Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/588f4b6d-b1f1-3fe1-9ac6-e0dfd0ee37a9.roa
File: 588f4b6d-b1f1-3fe1-9ac6-e0dfd0ee37a9.roa (raw, json)
Hash identifier: Cc7vchQbgoyrwan4bNd1839Xlk4B0T5ez91QC9RVcrA=
Subject key identifier: 65:78:F6:BA:21:B1:6E:3D:B5:5F:6C:2B:31:81:0A:7F:8E:8E:C8:14
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD30DE0E06D535D9D9DEA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/588f4b6d-b1f1-3fe1-9ac6-e0dfd0ee37a9.roa
Signing time: Thu 01 May 2025 16:20:48 +0000
ROA not before: Thu 01 May 2025 16:20:48 +0000
ROA not after: Wed 30 Jul 2025 16:20:48 +0000
asID: 22773
IP address blocks: 68.3.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:30:de:0e:06:d5:35:d9:d9:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:48 2025 GMT
Not After : Jul 30 16:20:48 2025 GMT
Subject: CN=3b785851-abd7-4271-b3a9-b49d76bb5beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:c5:a2:a2:04:86:85:11:b6:06:9c:9d:03:
84:f8:59:13:10:d4:b3:62:bd:71:13:5c:c2:fe:b7:
ae:76:ce:d7:13:a3:90:f6:c0:23:f4:10:e1:89:bc:
87:da:2a:ba:4b:1a:62:34:13:65:50:7a:d6:ff:10:
ae:f9:61:59:dc:e5:cc:2d:80:f8:d9:5f:84:dc:70:
31:8e:19:d8:d3:02:8b:b0:b8:dc:5d:ac:a2:5c:d9:
3e:1f:1d:bf:18:84:f3:ba:3c:8e:dd:77:f4:95:12:
65:1f:73:ff:7f:c1:7f:42:cf:dc:70:7b:12:1f:47:
56:56:98:9a:37:97:93:b8:c1:c8:dc:af:b2:ba:13:
1f:b5:c6:1c:99:2b:c8:ab:81:60:0e:cf:43:09:07:
9a:ef:6a:f8:ea:41:f2:9b:e2:70:66:55:b7:77:b6:
69:1a:1a:8f:59:95:a1:cc:24:ca:ce:45:05:4a:f6:
93:58:97:79:10:d3:22:47:d9:73:1f:64:08:9d:65:
b4:1f:f3:64:2b:cf:25:28:12:4b:92:8d:02:90:d0:
71:d9:f3:e5:a5:87:bb:8e:48:1e:58:97:34:6d:fd:
7d:ca:1e:40:93:6b:d9:da:e8:b6:ad:d3:a1:e6:19:
93:1c:fc:b2:bc:62:15:09:68:33:c4:a4:57:fc:c8:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:78:F6:BA:21:B1:6E:3D:B5:5F:6C:2B:31:81:0A:7F:8E:8E:C8:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/588f4b6d-b1f1-3fe1-9ac6-e0dfd0ee37a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.3.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:51:53:55:64:bd:0d:f9:8c:7b:fc:6c:60:7b:96:e5:a0:d6:
6d:3e:db:c4:5d:cc:6a:33:fc:5c:41:8e:60:98:6f:85:b3:f6:
e2:b3:53:9e:3c:2a:95:e0:a4:72:25:fd:0b:93:12:e4:2e:9b:
60:a7:7f:25:99:80:fd:72:27:ea:02:b2:b6:15:fe:30:47:e1:
78:f9:06:ca:45:b8:95:75:e5:8c:d6:0d:99:55:74:35:2b:9b:
28:86:dd:09:36:5c:17:99:73:10:e9:4b:f6:52:b4:3e:51:4b:
88:16:37:58:b1:f6:b8:b6:3f:ef:23:7a:c8:33:73:95:d8:85:
ed:6b:eb:8c:04:ea:1f:94:99:bb:bc:64:23:95:7f:4d:29:93:
34:87:98:72:31:96:67:6e:8e:01:cb:90:e9:fd:d4:70:c6:4e:
60:05:41:c8:21:af:1a:59:de:b6:c7:fa:3a:5f:68:50:41:36:
db:bb:d1:7e:14:4f:a1:b3:e7:af:e3:c6:5d:bf:98:27:3f:75:
64:c2:95:7f:2c:d3:ba:f7:06:42:38:57:e8:d2:cd:7a:ef:b6:
8f:a5:7a:e7:a0:32:4d:4c:2e:4b:de:df:5e:1c:13:90:90:d7:
44:7f:19:ae:46:6c:9b:1a:1c:76:ad:20:0f:ca:8e:ac:b7:17:
d6:e9:49:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13TDeDgbVNdnZ3qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjA0OFoXDTI1MDczMDE2MjA0OFowLzEtMCsGA1UEAxMk
M2I3ODU4NTEtYWJkNy00MjcxLWIzYTktYjQ5ZDc2YmI1YmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9XFoqIEhoURtgacnQOE+FkTENSzYr1xE1zC
/reuds7XE6OQ9sAj9BDhibyH2iq6SxpiNBNlUHrW/xCu+WFZ3OXMLYD42V+E3HAx
jhnY0wKLsLjcXayiXNk+Hx2/GITzujyO3Xf0lRJlH3P/f8F/Qs/ccHsSH0dWVpia
N5eTuMHI3K+yuhMftcYcmSvIq4FgDs9DCQea72r46kHym+JwZlW3d7ZpGhqPWZWh
zCTKzkUFSvaTWJd5ENMiR9lzH2QInWW0H/NkK88lKBJLko0CkNBx2fPlpYe7jkge
WJc0bf19yh5Ak2vZ2ui2rdOh5hmTHPyyvGIVCWgzxKRX/Mg1owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGV49rohsW49tV9sKzGBCn+OjsgUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg4ZjRiNmQtYjFmMS0z
ZmUxLTlhYzYtZTBkZmQwZWUzN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJRU1VkvQ35jHv8bGB7luWg1m0+28RdzGoz/FxBjmCYb4Wz9uKzU548
KpXgpHIl/QuTEuQum2CnfyWZgP1yJ+oCsrYV/jBH4Xj5BspFuJV15YzWDZlVdDUr
myiG3Qk2XBeZcxDpS/ZStD5RS4gWN1ix9ri2P+8jesgzc5XYhe1r64wE6h+Umbu8
ZCOVf00pkzSHmHIxlmdujgHLkOn91HDGTmAFQcghrxpZ3rbH+jpfaFBBNtu70X4U
T6Gz56/jxl2/mCc/dWTClX8s07r3BkI4V+jSzXrvto+leuegMk1MLkve314cE5CQ
10R/Ga5GbJsaHHatIA/Kjqy3F9bpSQQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:32:01 2025 by rpki-client