Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/044e3667-fd8e-3d7f-8f3a-d72631968b04.roa
File: 044e3667-fd8e-3d7f-8f3a-d72631968b04.roa (raw, json)
Hash identifier: NjmoRjvAFJP4k56ScxYYvEROB4vJaZmCtoJ4Yt8z1EU=
Subject key identifier: 3C:86:91:4C:B6:B7:DA:89:09:DC:39:F6:23:03:83:E0:01:E4:50:2E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848FDA51A3872FF3BE3D56D8D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/044e3667-fd8e-3d7f-8f3a-d72631968b04.roa
Signing time: Mon 24 Feb 2025 16:39:04 +0000
ROA not before: Mon 24 Feb 2025 16:39:04 +0000
ROA not after: Sun 25 May 2025 15:39:04 +0000
asID: 834
IP address blocks: 166.0.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 18:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:a5:1a:38:72:ff:3b:e3:d5:6d:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 24 16:39:04 2025 GMT
Not After : May 25 15:39:04 2025 GMT
Subject: CN=84bc9a7b-6834-4a59-8459-ae7683a32691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:21:81:05:6d:0d:de:f6:6b:4d:0e:49:74:
44:2c:09:db:39:a9:89:53:c1:59:5d:d7:81:c3:14:
9b:66:a8:89:c1:4e:db:43:a2:60:7f:4c:47:92:25:
c1:71:dc:7b:e1:1b:d1:56:5a:f2:24:f1:6c:8a:81:
6b:6f:08:c9:1e:04:60:a4:83:75:df:04:8f:4d:4f:
42:6c:4b:62:10:d7:5c:3e:25:21:92:1b:47:9f:51:
42:1d:58:ec:e6:9d:04:b0:09:de:fc:1a:f1:03:f2:
db:d7:4e:0b:90:71:13:82:a5:5e:f1:66:de:5c:1f:
4c:30:91:3a:ac:ec:09:9f:4a:1a:dd:32:ba:31:84:
cf:ad:e4:9b:10:10:ed:43:e5:0d:e2:b2:f5:4b:0d:
74:51:d6:89:7f:f3:19:26:2f:b9:ec:ac:f4:9e:78:
10:a4:3f:df:c0:83:97:e5:51:e4:27:3f:37:a9:e9:
7e:b6:cd:59:96:4b:a8:e6:5a:65:29:53:87:70:a3:
5f:5f:26:66:ab:c1:f4:36:94:42:b5:f2:2f:a7:80:
96:e8:94:fc:11:03:11:72:56:68:ec:d2:10:ce:23:
63:41:2b:04:94:08:26:1f:1c:2c:1c:a8:26:4c:05:
44:d2:08:82:94:dc:99:5b:fb:b1:11:28:f3:1d:33:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:91:4C:B6:B7:DA:89:09:DC:39:F6:23:03:83:E0:01:E4:50:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/044e3667-fd8e-3d7f-8f3a-d72631968b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:cb:4c:ba:56:1c:36:44:19:74:9c:47:3c:1f:72:3a:9e:16:
b7:a8:77:81:80:e4:25:2b:d8:10:b3:4c:82:28:8d:1d:b2:0b:
5a:7c:a8:6c:17:5b:22:12:19:55:94:28:8a:a5:a8:68:21:7d:
8f:a3:22:e7:09:3e:b3:2b:ba:ea:56:6f:af:98:4b:86:9c:a9:
27:c4:c5:02:53:1b:70:78:fd:94:f9:14:9a:c0:19:02:74:fa:
79:21:3e:36:7a:8a:15:d0:36:cf:3b:7b:f2:14:a9:10:3f:45:
2a:1a:10:a3:22:57:92:7f:d8:69:2b:63:4a:9e:b7:17:0e:33:
75:78:ad:e5:48:ef:dc:ea:74:be:f6:60:eb:0b:b2:31:40:ba:
eb:e2:26:e0:8b:74:59:46:d0:90:9a:6d:f3:7d:82:66:c9:d9:
7a:25:bd:7b:ad:00:e3:42:c7:e3:a9:d5:05:a1:23:0c:9f:7e:
b5:4f:ed:e9:e2:05:5b:fd:70:1c:8a:1d:ec:e4:33:6a:d5:93:
98:33:ae:54:2f:63:3d:76:bb:87:c7:21:d2:94:6b:dc:a5:f6:
4a:d9:c7:90:5b:20:28:03:3c:22:cc:cc:b6:b4:07:20:90:e8:
77:13:45:6c:c7:d4:03:05:a0:af:47:87:7d:ea:eb:b0:84:d2:
f5:93:7e:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9pRo4cv8749VtjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyNDE2MzkwNFoXDTI1MDUyNTE1MzkwNFowLzEtMCsGA1UEAxMk
ODRiYzlhN2ItNjgzNC00YTU5LTg0NTktYWU3NjgzYTMyNjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GghgQVtDd72a00OSXRELAnbOamJU8FZXdeB
wxSbZqiJwU7bQ6Jgf0xHkiXBcdx74RvRVlryJPFsioFrbwjJHgRgpIN13wSPTU9C
bEtiENdcPiUhkhtHn1FCHVjs5p0EsAne/BrxA/Lb104LkHETgqVe8WbeXB9MMJE6
rOwJn0oa3TK6MYTPreSbEBDtQ+UN4rL1Sw10UdaJf/MZJi+57Kz0nngQpD/fwIOX
5VHkJz83qel+ts1Zlkuo5lplKVOHcKNfXyZmq8H0NpRCtfIvp4CW6JT8EQMRclZo
7NIQziNjQSsElAgmHxwsHKgmTAVE0giClNyZW/uxESjzHTOYkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyGkUy2t9qJCdw59iMDg+AB5FAuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDQ0ZTM2NjctZmQ4ZS0z
ZDdmLThmM2EtZDcyNjMxOTY4YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/LTLpWHDZEGXScRzwfcjqeFreod4GA5CUr2BCzTIIojR2yC1p8qGwX
WyISGVWUKIqlqGghfY+jIucJPrMruupWb6+YS4acqSfExQJTG3B4/ZT5FJrAGQJ0
+nkhPjZ6ihXQNs87e/IUqRA/RSoaEKMiV5J/2GkrY0qetxcOM3V4reVI79zqdL72
YOsLsjFAuuviJuCLdFlG0JCabfN9gmbJ2XolvXutAONCx+Op1QWhIwyffrVP7eni
BVv9cByKHezkM2rVk5gzrlQvYz12u4fHIdKUa9yl9krZx5BbICgDPCLMzLa0ByCQ
6HcTRWzH1AMFoK9Hh33q67CE0vWTfi8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:00:23 2025 by rpki-client