Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af787bac-fae0-38e4-b8e0-8f67abcd5087.roa
File: af787bac-fae0-38e4-b8e0-8f67abcd5087.roa (raw, json)
Hash identifier: ADOew0SV8TG0IF/EZXKa0EmtE75SHuLUPN9jLVqpws8=
Subject key identifier: F0:21:5A:05:20:A3:1C:D0:3A:1B:A5:23:72:51:3E:10:F7:FE:FF:58
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD6BF67CA36E28FE64D100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af787bac-fae0-38e4-b8e0-8f67abcd5087.roa
Signing time: Thu 01 May 2025 16:21:16 +0000
ROA not before: Thu 01 May 2025 16:21:16 +0000
ROA not after: Wed 30 Jul 2025 16:21:16 +0000
asID: 22773
IP address blocks: 68.98.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:6b:f6:7c:a3:6e:28:fe:64:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:16 2025 GMT
Not After : Jul 30 16:21:16 2025 GMT
Subject: CN=b6b28414-53b7-43c7-a8af-81ea8962a573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:fc:40:1d:19:90:d1:04:cd:38:88:5c:b1:
81:de:f6:13:e5:61:4c:18:02:bb:cc:b7:bf:92:03:
71:a3:0b:2f:bd:db:65:6f:79:2e:4c:fe:0c:ad:a9:
f6:55:36:e2:43:af:7f:5b:d1:25:6c:e6:cf:c8:7d:
f8:6e:54:f4:a8:0d:aa:3e:04:9f:12:1f:d7:b9:a7:
05:1d:b2:d2:c6:63:17:c9:cd:f2:e6:85:8e:b9:d5:
d2:99:84:0e:c8:67:85:d6:e5:e7:8a:79:67:e9:c8:
57:d0:67:18:9e:9d:40:fb:26:2f:bc:84:08:4f:b0:
f7:de:2e:99:90:7a:87:9c:de:d5:82:07:2a:1c:f2:
5d:5e:6a:36:48:5e:53:ab:71:df:16:5d:fc:4f:d5:
f9:f5:f1:9a:56:cf:02:fb:6d:10:57:ad:9c:a7:d4:
af:cd:37:43:3c:62:09:54:54:65:9f:50:c7:06:7f:
20:8b:29:b5:0e:d4:1f:59:da:22:20:c0:f5:57:d9:
d5:50:5a:26:f7:3f:90:7f:cd:49:f6:5c:25:4b:e4:
84:79:26:cb:8c:90:bc:e0:8c:f0:f4:1b:1a:23:13:
1a:7a:79:5a:7a:0e:4d:2f:f5:7a:2e:3c:6d:ce:74:
e3:9f:dc:2c:c4:41:e7:87:e8:70:a0:6d:c4:99:72:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:21:5A:05:20:A3:1C:D0:3A:1B:A5:23:72:51:3E:10:F7:FE:FF:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af787bac-fae0-38e4-b8e0-8f67abcd5087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.98.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ed:6f:1e:d4:b1:1d:76:38:ca:cf:11:7c:66:8a:30:6d:39:
9d:17:12:7d:97:ed:af:d5:b9:51:c9:89:93:a5:ad:8b:79:44:
c1:8d:36:a7:5a:e7:f5:6f:3e:d8:61:81:a5:0b:ba:aa:76:37:
bc:ec:7e:59:dd:0f:74:0d:47:c8:64:0a:dc:3d:56:58:88:35:
59:da:dc:7e:9a:fc:61:65:95:7c:7d:f9:91:58:97:28:73:57:
a1:a0:f7:47:95:ca:5c:65:03:79:9f:1d:0c:bb:64:f4:92:98:
38:e3:69:7d:24:0c:8a:28:ad:40:46:04:b2:f8:11:ed:05:83:
97:d0:78:14:3f:e3:99:e2:4f:75:3a:b6:7d:76:2d:d3:51:f5:
a2:3d:25:00:9a:1c:48:43:80:d0:8a:98:b8:f2:ce:31:e1:62:
1b:b2:f0:d6:65:1f:95:ee:cc:89:97:d7:24:8b:32:1d:cc:06:
4a:bf:25:9c:c8:15:84:e8:27:fd:65:7b:1f:00:36:c6:fa:72:
cf:f0:3c:27:91:65:f7:b0:23:4a:9e:f7:57:20:15:3a:31:0a:
4f:64:ea:61:d5:94:48:27:0c:e9:c8:9f:90:61:78:a7:53:7d:
f5:71:bf:1d:9f:24:34:00:f3:92:5e:29:e1:8a:f6:e7:b7:e3:
1d:a1:cb:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13Wv2fKNuKP5k0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjExNloXDTI1MDczMDE2MjExNlowLzEtMCsGA1UEAxMk
YjZiMjg0MTQtNTNiNy00M2M3LWE4YWYtODFlYTg5NjJhNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o78QB0ZkNEEzTiIXLGB3vYT5WFMGAK7zLe/
kgNxowsvvdtlb3kuTP4Mran2VTbiQ69/W9ElbObPyH34blT0qA2qPgSfEh/XuacF
HbLSxmMXyc3y5oWOudXSmYQOyGeF1uXninln6chX0GcYnp1A+yYvvIQIT7D33i6Z
kHqHnN7VggcqHPJdXmo2SF5Tq3HfFl38T9X59fGaVs8C+20QV62cp9SvzTdDPGIJ
VFRln1DHBn8giym1DtQfWdoiIMD1V9nVUFom9z+Qf81J9lwlS+SEeSbLjJC84Izw
9BsaIxMaenlaeg5NL/V6LjxtznTjn9wsxEHnh+hwoG3EmXIlOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAhWgUgoxzQOhulI3JRPhD3/v9YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY3ODdiYWMtZmFlMC0z
OGU0LWI4ZTAtOGY2N2FiY2Q1MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGI8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPtbx7UsR12OMrPEXxmijBtOZ0XEn2X7a/VuVHJiZOlrYt5RMGNNqda
5/VvPthhgaULuqp2N7zsflndD3QNR8hkCtw9VliINVna3H6a/GFllXx9+ZFYlyhz
V6Gg90eVylxlA3mfHQy7ZPSSmDjjaX0kDIoorUBGBLL4Ee0Fg5fQeBQ/45niT3U6
tn12LdNR9aI9JQCaHEhDgNCKmLjyzjHhYhuy8NZlH5XuzImX1ySLMh3MBkq/JZzI
FYToJ/1lex8ANsb6cs/wPCeRZfewI0qe91cgFToxCk9k6mHVlEgnDOnIn5BheKdT
ffVxvx2fJDQA85JeKeGK9ue34x2hy5I=
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:44:29 2025 by rpki-client