Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6fa59505-f39b-3458-b3dd-26738f67d1c1.roa
File: 6fa59505-f39b-3458-b3dd-26738f67d1c1.roa (raw, json)
Hash identifier: q+I144S0NnfwkuGPAReIcc+E4zONWsktyfITO6Vjas0=
Subject key identifier: CB:2F:03:C3:E3:EE:78:0F:14:47:BF:48:BE:78:90:90:AE:A5:E6:71
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD6B346F39AAE8F2A18100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6fa59505-f39b-3458-b3dd-26738f67d1c1.roa
Signing time: Thu 01 May 2025 16:21:16 +0000
ROA not before: Thu 01 May 2025 16:21:16 +0000
ROA not after: Wed 30 Jul 2025 16:21:16 +0000
asID: 22773
IP address blocks: 68.98.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:6b:34:6f:39:aa:e8:f2:a1:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:16 2025 GMT
Not After : Jul 30 16:21:16 2025 GMT
Subject: CN=b4b1399d-fafa-4bd1-9f04-69745804dabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3a:33:b3:d7:94:c8:61:4d:b9:29:27:17:12:
fd:66:87:9b:3c:da:f0:9b:a5:51:c7:e7:71:09:6d:
9e:64:96:44:48:b1:06:4a:27:74:30:6d:69:8f:bc:
12:22:c3:43:f6:1d:70:2c:cc:32:09:31:be:e8:a1:
67:8c:89:45:c7:99:60:64:da:6c:05:9d:7a:cf:c5:
f2:99:b8:c1:76:75:cc:d8:9e:09:b4:cd:bf:96:88:
7d:8d:f9:03:b9:a2:54:67:c3:2d:06:25:02:bc:61:
47:73:12:3a:8f:c3:da:3b:f6:a6:c1:8c:35:96:c2:
98:9d:02:a8:47:a5:38:fa:ea:01:3b:ef:6f:7a:92:
d5:19:6f:87:6f:71:d2:69:61:f6:8e:38:6e:6b:1a:
3b:0b:aa:53:95:4c:37:74:46:48:97:25:54:95:e4:
8c:b1:60:e0:27:f2:57:5e:7d:3f:14:ce:8a:d1:ba:
59:bd:27:01:9b:99:f6:13:b6:c8:b5:11:dc:b4:6a:
35:14:d1:d7:77:fc:f2:bd:6c:bf:c8:52:3e:01:fb:
5c:53:d6:54:bf:72:a4:e2:86:b3:97:f1:ca:70:a5:
f1:ef:12:90:11:c0:84:e0:5d:c6:60:be:a5:08:70:
1f:c3:d8:48:81:80:48:bf:a7:a7:93:02:18:53:3a:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:03:C3:E3:EE:78:0F:14:47:BF:48:BE:78:90:90:AE:A5:E6:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6fa59505-f39b-3458-b3dd-26738f67d1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.98.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a4:d1:a5:b1:5d:4f:c4:ce:1f:83:26:c7:42:a1:68:3e:f0:
a0:03:8b:73:a1:5b:90:e0:90:57:2e:fe:ce:a8:af:f0:71:0c:
6e:c8:6d:00:43:88:1f:8d:24:66:8e:6d:d7:ef:d7:4c:ab:05:
89:5c:94:db:fb:61:90:f5:dd:3a:40:f5:e3:4b:17:4e:12:2a:
ae:7e:36:57:c7:44:84:d6:6f:f4:b4:f1:1d:84:a2:78:2b:6d:
a6:0b:8f:c5:c3:e6:9c:8a:fe:77:74:1a:78:26:7e:3e:f0:00:
d4:85:33:2f:65:01:a6:09:c7:1a:18:59:a2:9b:eb:ae:1e:ff:
0b:54:96:37:83:1b:06:54:08:f5:a7:2b:38:44:31:68:94:2a:
8c:b5:33:d0:ec:86:7c:22:ba:59:ec:3b:a4:4c:88:09:c7:a3:
12:b8:66:44:9a:95:d4:8c:65:9e:a3:8e:b0:91:38:75:a2:bf:
ad:b9:95:70:2c:74:b7:fc:b7:ba:65:30:b5:17:bb:9c:50:9d:
52:1e:33:fd:b6:7a:37:4f:f8:94:d7:d2:55:86:ea:5d:57:cd:
a7:bd:11:ad:4d:2b:15:2e:b0:a1:20:de:75:a7:35:37:7b:9c:
f5:bd:07:52:f0:82:6a:24:b8:cd:ab:2e:3c:f6:26:bc:2c:08:
3b:5d:58:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13Ws0bzmq6PKhgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjExNloXDTI1MDczMDE2MjExNlowLzEtMCsGA1UEAxMk
YjRiMTM5OWQtZmFmYS00YmQxLTlmMDQtNjk3NDU4MDRkYWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTozs9eUyGFNuSknFxL9ZoebPNrwm6VRx+dx
CW2eZJZESLEGSid0MG1pj7wSIsND9h1wLMwyCTG+6KFnjIlFx5lgZNpsBZ16z8Xy
mbjBdnXM2J4JtM2/loh9jfkDuaJUZ8MtBiUCvGFHcxI6j8PaO/amwYw1lsKYnQKo
R6U4+uoBO+9vepLVGW+Hb3HSaWH2jjhuaxo7C6pTlUw3dEZIlyVUleSMsWDgJ/JX
Xn0/FM6K0bpZvScBm5n2E7bItRHctGo1FNHXd/zyvWy/yFI+AftcU9ZUv3Kk4oaz
l/HKcKXx7xKQEcCE4F3GYL6lCHAfw9hIgYBIv6enkwIYUzojFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsvA8Pj7ngPFEe/SL54kJCupeZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmZhNTk1MDUtZjM5Yi0z
NDU4LWIzZGQtMjY3MzhmNjdkMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGk0aWxXU/Ezh+DJsdCoWg+8KADi3OhW5DgkFcu/s6or/BxDG7IbQBD
iB+NJGaObdfv10yrBYlclNv7YZD13TpA9eNLF04SKq5+NlfHRITWb/S08R2Eongr
baYLj8XD5pyK/nd0Gngmfj7wANSFMy9lAaYJxxoYWaKb664e/wtUljeDGwZUCPWn
KzhEMWiUKoy1M9DshnwiulnsO6RMiAnHoxK4ZkSaldSMZZ6jjrCROHWiv625lXAs
dLf8t7plMLUXu5xQnVIeM/22ejdP+JTX0lWG6l1Xzae9Ea1NKxUusKEg3nWnNTd7
nPW9B1LwgmokuM2rLjz2JrwsCDtdWEg=
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:21:12 2025 by rpki-client