Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/175bb6a5-8552-3040-82c2-603afad3c2ef.roa
File: 175bb6a5-8552-3040-82c2-603afad3c2ef.roa (raw, json)
Hash identifier: sxhmX3Ac5uFWZkoWK7dPU+gj4m9Hsh8VfL4vWPWDwOU=
Subject key identifier: 14:CF:A4:1E:1E:CD:89:F1:5A:07:ED:EA:42:06:45:DE:34:50:3B:58
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584919ADE0B40F6EF6BF250D3F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/175bb6a5-8552-3040-82c2-603afad3c2ef.roa
Signing time: Thu 06 Mar 2025 17:39:23 +0000
ROA not before: Thu 06 Mar 2025 17:39:23 +0000
ROA not after: Wed 04 Jun 2025 16:39:23 +0000
asID: 834
IP address blocks: 166.0.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:ad:e0:b4:0f:6e:f6:bf:25:0d:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 6 17:39:23 2025 GMT
Not After : Jun 4 16:39:23 2025 GMT
Subject: CN=5cd4890a-df2d-4e1a-97a1-5fae7c7ccc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:8a:50:23:ce:73:d6:b8:70:04:a7:6a:82:
fd:f4:7a:e5:87:0f:a1:a5:25:88:e8:da:3c:5a:bd:
be:b0:84:b9:29:84:62:33:e0:ec:ae:db:59:5b:79:
d7:dd:c3:5c:94:8c:05:45:36:71:df:da:65:36:c8:
0f:4f:60:85:fc:1c:ac:e1:47:2a:43:c1:21:9f:8a:
e5:de:a2:96:1c:eb:4f:08:2e:5d:f8:a0:4e:c0:40:
52:cb:a5:94:4a:0e:eb:6e:2f:1a:13:a3:7e:72:49:
33:26:70:23:76:77:3f:03:4b:49:33:6b:53:ec:2a:
aa:39:f1:5f:6c:fe:2d:81:d7:0d:3e:1c:bd:1a:79:
70:64:01:af:f0:4d:d4:fa:40:ef:57:31:b0:35:65:
de:40:6d:b9:7e:ed:6a:06:7a:9d:b9:a0:36:85:f7:
ce:19:bb:53:14:4e:44:3e:df:92:6c:c1:b5:60:47:
c9:30:e4:fe:92:02:1e:78:b8:ed:dc:7b:4e:df:66:
03:53:63:e6:3c:f0:fb:4f:81:f4:69:c1:19:9f:2b:
be:52:c6:81:76:c9:ea:64:f2:df:f7:2e:94:b4:92:
33:8c:67:3a:fe:04:e5:57:fd:53:58:f6:30:8f:90:
33:90:ac:2d:48:b3:78:c2:6b:b4:03:bd:a8:3c:dd:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:A4:1E:1E:CD:89:F1:5A:07:ED:EA:42:06:45:DE:34:50:3B:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/175bb6a5-8552-3040-82c2-603afad3c2ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d3:a1:29:6b:26:35:5c:fe:37:e4:fd:74:ac:e2:1e:84:61:
65:84:2d:27:fa:93:69:3b:dc:fa:83:57:58:10:f9:3e:c0:a4:
84:43:5e:bb:1a:5a:a4:83:93:c4:d6:47:31:17:f0:5f:0b:24:
df:be:58:42:9e:ef:e9:26:bd:54:69:a9:97:12:38:01:98:b1:
25:80:33:05:a6:b1:95:03:b6:b6:49:38:6a:5f:26:4a:cb:a7:
c8:59:43:e0:25:75:86:bc:32:4f:5b:fd:8c:0c:9d:d0:dd:bd:
c8:a2:ac:ff:1a:89:d5:94:3a:1b:5b:98:d4:4c:e8:b1:5e:38:
84:43:f3:06:5f:c0:c1:9f:80:51:51:b3:35:fe:8e:12:fc:7a:
49:8b:ad:99:c2:c3:db:51:d8:51:3b:a8:02:6b:4c:4a:23:bd:
53:f5:14:ad:15:cd:c7:e7:72:ee:47:8f:3a:1e:9f:a5:4e:3d:
26:b7:0b:05:28:d3:db:55:5b:dc:28:88:a7:3c:45:f2:b4:d6:
3c:77:0b:c3:15:ea:27:8c:ab:a6:aa:d5:1b:f2:35:b5:67:25:
cb:5d:09:33:5e:d0:9a:76:70:a6:91:fd:99:a4:3e:c9:27:b2:
2b:67:86:ed:a0:61:64:37:1a:e9:60:6c:c4:e1:1d:32:be:9a:
3f:47:d0:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZreC0D272vyUNP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwNjE3MzkyM1oXDTI1MDYwNDE2MzkyM1owLzEtMCsGA1UEAxMk
NWNkNDg5MGEtZGYyZC00ZTFhLTk3YTEtNWZhZTdjN2NjYzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6yKUCPOc9a4cASnaoL99Hrlhw+hpSWI6No8
Wr2+sIS5KYRiM+DsrttZW3nX3cNclIwFRTZx39plNsgPT2CF/Bys4UcqQ8Ehn4rl
3qKWHOtPCC5d+KBOwEBSy6WUSg7rbi8aE6N+ckkzJnAjdnc/A0tJM2tT7CqqOfFf
bP4tgdcNPhy9GnlwZAGv8E3U+kDvVzGwNWXeQG25fu1qBnqduaA2hffOGbtTFE5E
Pt+SbMG1YEfJMOT+kgIeeLjt3HtO32YDU2PmPPD7T4H0acEZnyu+UsaBdsnqZPLf
9y6UtJIzjGc6/gTlV/1TWPYwj5AzkKwtSLN4wmu0A72oPN1BTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTPpB4ezYnxWgft6kIGRd40UDtYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTc1YmI2YTUtODU1Mi0z
MDQwLTgyYzItNjAzYWZhZDNjMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLToSlrJjVc/jfk/XSs4h6EYWWELSf6k2k73PqDV1gQ+T7ApIRDXrsa
WqSDk8TWRzEX8F8LJN++WEKe7+kmvVRpqZcSOAGYsSWAMwWmsZUDtrZJOGpfJkrL
p8hZQ+AldYa8Mk9b/YwMndDdvciirP8aidWUOhtbmNRM6LFeOIRD8wZfwMGfgFFR
szX+jhL8ekmLrZnCw9tR2FE7qAJrTEojvVP1FK0Vzcfncu5Hjzoen6VOPSa3CwUo
09tVW9woiKc8RfK01jx3C8MV6ieMq6aq1RvyNbVnJctdCTNe0Jp2cKaR/ZmkPskn
sitnhu2gYWQ3GulgbMThHTK+mj9H0DI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:36 2025 by rpki-client