Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/90cb4b61-20bf-3b5b-8b48-88377fcfe58b.roa
File: 90cb4b61-20bf-3b5b-8b48-88377fcfe58b.roa (raw, json)
Hash identifier: CrAl6Q+6ZHjUV2DIHp4Slt2cxOAwRonT31CQLLx+X6U=
Subject key identifier: 45:08:8D:38:D8:7E:7A:73:EE:5F:B2:10:63:8B:E0:7A:55:15:DD:F5
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285849C20A029BDE49565322ECDD40
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/90cb4b61-20bf-3b5b-8b48-88377fcfe58b.roa
Signing time: Tue 06 May 2025 01:00:47 +0000
ROA not before: Tue 06 May 2025 01:00:47 +0000
ROA not after: Mon 04 Aug 2025 01:00:47 +0000
asID: 23304
IP address blocks: 209.8.237.0/24 maxlen: 24
209.8.238.0/23 maxlen: 24
209.9.162.0/24 maxlen: 25
209.9.164.0/22 maxlen: 24
209.9.168.0/24 maxlen: 24
209.9.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 06 Jun 2025 08:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c2:0a:02:9b:de:49:56:53:22:ec:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: May 6 01:00:47 2025 GMT
Not After : Aug 4 01:00:47 2025 GMT
Subject: CN=14535114-8d38-4546-ad07-1b879e89df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:40:a1:c2:c7:e0:e6:ea:46:bd:b1:71:b7:
14:08:e4:af:e3:fb:dd:72:24:b1:98:dc:74:15:06:
0e:d2:d7:7c:ec:0f:cd:2f:0f:3e:d8:82:4a:66:a8:
63:a0:f2:1f:1d:28:70:8e:b8:76:c6:0c:13:b1:4a:
7c:b3:61:1c:d5:19:3c:49:c8:f3:33:56:3f:d3:b8:
e8:b5:b2:3e:2d:50:f5:8a:fc:08:9d:d7:7a:ac:30:
16:26:ca:3d:6f:18:01:6f:d4:65:d8:52:56:65:ae:
74:43:3f:1d:41:ec:fa:68:97:3b:90:ef:24:86:6f:
a2:e1:8d:55:c2:e7:86:39:d5:e9:f2:9b:e1:75:5b:
a7:e5:20:33:5e:4c:e7:ff:96:de:bc:be:0e:1d:56:
93:8c:48:78:16:b5:6b:00:a5:95:f0:b8:a3:b3:17:
f2:03:f9:2d:95:4c:49:77:67:09:4f:b7:a1:42:8d:
e9:7f:3c:97:e0:d9:99:93:f3:ea:b2:cc:37:6b:81:
b2:c4:35:a0:27:68:18:57:95:ef:16:78:a6:cf:b5:
7e:d8:8d:a5:4b:80:77:5e:75:73:46:0c:bf:54:39:
60:bc:1e:eb:56:01:63:ca:e3:0d:df:43:ba:26:9d:
ff:85:a2:97:65:b4:4b:64:c1:36:7a:95:22:f3:00:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:8D:38:D8:7E:7A:73:EE:5F:B2:10:63:8B:E0:7A:55:15:DD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/90cb4b61-20bf-3b5b-8b48-88377fcfe58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.237.0-209.8.239.255
209.9.162.0/24
209.9.164.0-209.9.168.255
209.9.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:ba:77:d2:97:02:6c:44:47:60:04:49:c2:bc:d7:cf:88:74:
9b:db:5d:12:91:ac:29:4c:e5:98:d6:fe:67:e3:0f:3f:64:11:
2c:74:02:61:cb:e0:55:93:9f:01:98:04:22:43:a2:c2:95:0a:
a8:5b:0d:f0:8a:23:e0:ea:36:64:11:c0:10:ae:98:83:ae:c6:
23:0e:52:3c:23:c9:8a:37:42:b8:ea:7c:3c:f4:72:1d:22:1c:
6c:33:bb:3b:4e:88:0d:03:ed:64:de:40:3b:16:ab:ea:00:c8:
d1:c1:3f:97:6f:09:51:35:68:a5:65:e5:56:91:b9:67:73:9f:
8c:68:79:ec:e5:bc:ed:5f:9f:f8:2e:46:23:4b:f6:99:97:35:
39:c2:b1:d5:4f:a0:d4:80:45:b7:97:c9:a4:8c:87:19:b3:45:
e8:70:0e:42:00:25:a5:72:b3:4c:d9:ec:03:56:63:ea:fd:24:
ac:cf:83:21:79:c3:a8:6f:12:33:e6:05:fd:8d:f3:b2:a4:24:
c6:e4:86:e3:b2:76:3b:a9:1e:b5:cd:83:2d:e7:7e:31:ed:d6:
3c:af:e7:f8:c7:49:09:8b:69:7f:5d:5e:fa:72:ff:8b:8c:4e:
a6:a5:0b:d3:08:2b:59:14:11:9b:b4:25:52:ef:d4:fb:11:f5:
ec:28:ad:bc
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEnCCgKb3klWUyLs3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MTQ1MzUxMTQtOGQzOC00NTQ2LWFkMDctMWI4NzllODlkZjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMRAocLH4ObqRr2xcbcUCOSv4/vdciSxmNx0
FQYO0td87A/NLw8+2IJKZqhjoPIfHShwjrh2xgwTsUp8s2Ec1Rk8ScjzM1Y/07jo
tbI+LVD1ivwIndd6rDAWJso9bxgBb9Rl2FJWZa50Qz8dQez6aJc7kO8khm+i4Y1V
wueGOdXp8pvhdVun5SAzXkzn/5bevL4OHVaTjEh4FrVrAKWV8LijsxfyA/ktlUxJ
d2cJT7ehQo3pfzyX4NmZk/Pqssw3a4GyxDWgJ2gYV5XvFnimz7V+2I2lS4B3XnVz
Rgy/VDlgvB7rVgFjyuMN30O6Jp3/haKXZbRLZME2epUi8wBOVQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFEUIjTjYfnpz7l+yEGOL4HpVFd31MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOTBjYjRiNjEtMjBiZi0z
YjViLThiNDgtODgzNzdmY2ZlNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBADRCO0D
BATRCOADBADRCaIwDAMEAtEJpAMEANEJqAMEAtEJrDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDIunfSlwJs
REdgBEnCvNfPiHSb210SkawpTOWY1v5n4w8/ZBEsdAJhy+BVk58BmAQiQ6LClQqo
Ww3wiiPg6jZkEcAQrpiDrsYjDlI8I8mKN0K46nw89HIdIhxsM7s7TogNA+1k3kA7
FqvqAMjRwT+XbwlRNWilZeVWkblnc5+MaHns5bztX5/4LkYjS/aZlzU5wrHVT6DU
gEW3l8mkjIcZs0XocA5CACWlcrNM2ewDVmPq/SSsz4MhecOobxIz5gX9jfOypCTG
5IbjsnY7qR61zYMt534x7dY8r+f4x0kJi2l/XV76cv+LjE6mpQvTCCtZFBGbtCVS
79T7EfXsKK28
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:52 2025 by rpki-client