Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2031.roa
File: 36362e3131382e3234372e302f32342d3234203d3e2031.roa (raw, json)
Hash identifier: uTiHtAWd7rbVFU+Ep1k433misFmhzKrIXTYR6hWYKGg=
Subject key identifier: C1:EB:A4:5A:CF:2D:66:37:13:4B:75:18:D5:0F:AC:5A:DD:78:8E:8F
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 4E6B28C70528C1F5C3CDECBFF9413EEF2179DEC3
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2031.roa
Signing time: Tue 04 Mar 2025 19:06:31 +0000
ROA not before: Tue 04 Mar 2025 19:01:31 +0000
ROA not after: Tue 03 Mar 2026 19:06:31 +0000
asID: 1
IP address blocks: 66.118.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 14:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6b:28:c7:05:28:c1:f5:c3:cd:ec:bf:f9:41:3e:ef:21:79:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Mar 4 19:01:31 2025 GMT
Not After : Mar 3 19:06:31 2026 GMT
Subject: CN=C1EBA45ACF2D6637134B7518D50FAC5ADD788E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:24:a9:8a:b9:fa:a7:df:af:31:17:03:b3:
96:82:c5:fa:f6:63:15:2c:b2:f5:21:c6:16:d6:7a:
38:fe:5b:4c:8b:ae:08:eb:65:d2:55:4d:e0:18:62:
83:dc:6c:cb:c4:fb:ff:a2:0d:3d:06:b3:71:05:ac:
2e:98:ad:d9:d0:db:3b:0c:c3:04:9d:da:5a:d5:aa:
cb:00:b4:51:86:6a:0d:1b:82:17:e2:39:68:b2:b4:
f1:f8:9f:df:db:ac:3e:d4:2b:5d:7a:62:8c:c0:da:
51:f5:96:9c:72:6f:22:8b:73:f7:28:18:e1:dd:06:
3e:60:eb:90:d0:43:a2:f6:2e:fd:23:e7:a3:e9:23:
69:e1:49:0b:04:16:51:74:d3:32:20:7f:63:ca:45:
34:c3:56:b7:90:84:43:d4:fb:8e:a4:2c:15:2b:54:
d5:a5:a8:a1:3b:98:93:21:88:53:9a:14:0a:1c:df:
d8:8f:a2:0a:63:df:23:2c:33:ea:f4:d7:2f:68:9d:
57:20:61:11:d4:e4:a6:2f:68:cd:d1:c3:9f:a2:d5:
23:33:57:c3:9a:5e:3a:f2:a0:a3:35:88:69:24:ec:
94:cf:25:8e:2c:6a:e5:24:a5:79:4f:55:e7:14:70:
46:d4:1f:65:0d:db:7d:27:07:bb:25:5f:0a:30:b4:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:A4:5A:CF:2D:66:37:13:4B:75:18:D5:0F:AC:5A:DD:78:8E:8F
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.118.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:bb:a2:20:ee:7d:4d:95:20:c6:ee:07:85:ee:94:4d:84:92:
f1:4b:16:ca:8d:5c:fe:67:49:5e:95:b8:20:a3:a4:27:68:e2:
07:00:52:0d:cd:63:87:61:15:e8:ef:b1:26:c2:ed:6b:93:70:
f1:4f:d2:a8:89:ba:b7:32:3e:b9:01:af:95:f3:22:51:57:cc:
25:13:75:85:69:44:e6:1e:c3:92:83:04:94:ac:13:a1:ea:96:
02:28:4c:e0:23:42:f5:74:29:61:ea:91:90:e6:45:c6:43:b1:
80:89:ed:b4:7d:40:eb:b5:2f:45:f0:7c:8e:7f:9d:20:3b:a2:
1d:f3:c5:54:a8:4d:7c:52:31:c7:04:9c:db:53:af:84:51:51:
f8:fd:5f:46:0c:63:38:10:46:63:73:b8:e9:5f:b0:36:40:6e:
d5:4e:42:5d:12:ac:d1:3c:b4:54:a9:e0:1f:5d:56:e3:e5:5b:
16:71:d4:ff:25:41:41:d7:5d:b2:ce:87:5f:fa:1a:01:00:03:
9f:b8:6a:b0:86:bc:af:e7:14:58:b1:77:25:b1:9f:89:cb:3b:
62:fa:e9:f8:4c:67:c6:bb:e3:04:ac:13:cc:22:e8:0b:61:63:
e5:5d:bc:89:6f:dd:4c:2a:28:95:1b:fe:15:57:33:cd:cb:79:
17:e1:77:86
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUTmsoxwUowfXDzey/+UE+7yF53sMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjUwMzA0MTkwMTMxWhcNMjYwMzAzMTkwNjMx
WjAzMTEwLwYDVQQDEyhDMUVCQTQ1QUNGMkQ2NjM3MTM0Qjc1MThENTBGQUM1QURE
Nzg4RThGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4kqYq5+qff
rzEXA7OWgsX69mMVLLL1IcYW1no4/ltMi64I62XSVU3gGGKD3GzLxPv/og09BrNx
BawumK3Z0Ns7DMMEndpa1arLALRRhmoNG4IX4jlosrTx+J/f26w+1CtdemKMwNpR
9Zaccm8ii3P3KBjh3QY+YOuQ0EOi9i79I+ej6SNp4UkLBBZRdNMyIH9jykU0w1a3
kIRD1PuOpCwVK1TVpaihO5iTIYhTmhQKHN/Yj6IKY98jLDPq9NcvaJ1XIGER1OSm
L2jN0cOfotUjM1fDml468qCjNYhpJOyUzyWOLGrlJKV5T1XnFHBG1B9lDdt9Jwe7
JV8KMLQlAQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMHrpFrPLWY3E0t1GNUPrFrd
eI6PMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMz
YzVjNWY2YjViLzAvMzYzNjJlMzEzMTM4MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAEJ29zANBgkqhkiG9w0BAQsFAAOCAQEAzrui
IO59TZUgxu4Hhe6UTYSS8UsWyo1c/mdJXpW4IKOkJ2jiBwBSDc1jh2EV6O+xJsLt
a5Nw8U/SqIm6tzI+uQGvlfMiUVfMJRN1hWlE5h7DkoMElKwToeqWAihM4CNC9XQp
YeqRkOZFxkOxgInttH1A67UvRfB8jn+dIDuiHfPFVKhNfFIxxwSc21OvhFFR+P1f
RgxjOBBGY3O46V+wNkBu1U5CXRKs0Ty0VKngH11W4+VbFnHU/yVBQdddss6HX/oa
AQADn7hqsIa8r+cUWLF3JbGfics7Yvrp+ExnxrvjBKwTzCLoC2Fj5V28iW/dTCoo
lRv+FVczzct5F+F3hg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:38 2025 by rpki-client