Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a779f17-83ec-3372-a62b-4152d5153e2e.roa
File: 0a779f17-83ec-3372-a62b-4152d5153e2e.roa (raw, json)
Hash identifier: WXzCpukBBpHc9Vqc6UT/fPIC4qURnV4XgoKbdyMtRmA=
Subject key identifier: 80:57:88:7E:6B:20:B2:39:57:F8:4C:08:97:49:35:72:D9:88:F0:76
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858496598323D385A830249666380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a779f17-83ec-3372-a62b-4152d5153e2e.roa
Signing time: Wed 02 Apr 2025 22:17:07 +0000
ROA not before: Wed 02 Apr 2025 22:17:07 +0000
ROA not after: Tue 01 Jul 2025 22:17:07 +0000
asID: 401152
IP address blocks: 108.165.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 20:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:98:32:3d:38:5a:83:02:49:66:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 2 22:17:07 2025 GMT
Not After : Jul 1 22:17:07 2025 GMT
Subject: CN=bb7047b5-91c9-48a2-8c6c-53e7358ce9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:86:a8:ce:2f:95:45:a5:4b:d7:45:72:36:
b9:39:2d:54:ee:32:4e:54:bc:9f:63:77:82:13:82:
c9:a1:60:56:0f:0f:b9:06:98:84:8d:23:32:28:f2:
a4:8b:07:a4:cf:81:5b:96:2e:93:60:36:18:fb:b0:
4d:d8:dc:22:c1:33:78:3f:aa:bb:2c:9a:7a:b0:e9:
78:80:73:06:3b:69:13:14:17:11:22:83:a6:81:8c:
e2:5e:6e:26:9d:73:9a:d3:ad:03:ca:af:46:5b:87:
d6:77:49:6c:fc:a7:da:0e:32:0d:ed:56:6c:2e:0e:
0f:f1:88:86:1b:1d:34:89:23:6d:0f:5e:da:e0:88:
76:d4:f4:fe:1c:35:4f:84:99:6a:66:a9:ad:67:3c:
97:b7:8a:e2:ec:9a:7f:34:41:62:b1:77:15:36:37:
91:68:30:cc:b6:2a:16:30:82:01:98:cf:86:31:24:
19:c1:2b:4c:b1:e6:1f:a5:df:f3:54:2e:33:3d:9b:
88:1d:45:79:3a:9a:6c:61:98:db:16:cf:98:3b:bb:
5d:7d:d6:ba:e9:47:6a:de:fb:e3:73:af:62:31:a2:
7e:54:4d:b1:2e:c2:f3:3b:28:b6:08:2d:99:b6:00:
57:57:f9:b9:c5:c2:33:23:29:49:56:13:3b:0d:08:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:57:88:7E:6B:20:B2:39:57:F8:4C:08:97:49:35:72:D9:88:F0:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a779f17-83ec-3372-a62b-4152d5153e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d3:86:92:a7:e2:c6:3d:a7:71:13:7e:80:2d:8c:e3:80:92:
78:90:7a:24:7d:9e:8e:43:c7:00:af:24:92:53:aa:75:36:a6:
e2:84:63:da:96:ed:23:ad:50:45:da:58:fc:34:e8:38:88:4f:
39:c3:56:f7:d7:a5:c4:47:7b:51:fa:c2:66:b6:d3:0a:a1:ef:
4d:f2:d9:ed:2d:c2:97:88:5d:8a:8f:73:1c:1c:d8:cd:bb:a0:
a2:f2:cb:f1:2a:c6:ed:22:04:c4:77:89:72:7d:b4:b4:da:f2:
48:9b:17:3d:71:db:e2:49:25:cb:2e:d1:a5:f5:42:40:f3:04:
3f:04:ac:da:9a:31:69:21:16:96:11:a5:53:24:cb:30:24:e6:
be:77:d0:cb:75:dc:ad:d0:90:4e:c6:7e:2b:91:2d:bb:f8:e6:
24:83:b6:50:ce:b5:1c:77:62:78:8e:fa:5b:ef:72:57:1b:e1:
98:f9:df:c9:56:60:a4:90:8e:f3:eb:0c:0e:38:46:90:2c:bb:
75:40:c6:f0:01:1a:8a:cf:d1:f4:1a:31:56:f8:09:8d:09:5f:
f9:b9:d4:99:eb:3f:67:e6:38:e2:97:6c:41:cb:0d:18:c2:bc:
c5:39:da:1d:67:9a:c4:ac:cb:73:7e:28:0f:1a:c4:30:2a:d4:
5a:4e:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:23 2025 by rpki-client