Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6b895fd-f3ad-3efe-b9e3-2b174f265d4c.roa
File: a6b895fd-f3ad-3efe-b9e3-2b174f265d4c.roa (raw, json)
Hash identifier: ubJhdbG85vbk2BhRRfWo+HiFXRB6QLFesyCBUMcMEFA=
Subject key identifier: 0F:F6:3B:A0:CB:90:58:D9:9D:6A:4C:03:E2:A6:83:8C:60:FD:B9:DF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0E676A215C7FE201A3F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6b895fd-f3ad-3efe-b9e3-2b174f265d4c.roa
Signing time: Thu 01 May 2025 16:28:17 +0000
ROA not before: Thu 01 May 2025 16:28:17 +0000
ROA not after: Wed 30 Jul 2025 16:28:17 +0000
asID: 22773
IP address blocks: 98.161.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:e6:76:a2:15:c7:fe:20:1a:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:28:17 2025 GMT
Not After : Jul 30 16:28:17 2025 GMT
Subject: CN=bbe4a806-9c30-4e78-bc0e-16985a2bed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:52:b1:31:83:4d:4a:7d:8b:32:b3:6b:27:
36:64:76:b8:c1:40:b0:d1:19:90:65:a2:52:2c:68:
85:b1:b1:60:68:eb:9b:0f:3f:a1:84:87:e1:70:37:
a4:71:28:fa:d7:70:6f:c6:b2:73:30:f4:7a:e8:5c:
2a:38:79:20:7e:48:95:1d:22:b8:51:01:95:c5:a9:
37:da:25:26:d9:13:3f:8a:54:7b:50:91:0c:0d:95:
ae:b9:cd:dd:dc:e4:f6:a8:1f:ed:1c:8b:ce:4c:43:
fe:a0:88:37:70:6a:e5:95:11:61:59:f2:5d:c9:0d:
17:b3:35:6a:b9:3c:06:84:6a:76:78:61:e5:74:99:
dc:db:fc:3d:0f:4f:c7:51:df:49:53:8c:86:11:be:
02:58:d1:47:1f:22:5b:fb:d7:e3:a8:0a:84:1e:3a:
90:3b:0e:75:44:0d:ae:6f:f8:b4:ea:30:c8:b3:ef:
3c:36:33:9d:67:b4:66:3a:3e:3b:ee:79:0d:50:37:
8d:70:87:6b:bc:bf:17:97:bd:53:fe:ac:6d:b3:01:
f1:6a:0a:91:b7:bb:85:23:1b:8c:e2:db:96:ce:30:
2e:e2:37:16:4d:c6:9d:db:ef:3e:51:a2:62:2e:6b:
33:ab:16:50:fc:b1:98:c1:d3:4d:de:02:c4:e8:c0:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:3B:A0:CB:90:58:D9:9D:6A:4C:03:E2:A6:83:8C:60:FD:B9:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6b895fd-f3ad-3efe-b9e3-2b174f265d4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:0e:32:7d:63:fa:a3:69:fc:f7:f3:49:b7:24:ab:59:4c:45:
4c:21:25:2a:ad:a7:e4:03:88:f9:b8:17:63:c5:06:59:ad:00:
86:a8:d8:cc:6b:a7:fc:03:1d:14:cc:c9:92:e7:21:02:95:04:
8d:04:bf:e2:d0:2b:71:72:e1:80:cc:8c:f5:b5:6d:66:2a:4f:
c2:7a:87:67:08:fb:ef:07:a2:f5:24:8d:b1:ce:35:a9:a5:48:
38:ae:4d:19:1d:44:4e:d0:08:4e:c2:f0:ca:4f:ad:cb:63:5b:
ee:4e:d5:ff:4e:2b:05:9f:98:05:e7:bc:d7:da:c2:df:e9:cb:
41:cb:bb:11:a2:d4:74:98:26:cc:42:4e:c2:70:07:47:61:66:
8a:b4:af:99:f7:6d:b0:05:94:2d:78:71:2a:63:6d:77:6b:78:
94:18:cd:16:ee:d7:97:b6:dd:28:5e:dc:8c:bd:d3:22:44:b0:
00:32:e3:5b:1e:6b:7f:e1:dd:87:d4:25:6e:f5:10:0c:52:bb:
3c:89:f1:cf:0b:01:07:d6:d8:dd:97:1d:25:7d:2a:fe:7a:4c:
62:3c:34:04:5d:56:cc:98:a6:70:b0:47:7e:14:7a:d5:1b:8f:
a1:6f:53:fc:54:e8:a4:7c:63:43:51:cd:e3:b6:4e:fc:9e:2f:
79:85:be:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14OZ2ohXH/iAaPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjgxN1oXDTI1MDczMDE2MjgxN1owLzEtMCsGA1UEAxMk
YmJlNGE4MDYtOWMzMC00ZTc4LWJjMGUtMTY5ODVhMmJlZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlSsTGDTUp9izKzayc2ZHa4wUCw0RmQZaJS
LGiFsbFgaOubDz+hhIfhcDekcSj613BvxrJzMPR66FwqOHkgfkiVHSK4UQGVxak3
2iUm2RM/ilR7UJEMDZWuuc3d3OT2qB/tHIvOTEP+oIg3cGrllRFhWfJdyQ0XszVq
uTwGhGp2eGHldJnc2/w9D0/HUd9JU4yGEb4CWNFHHyJb+9fjqAqEHjqQOw51RA2u
b/i06jDIs+88NjOdZ7RmOj477nkNUDeNcIdrvL8Xl71T/qxtswHxagqRt7uFIxuM
4tuWzjAu4jcWTcad2+8+UaJiLmszqxZQ/LGYwdNN3gLE6MBhOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/2O6DLkFjZnWpMA+Kmg4xg/bnfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTZiODk1ZmQtZjNhZC0z
ZWZlLWI5ZTMtMmIxNzRmMjY1ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqGJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcOMn1j+qNp/PfzSbckq1lMRUwhJSqtp+QDiPm4F2PFBlmtAIao2Mxr
p/wDHRTMyZLnIQKVBI0Ev+LQK3Fy4YDMjPW1bWYqT8J6h2cI++8HovUkjbHONaml
SDiuTRkdRE7QCE7C8MpPrctjW+5O1f9OKwWfmAXnvNfawt/py0HLuxGi1HSYJsxC
TsJwB0dhZoq0r5n3bbAFlC14cSpjbXdreJQYzRbu15e23She3Iy90yJEsAAy41se
a3/h3YfUJW71EAxSuzyJ8c8LAQfW2N2XHSV9Kv56TGI8NARdVsyYpnCwR34UetUb
j6FvU/xU6KR8Y0NRzeO2TvyeL3mFvi8=
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:59:09 2025 by rpki-client