Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/15fa397f-c0f0-340e-b587-0e64490a53c2.roa
File: 15fa397f-c0f0-340e-b587-0e64490a53c2.roa (raw, json)
Hash identifier: MUAtbogFUV2KlmWybRJnwCf9F9GA0RB8vJ5eA7O7P1Y=
Subject key identifier: F0:CE:E3:A4:CA:2D:49:E5:F6:49:AC:15:68:16:EB:56:15:D2:61:25
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584909E696D273A9AF9E511D6C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/15fa397f-c0f0-340e-b587-0e64490a53c2.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 202656
IP address blocks: 166.0.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:96:d2:73:a9:af:9e:51:1d:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=f6bc7fa6-13f2-4c66-8430-104a26525804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:3b:a3:0e:fe:1f:0d:5b:70:f2:55:25:7e:
f3:52:98:52:0c:ba:32:03:a2:6a:ff:1b:b7:60:0c:
3f:a8:21:83:36:11:7c:16:cb:51:b8:f5:ef:8d:cf:
30:40:5a:f4:a6:58:c4:34:3b:14:d3:0a:82:f6:a3:
cc:bd:fc:61:19:64:86:53:50:92:e5:00:c2:2e:f2:
29:c6:6e:0f:11:62:5b:cc:9a:47:4d:65:5a:28:7d:
ff:61:c2:ae:57:3b:60:72:97:0d:b1:30:54:e5:91:
73:02:f4:11:c2:59:36:aa:8a:e4:a0:59:92:1c:bb:
cb:1c:8f:8a:0a:15:3d:56:6c:a5:fc:06:85:71:40:
03:f4:4f:35:ae:f6:48:bc:ba:db:88:bc:b1:2c:0c:
eb:bc:c4:8f:d7:2e:5c:ca:77:14:ff:46:2c:04:a2:
c5:dd:61:74:ec:74:d3:45:42:4f:d6:fc:03:ff:23:
73:3e:06:09:d8:7e:34:a0:11:9d:6f:88:02:01:64:
78:ec:d1:59:51:01:c3:21:f8:61:d7:7d:59:a2:ce:
d3:2a:13:95:fd:0c:d0:56:08:3c:32:b1:4b:54:3a:
fd:91:36:75:10:97:f2:ab:7c:58:b8:43:98:23:95:
4b:9d:86:bf:e4:58:dc:eb:51:61:0f:33:d4:63:eb:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CE:E3:A4:CA:2D:49:E5:F6:49:AC:15:68:16:EB:56:15:D2:61:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/15fa397f-c0f0-340e-b587-0e64490a53c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:52:46:f4:40:a3:a9:d9:b3:73:5c:c9:5f:5e:41:f7:30:23:
82:73:a9:87:b9:8c:a6:bd:60:58:d5:a6:4b:a3:9c:3d:c5:93:
3f:05:df:fe:8c:86:cc:07:3b:75:63:3f:3d:aa:f4:e5:c0:f4:
50:2f:57:fe:f3:0d:29:6a:a3:04:8d:64:de:37:9d:e6:39:dc:
27:5e:eb:fe:00:6e:a7:37:06:d9:22:d9:aa:ba:37:6f:ab:5b:
4d:81:6b:91:63:ee:88:2f:5f:61:3f:63:e7:91:2d:c4:68:cb:
88:54:4a:62:26:c7:55:93:c2:3a:ff:e6:ca:66:7b:b0:0e:64:
c5:a6:66:49:a1:76:21:fc:bf:35:d8:8a:d4:aa:23:03:b1:3f:
b5:1b:96:6b:cd:f2:12:54:17:1d:a0:9c:87:82:e0:6f:5a:13:
f0:db:0f:1c:d5:84:f2:58:b1:72:c6:d9:02:81:be:3c:ca:1f:
29:f3:d5:8b:3f:d8:04:82:42:08:16:e0:1c:18:ee:a6:a6:e2:
44:c6:0a:27:ef:17:2f:24:71:26:0f:24:08:5b:fd:f3:60:55:
f1:68:43:fd:27:94:58:a4:79:09:a8:7e:5f:23:b0:7d:64:dd:
09:01:9f:14:aa:2f:a1:c5:b2:fa:2c:a2:59:6d:11:59:16:2f:
7b:2c:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:27 2025 by rpki-client