Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
File: de1106a5-7c8a-30c0-a638-03a316d3736c.roa (raw, json)
Hash identifier: PHt9q1BDYIpH08m5gI64YR5wvbODnz/vGxBUDgk4AzY=
Subject key identifier: A4:30:1C:FD:94:FE:2F:10:78:A4:1C:99:0C:87:74:84:CB:15:F5:83
Certificate issuer: /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial: 010D0C9F4328584B0CDC10CC5AA176E12A701600
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
Signing time: Mon 01 Sep 2025 13:00:40 +0000
ROA not before: Mon 01 Sep 2025 13:00:40 +0000
ROA not after: Sun 30 Nov 2025 14:00:40 +0000
asID: 205220
IP address blocks: 66.245.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Sep 2025 19:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0c:dc:10:cc:5a:a1:76:e1:2a:70:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Validity
Not Before: Sep 1 13:00:40 2025 GMT
Not After : Nov 30 14:00:40 2025 GMT
Subject: CN=1a2b550d-66ec-45a6-ba95-392f9643ea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:ae:95:bf:30:05:87:a0:98:77:e0:a3:bd:
ee:4b:44:6e:ad:f9:77:59:22:f4:57:95:81:55:e3:
79:ce:d4:ec:07:61:6a:08:4c:dd:56:d3:08:be:fa:
ac:ce:b4:4b:0d:c9:e8:20:e2:cd:ff:65:56:03:fb:
dc:35:77:48:83:b2:e5:e4:28:76:fc:30:d6:6e:39:
83:c6:d3:22:0a:c9:68:aa:2a:9b:2e:d1:bf:d2:27:
53:e1:52:7d:fe:5c:9f:b2:18:b4:7a:44:98:d9:73:
67:bb:57:52:3f:b6:e7:37:35:8a:0a:38:ab:91:37:
e0:1f:00:d1:61:cf:92:6a:d3:7f:86:7a:1e:80:dc:
b2:7c:c5:ea:50:e7:09:f8:7a:b0:70:7a:cf:00:88:
77:38:49:8c:60:2b:eb:e6:19:03:ac:6b:11:c2:e4:
10:5b:b8:c0:d7:07:57:6d:70:5d:a9:58:6c:d1:76:
f5:47:5e:99:1e:c2:a2:d7:6b:84:94:3a:a8:2c:07:
3d:9b:ce:97:03:2c:0a:a8:74:4e:ce:15:b8:64:41:
2a:77:4f:8a:4e:cf:4b:f4:9a:4c:15:f0:3f:f9:40:
54:c3:20:d3:6d:cd:91:f8:21:54:c7:97:bb:6c:5d:
23:00:72:42:7b:54:08:fd:59:a5:ea:f8:04:9e:cc:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:1C:FD:94:FE:2F:10:78:A4:1C:99:0C:87:74:84:CB:15:F5:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
X509v3 Authority Key Identifier:
keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
sbgp-ipAddrBlock: critical
IPv4:
66.245.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:c8:0f:4b:3d:1a:66:e2:9d:52:4f:f1:b4:4d:5f:1b:80:e6:
c0:e3:d9:25:28:73:cf:71:0c:04:e8:fa:70:63:9b:dc:26:17:
38:08:44:bd:71:37:20:b4:b2:f1:1c:00:fe:af:ef:ef:b9:43:
61:b8:fb:8b:bc:26:51:88:7c:43:92:5e:74:66:ec:02:71:c9:
02:b0:54:20:30:8b:9b:c0:79:ce:98:cf:83:45:c9:4c:55:84:
50:68:50:8f:1f:b6:23:61:3f:67:27:5e:92:2e:5d:56:d8:c0:
6d:cf:4c:d5:c9:73:1b:03:98:4c:5a:87:5c:6d:76:b9:2d:49:
d5:cc:2b:7b:fb:ec:df:62:ab:4e:53:21:cb:eb:36:68:58:0d:
47:60:1c:f0:e1:4f:ef:41:f0:af:30:c6:ae:76:14:c6:6d:62:
6e:8a:e8:f5:7f:d6:0a:2a:ea:4f:5e:fc:5d:d5:43:14:14:73:
62:9b:07:50:6a:fd:c0:8b:8e:af:83:8e:cd:b5:f0:3b:1b:64:
f2:95:2e:03:86:bf:14:3a:68:4d:1d:2a:f2:8e:be:69:d2:94:
67:30:13:2d:6b:28:65:66:6d:f1:dd:7c:42:86:9d:c9:12:41:
80:22:45:a6:06:87:71:f4:26:f8:ac:0e:0b:cf:78:b3:c4:ad:
d5:97:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 03:14:46 2025 by rpki-client