Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec4e5782-dc35-3ccf-a27a-a52f486db16b.roa
File: ec4e5782-dc35-3ccf-a27a-a52f486db16b.roa (raw, json)
Hash identifier: 0RrksMDOATh7AdcidlBqmhFEWp6mKjkO7S7Syj+HVEk=
Subject key identifier: 06:31:80:63:6F:B0:56:29:00:E8:E5:B0:4E:74:63:67:C2:4E:71:8D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9DD6ED27326FA54366600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec4e5782-dc35-3ccf-a27a-a52f486db16b.roa
Signing time: Thu 01 May 2025 17:18:35 +0000
ROA not before: Thu 01 May 2025 17:18:35 +0000
ROA not after: Wed 30 Jul 2025 17:18:35 +0000
asID: 22773
IP address blocks: 68.108.120.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 22:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:dd:6e:d2:73:26:fa:54:36:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:35 2025 GMT
Not After : Jul 30 17:18:35 2025 GMT
Subject: CN=f68e0239-c1aa-41f6-b2a4-44b697568f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:31:24:0e:0b:44:23:b8:5e:3b:c1:f7:f1:
10:7d:52:92:4a:8d:eb:d5:0e:a8:fd:52:af:fe:01:
56:e9:9c:60:1c:ca:ea:5d:6b:6f:52:10:d8:7c:25:
c6:8d:34:f4:d2:05:b5:77:67:1a:11:61:12:b2:cd:
53:53:82:d6:c7:9d:47:e3:c6:fc:be:3e:29:75:b4:
50:ec:00:29:53:bd:0a:1f:68:a3:c4:14:e7:f7:14:
3f:8a:10:45:62:7e:00:27:1b:56:e4:a8:46:28:1a:
86:46:40:04:e5:fd:64:3c:4b:3c:23:da:36:25:3a:
79:80:2f:2e:0a:59:0e:b6:72:42:cd:ce:0d:06:fa:
33:6f:d4:9d:16:26:43:af:2a:1a:05:fc:42:e6:07:
4d:f4:ca:1d:57:67:76:43:ca:33:29:37:fe:e3:b1:
0d:88:05:b8:f3:83:a4:36:87:31:ee:ea:bf:77:2d:
7a:26:63:34:08:f3:47:56:03:f8:c9:d3:77:c5:3a:
11:61:33:f7:c4:83:6b:8b:cf:ec:a8:d7:78:e3:e4:
6c:19:56:35:7f:01:7b:3e:1e:00:1d:25:b2:5c:c0:
0a:cb:af:44:f6:9d:a2:85:fb:3f:4d:ac:a3:b6:8b:
24:86:f2:79:7d:ff:69:de:8d:91:29:22:fb:43:82:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:80:63:6F:B0:56:29:00:E8:E5:B0:4E:74:63:67:C2:4E:71:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec4e5782-dc35-3ccf-a27a-a52f486db16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:15:35:f3:44:aa:b1:44:b1:8d:90:40:39:38:c7:0f:ef:2e:
a5:b6:a8:a0:e8:a8:93:2a:c9:5f:70:ed:71:d5:e9:e9:7b:4c:
1c:21:50:cc:bc:47:c1:53:92:2b:b4:18:47:b1:9d:01:2c:f3:
6d:f0:5b:af:06:da:13:91:98:7e:dc:a4:7f:8d:f3:34:06:a0:
c1:96:7a:61:30:7b:af:9a:72:5d:9f:b0:8e:df:77:46:a2:a3:
51:11:a8:fc:15:72:8f:43:33:a7:97:1a:99:41:c9:a8:73:6a:
47:e2:e8:23:57:6b:44:4d:a2:18:19:7c:14:65:27:78:12:ab:
27:d1:97:66:90:24:3f:c8:5e:bc:19:03:cd:1f:dc:57:94:a1:
e3:9a:75:4f:4e:c0:ed:1c:98:8e:fa:f2:60:99:86:21:ff:bd:
fa:24:0c:66:6d:61:a9:63:cd:eb:f6:dd:e6:20:61:a4:3f:a8:
d9:74:a3:42:16:9a:e9:aa:34:93:ab:f4:86:49:9e:c8:7d:04:
4d:12:d2:62:aa:3b:7a:9b:f5:55:6e:c9:03:4a:ea:22:cc:25:
b7:ed:d4:8f:c8:2a:af:15:03:d8:35:33:2c:4b:1f:8c:7c:91:
f4:20:55:08:23:cb:17:77:2c:68:76:e8:90:88:68:8d:15:08:
de:01:a2:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+d1u0nMm+lQ2ZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MTgzNVoXDTI1MDczMDE3MTgzNVowLzEtMCsGA1UEAxMk
ZjY4ZTAyMzktYzFhYS00MWY2LWIyYTQtNDRiNjk3NTY4ZjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApskxJA4LRCO4XjvB9/EQfVKSSo3r1Q6o/VKv
/gFW6ZxgHMrqXWtvUhDYfCXGjTT00gW1d2caEWESss1TU4LWx51H48b8vj4pdbRQ
7AApU70KH2ijxBTn9xQ/ihBFYn4AJxtW5KhGKBqGRkAE5f1kPEs8I9o2JTp5gC8u
ClkOtnJCzc4NBvozb9SdFiZDryoaBfxC5gdN9ModV2d2Q8ozKTf+47ENiAW484Ok
Nocx7uq/dy16JmM0CPNHVgP4ydN3xToRYTP3xINri8/sqNd44+RsGVY1fwF7Ph4A
HSWyXMAKy69E9p2ihfs/TayjtoskhvJ5ff9p3o2RKSL7Q4J1fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYxgGNvsFYpAOjlsE50Y2fCTnGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWM0ZTU3ODItZGMzNS0z
Y2NmLWEyN2EtYTUyZjQ4NmRiMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGx4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcVNfNEqrFEsY2QQDk4xw/vLqW2qKDoqJMqyV9w7XHV6el7TBwhUMy8
R8FTkiu0GEexnQEs823wW68G2hORmH7cpH+N8zQGoMGWemEwe6+acl2fsI7fd0ai
o1ERqPwVco9DM6eXGplByahzakfi6CNXa0RNohgZfBRlJ3gSqyfRl2aQJD/IXrwZ
A80f3FeUoeOadU9OwO0cmI768mCZhiH/vfokDGZtYaljzev23eYgYaQ/qNl0o0IW
mumqNJOr9IZJnsh9BE0S0mKqO3qb9VVuyQNK6iLMJbft1I/IKq8VA9g1MyxLH4x8
kfQgVQgjyxd3LGh26JCIaI0VCN4BonA=
-----END CERTIFICATE-----
Generated at Wed Jun 18 19:21:20 2025 by rpki-client