Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa
File: 273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa (raw, json)
Hash identifier: XpELsCq8X/cGpcDJyQ3jrZnz6nVNcLSImH16uEUakAE=
Subject key identifier: 02:19:A2:F0:4D:EA:5C:84:BA:77:A6:FB:44:D4:89:9C:7C:4D:2E:7C
Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Certificate serial: 010D0C9F432858499829C2799A32A6007D44B6C0
Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa
Signing time: Mon 21 Apr 2025 01:00:47 +0000
ROA not before: Mon 21 Apr 2025 01:00:47 +0000
ROA not after: Sun 20 Jul 2025 01:00:47 +0000
asID: 2914
IP address blocks: 68.170.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:98:29:c2:79:9a:32:a6:00:7d:44:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Validity
Not Before: Apr 21 01:00:47 2025 GMT
Not After : Jul 20 01:00:47 2025 GMT
Subject: CN=94f8ce60-c1da-4e61-b0c4-7169ac244d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:24:6d:a5:64:05:ed:8d:e8:e8:b2:3a:6c:
40:7b:9c:f3:7f:07:77:d6:26:28:39:12:51:85:6e:
c2:df:2d:ed:06:2c:72:95:64:d9:d2:90:28:7b:90:
82:1c:90:83:61:b9:c4:6c:07:8a:a8:5b:dc:c2:2c:
f9:7c:aa:6f:58:ea:a6:31:06:90:68:54:0b:22:d0:
57:ae:3c:e3:fe:2b:ac:82:d6:dd:f0:3c:06:2a:40:
62:39:88:8e:ca:a7:7a:7c:d2:7a:a7:c5:86:9e:eb:
0a:e7:3a:c1:1d:4a:ad:6a:e9:29:f9:e7:09:72:6c:
14:18:ab:e2:17:ba:35:b2:10:7f:b4:75:45:b7:7b:
76:ff:f5:c7:82:7c:67:82:9b:e8:b2:3f:40:ed:1a:
26:c5:f5:c1:28:83:b0:50:dd:c0:65:09:2a:82:bc:
d1:c1:61:b8:9c:48:ef:bb:b7:5d:b5:84:5c:33:45:
4b:03:0a:fb:ee:b6:6f:2d:ba:86:c5:74:f3:1a:79:
7f:f2:08:8d:85:b2:c2:3c:50:c9:48:8c:92:a8:0e:
89:19:28:55:21:42:85:91:fe:05:b9:42:60:32:43:
90:b1:a6:b3:e8:57:76:03:93:50:23:3a:53:23:75:
17:cd:74:d5:2c:60:34:7a:8d:48:12:be:0d:32:e4:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:A2:F0:4D:EA:5C:84:BA:77:A6:FB:44:D4:89:9C:7C:4D:2E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl
X509v3 Authority Key Identifier:
keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:bf:b3:d3:f9:5c:d7:40:f1:fc:c0:6b:86:cd:49:2b:9d:c2:
fa:cc:01:a9:90:62:16:fc:62:b6:75:e9:9f:21:99:35:2e:c2:
4e:ee:ad:c4:3e:95:a2:2f:97:28:ce:f1:06:23:6e:4c:7d:06:
f2:55:33:a2:67:d7:e3:37:8e:ea:7f:2e:e7:85:25:74:db:e9:
c2:0e:1f:30:83:45:c1:2b:dd:d6:23:27:36:0d:fc:25:9e:c8:
94:28:78:b3:7d:ba:38:40:a4:53:28:27:38:d9:25:1d:2f:ce:
61:96:ba:36:a4:4a:c3:48:69:92:d4:d3:41:ef:f8:24:ac:3d:
22:37:70:10:18:a7:6b:bf:52:b8:4e:46:89:23:36:f8:d5:cf:
f4:3c:a3:a7:cf:5f:6a:bb:77:b5:27:5a:fa:85:61:09:38:aa:
d5:92:07:f0:90:3d:13:9f:7f:74:54:a7:36:af:36:09:7a:11:
b7:ea:62:e0:19:c3:3f:df:4f:a6:57:f2:d2:a7:ef:06:8c:50:
b4:58:17:fe:a4:12:63:91:ae:67:dc:da:82:3c:29:8e:ee:d5:
c8:f8:77:d3:ce:d8:6f:15:21:80:e0:2f:86:62:c0:db:5b:07:
ab:62:6a:84:51:49:19:24:bc:ff:7e:1e:64:be:21:1a:82:cb:
ff:ea:8d:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcJ5mjKmAH1EtsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1
NDQ5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
OTRmOGNlNjAtYzFkYS00ZTYxLWIwYzQtNzE2OWFjMjQ0ZDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht4kbaVkBe2N6OiyOmxAe5zzfwd31iYoORJR
hW7C3y3tBixylWTZ0pAoe5CCHJCDYbnEbAeKqFvcwiz5fKpvWOqmMQaQaFQLItBX
rjzj/iusgtbd8DwGKkBiOYiOyqd6fNJ6p8WGnusK5zrBHUqtaukp+ecJcmwUGKvi
F7o1shB/tHVFt3t2//XHgnxngpvosj9A7RomxfXBKIOwUN3AZQkqgrzRwWG4nEjv
u7ddtYRcM0VLAwr77rZvLbqGxXTzGnl/8giNhbLCPFDJSIySqA6JGShVIUKFkf4F
uUJgMkOQsaaz6Fd2A5NQIzpTI3UXzXTVLGA0eo1IEr4NMuTZgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIZovBN6lyEunem+0TUiZx8TS58MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1
NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMjczYmQ4OGMtMTUxZi0z
ZWFhLTgyZjYtZTI4NTllM2M4NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3
MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz
NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1
OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGu/s9P5XNdA8fzAa4bNSSudwvrMAamQYhb8YrZ16Z8hmTUuwk7urcQ+
laIvlyjO8QYjbkx9BvJVM6Jn1+M3jup/LueFJXTb6cIOHzCDRcEr3dYjJzYN/CWe
yJQoeLN9ujhApFMoJzjZJR0vzmGWujakSsNIaZLU00Hv+CSsPSI3cBAYp2u/UrhO
RokjNvjVz/Q8o6fPX2q7d7UnWvqFYQk4qtWSB/CQPROff3RUpzavNgl6EbfqYuAZ
wz/fT6ZX8tKn7waMULRYF/6kEmORrmfc2oI8KY7u1cj4d9PO2G8VIYDgL4ZiwNtb
B6tiaoRRSRkkvP9+HmS+IRqCy//qjU8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:49 2025 by rpki-client