Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa
File: 0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa (raw, json)
Hash identifier: QYRrE+PF7n1Qvkz9T+CY49l5B6iXx1TU0UPxpuymov8=
Subject key identifier: 57:89:0E:28:A2:F8:BE:EF:6E:4F:26:60:98:63:BE:58:11:7C:85:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858490881761226E2D53F6DACE520
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 400731
IP address blocks: 199.115.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 19:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:76:12:26:e2:d5:3f:6d:ac:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=4ab80c26-1ac9-4ec0-b714-f782d5f291cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:71:d3:31:e6:ff:b2:79:38:a3:35:c6:c8:
27:26:56:c4:85:fa:9f:48:22:97:75:0b:fb:e4:98:
fb:aa:49:46:71:05:56:fa:19:7a:fd:6a:a5:cf:b6:
4d:1f:bb:ee:1f:99:df:40:e7:4d:3e:a4:d0:18:9d:
12:2d:00:36:43:9c:38:d5:09:4c:89:72:ab:73:4c:
a2:7e:00:0f:3e:61:8a:33:a4:d3:1e:fc:c0:bc:9d:
4e:e7:a4:17:f4:aa:1f:00:88:9a:94:a9:77:36:29:
00:c5:a9:08:ff:bc:e8:37:33:0d:b5:7b:c2:a1:c4:
5e:3e:37:50:3a:19:98:93:ef:d8:ec:23:48:17:2e:
7f:11:54:36:42:a5:34:3d:d5:70:8d:75:81:dd:24:
eb:00:16:a2:85:b4:d9:47:ef:bb:92:c1:38:76:6f:
f0:0f:47:e8:c5:b5:fe:d1:40:ae:7f:e6:6e:b2:7c:
bc:b2:4c:39:01:aa:7d:65:70:d0:61:3e:f0:14:f1:
7d:8c:67:1f:08:10:94:6e:33:6d:61:00:b0:e8:cd:
a3:4b:40:ec:85:ec:e4:d2:f4:54:bf:9b:79:67:47:
a6:d6:7c:0b:7a:3f:b4:c2:71:7f:90:39:56:10:c9:
37:60:19:18:5f:5f:0c:56:32:47:7b:2b:e1:02:5c:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:0E:28:A2:F8:BE:EF:6E:4F:26:60:98:63:BE:58:11:7C:85:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
199.115.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:77:91:3e:a0:05:46:8e:33:d3:f2:21:fa:ac:7c:fb:8d:ba:
70:c7:2e:2c:fe:3c:28:c9:5b:87:27:7b:e0:1d:f3:13:bc:f4:
53:f3:68:d9:6a:8b:52:5c:cd:bc:b3:dd:df:a1:43:73:98:98:
fc:ba:6e:2d:ca:86:b9:91:95:be:85:7e:d2:32:4f:cf:97:1c:
0f:a5:7f:01:b6:8d:5d:91:59:4b:fb:94:41:c4:28:42:0c:f6:
61:e7:be:e9:bf:b7:11:c9:7d:26:65:a5:de:0c:de:be:40:48:
ff:51:c2:ac:bf:ef:13:d7:04:af:1d:a4:e0:f8:46:cd:dc:3d:
21:79:b4:ff:f0:03:e0:81:0e:6e:c7:06:89:ee:02:f2:5e:3b:
50:ea:80:95:e6:da:db:bf:65:62:22:46:f7:ba:3d:92:26:0f:
3e:bc:28:2d:bb:89:7a:81:ea:11:63:2b:58:62:05:52:0b:bb:
86:de:92:64:81:08:79:d6:1d:ac:88:f2:22:e1:49:79:16:e5:
a2:50:1d:31:02:ef:7e:90:ac:07:0c:1b:49:02:1a:bc:f6:96:
37:d9:da:cd:69:eb:c5:58:33:24:bc:58:53:cc:19:fa:ce:ca:
a0:e4:dd:36:2c:b8:07:65:6f:6c:58:7f:9f:35:52:14:a3:85:
c5:0e:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:31 2025 by rpki-client