3:a7:de:
1a:58:21:b5:e3:ca:10:ed:a6:cf:28:d3:37:10:96:52:11:e3:
8e:ca:b8:de:29:5c:23:a3:73:37:1b:a2:f1:38:d6:64:c2:49:
6c:e6:6e:a7:e7:72:c1:56:e5:4e:fb:35:1f:95:a5:3b:c2:cd:
db:f9:4c:27:dd:fa:60:d4:d6:dd:f4:15:e8:cf:7d:ad:16:36:
95:66:18:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14HmkCdfCvQHX/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjcyNloXDTI1MDczMDE2MjcyNlowLzEtMCsGA1UEAxMk
NWM2OTllNGItNTkwYi00ODMxLTlhMzEtOWU0NWM5OWUyNjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPBE6UaTfv9RwaTilMnz58A+xSCjCbQKYDM1
pqhjnmIQIu0Z5QANPDnNwA99ACtaSxWiqZEyxb0oNPCCGp1ly5g93UkqXk2JX2JG
ER53HcwGYqda3IrEYMkdfg/M9VvHrp5Ja+zMcYDuKTVkt+fr3zqWlVJU1QhU74Ax
0TvhRgumMExuP00SkIAJ+aei+28IALdO3PwAp/hdbpHupORAUpLf3egXvAg1k4TE
FmcthSq6eP4E9GiPrsdcgXhvQr960SvEIE4ZeRZTPLJOTMQu/GlkaAwmUPx+7RQZ
rPYHkQuGAUs7lgoPu7Q4poAA5QktJKfGhS8oUFX2RMjSW97xaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4gmlhCTHYYSR5n+M0rsY8eo3ZEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmY3ZGNhYzktN2VjYS0z
YjZiLWJhZTYtNTAyN2JlNDRiZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNicMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWroGwq61Oq3AslBIpKQCxHLjOmnIeDQtF6Dpdq9bYHo3kE94YbOOWZ
IOkTNmwK2l62YmqkVgvbdeQ51ZW23mSkuuty8/rqBhofKikObd6TkPhrBEXmDHPC
TyJWGfhRn+UKxdCJV35EeM2znshLBELDZ3Z/7N+jF2SJpaO27nFW1BUrmtrNKQzY
wMwi8AhIwJhmq3ZK6oQRCh6FXmXOU5CgcWMVVlvQcvJyhrgl3CU++POn3hpYIbXj
yhDtps8o0zcQllIR447KuN4pXCOjczcbovE41mTCSWzmbqfncsFW5U77NR+VpTvC
zdv5TCfd+mDU1t30FejPfa0WNpVmGBQ=
-----END CERTIFICATE-----
Generated at Thu May 15 05:16:19 2025 by rpki-client