Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9da5c82-7c81-3926-976a-3a80a2e7cd3a.roa
File: d9da5c82-7c81-3926-976a-3a80a2e7cd3a.roa (raw, json)
Hash identifier: CoPY12B6HbwwHbU/Vu0HoEdpDqTG1kon4E5W/z/oCzo=
Subject key identifier: FD:C3:30:06:17:E6:A2:A5:10:EA:9E:AC:53:63:A5:3B:90:14:5E:B3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F98A0BF0E1A138CCFB8E60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9da5c82-7c81-3926-976a-3a80a2e7cd3a.roa
Signing time: Thu 01 May 2025 17:17:56 +0000
ROA not before: Thu 01 May 2025 17:17:56 +0000
ROA not after: Wed 30 Jul 2025 17:17:56 +0000
asID: 22773
IP address blocks: 24.253.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:8a:0b:f0:e1:a1:38:cc:fb:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:17:56 2025 GMT
Not After : Jul 30 17:17:56 2025 GMT
Subject: CN=d18683e0-0a29-47ea-8c76-75c2919767c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:5d:8c:2c:fa:1a:5b:c3:cd:1a:c7:93:a2:
b6:21:1f:20:dc:cd:7f:ce:57:c6:e4:0c:aa:6b:ac:
d1:45:47:c0:ff:6e:f6:f7:8b:63:26:61:0e:58:e1:
16:75:9e:9a:26:9e:d8:d0:9f:54:28:be:58:a4:bb:
1b:3c:dc:4f:75:a9:9f:66:b3:43:a4:9b:9f:a7:dc:
49:18:76:7f:72:b0:1a:7f:2d:d5:a3:39:2b:ed:44:
cf:6a:8c:67:94:9f:e2:fd:d1:74:db:c1:e5:0c:da:
c3:c2:24:39:a9:11:f7:95:c7:ed:c3:9a:3f:40:aa:
d2:1f:f7:09:cf:60:ba:ae:00:0c:6c:05:fc:de:30:
9d:66:74:d6:93:46:d3:31:b3:3a:65:f3:c5:83:8c:
67:7b:c3:6c:e7:23:23:64:6d:a0:e6:65:c8:4c:74:
21:c7:c1:60:ed:51:b4:f5:31:6f:99:c4:cc:1c:12:
f9:73:ed:99:10:6c:78:5b:ec:71:6e:c0:b4:b2:59:
8f:07:0a:dc:46:5f:d1:63:87:89:b4:56:e2:f8:14:
f1:4a:da:cd:b0:30:08:55:bd:59:a9:79:b1:ca:b0:
d6:42:19:43:fe:a0:ba:39:a4:96:dd:31:47:d1:e3:
5b:b1:20:06:d6:ab:98:7f:04:c9:37:3b:43:61:0d:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:30:06:17:E6:A2:A5:10:EA:9E:AC:53:63:A5:3B:90:14:5E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9da5c82-7c81-3926-976a-3a80a2e7cd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.253.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:72:78:24:3f:42:eb:ce:9c:c7:99:7f:cd:d7:ee:21:0c:66:
89:a5:ef:56:85:98:45:d0:b2:e9:cf:e7:79:d0:98:6c:93:1b:
b4:fd:a3:c2:5f:0b:cd:ca:26:51:a6:56:d6:df:fb:bd:f0:d5:
84:8f:69:1b:b5:f2:ef:6c:42:98:b0:a3:fc:86:ba:7f:7c:1e:
f5:fd:0a:5c:3a:70:fe:a6:51:d1:66:94:b3:2d:91:b4:69:f2:
c8:1f:54:1d:6d:b6:f0:80:17:50:45:f8:84:26:b1:79:68:c7:
9e:9c:66:df:10:c9:af:c6:b4:70:83:ec:3a:99:a0:25:dd:b5:
09:b2:f3:7d:63:2f:ee:7c:e0:fb:08:ee:ae:77:da:2e:86:89:
1e:45:32:5c:ed:e9:39:ee:39:e1:e7:2f:9f:21:ac:cf:7d:89:
3e:5e:d9:6e:8c:02:fa:74:1f:ea:64:07:c0:58:bc:53:92:30:
58:5a:64:16:02:76:87:75:10:e7:be:c6:a9:3c:04:9b:44:fa:
75:5e:7d:a1:e8:b9:97:f4:89:de:58:50:d3:8a:4f:56:71:34:
3e:6a:73:04:c1:7b:c5:d7:31:f7:bd:ff:b4:c1:71:62:61:99:
4d:fb:be:01:3f:45:80:99:54:fc:01:51:c9:64:55:5b:de:74:
ff:d5:cf:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+YoL8OGhOMz7jmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MTc1NloXDTI1MDczMDE3MTc1NlowLzEtMCsGA1UEAxMk
ZDE4NjgzZTAtMGEyOS00N2VhLThjNzYtNzVjMjkxOTc2N2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVxdjCz6GlvDzRrHk6K2IR8g3M1/zlfG5Ayq
a6zRRUfA/27294tjJmEOWOEWdZ6aJp7Y0J9UKL5YpLsbPNxPdamfZrNDpJufp9xJ
GHZ/crAafy3Vozkr7UTPaoxnlJ/i/dF028HlDNrDwiQ5qRH3lcftw5o/QKrSH/cJ
z2C6rgAMbAX83jCdZnTWk0bTMbM6ZfPFg4xne8Ns5yMjZG2g5mXITHQhx8Fg7VG0
9TFvmcTMHBL5c+2ZEGx4W+xxbsC0slmPBwrcRl/RY4eJtFbi+BTxStrNsDAIVb1Z
qXmxyrDWQhlD/qC6OaSW3TFH0eNbsSAG1quYfwTJNztDYQ3D6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3DMAYX5qKlEOqerFNjpTuQFF6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDlkYTVjODItN2M4MS0z
OTI2LTk3NmEtM2E4MGEyZTdjZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP12MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlyeCQ/QuvOnMeZf83X7iEMZoml71aFmEXQsunP53nQmGyTG7T9o8Jf
C83KJlGmVtbf+73w1YSPaRu18u9sQpiwo/yGun98HvX9Clw6cP6mUdFmlLMtkbRp
8sgfVB1ttvCAF1BF+IQmsXlox56cZt8Qya/GtHCD7DqZoCXdtQmy831jL+584PsI
7q532i6GiR5FMlzt6TnuOeHnL58hrM99iT5e2W6MAvp0H+pkB8BYvFOSMFhaZBYC
dod1EOe+xqk8BJtE+nVefaHouZf0id5YUNOKT1ZxND5qcwTBe8XXMfe9/7TBcWJh
mU37vgE/RYCZVPwBUclkVVvedP/Vz2Y=
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:34:50 2025 by rpki-client