Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d675eb2-cbe7-3ccc-aace-d79e5c9eb1dd.roa
File: 1d675eb2-cbe7-3ccc-aace-d79e5c9eb1dd.roa (raw, json)
Hash identifier: W9JFjvm8cOf63B32YemKs+n0eqgFwGsX8hADqaSigtE=
Subject key identifier: A9:87:83:7A:9D:A6:D9:AE:FF:3B:8A:69:2F:DE:76:33:64:33:30:0B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849516DD6BC86F5B85A63654380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d675eb2-cbe7-3ccc-aace-d79e5c9eb1dd.roa
Signing time: Wed 26 Mar 2025 16:55:37 +0000
ROA not before: Wed 26 Mar 2025 16:55:37 +0000
ROA not after: Tue 24 Jun 2025 16:55:37 +0000
asID: 401152
IP address blocks: 108.165.144.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 23:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:6d:d6:bc:86:f5:b8:5a:63:65:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 26 16:55:37 2025 GMT
Not After : Jun 24 16:55:37 2025 GMT
Subject: CN=769d7152-ce1b-4667-b583-e44f7fdfc2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:33:a5:2c:40:6a:21:64:c3:57:68:a6:b4:
16:ac:7d:29:f9:cf:db:cb:a0:cf:16:72:17:c2:3c:
f7:e5:ac:a4:2a:5b:a5:53:cf:66:bf:ca:93:d2:22:
d8:1f:b6:83:af:00:05:3f:ab:51:6d:03:48:7b:03:
b1:89:3e:dd:1e:03:dd:c8:03:ad:8f:49:5c:71:e3:
7a:45:04:e7:fe:e7:db:81:0c:be:0a:1c:92:a8:c8:
3e:39:e5:1f:0b:ec:13:70:25:84:e3:ba:46:a8:a2:
5d:10:9c:80:66:a3:26:de:e0:9a:d7:4c:63:bc:4e:
e2:4e:eb:c0:9d:ea:9b:ff:eb:d4:12:74:12:49:77:
58:e1:81:15:8a:f8:e4:2b:08:06:88:55:06:29:2d:
6b:d1:db:06:3a:5f:e2:d6:4d:74:76:cb:66:4f:dc:
ad:a7:f9:18:24:8d:d7:7d:c4:6a:75:18:d9:d5:ac:
71:b8:14:82:e0:33:da:e2:1d:e9:3d:54:0f:d3:5a:
40:73:e8:31:6a:44:ec:03:d2:01:e5:3f:db:ae:e4:
bd:bc:1a:03:c4:6a:d2:87:0f:87:f9:4e:6b:b7:cf:
d5:c8:ea:a9:e9:a2:e6:12:9e:b3:26:0b:b2:d9:a2:
87:82:df:d5:b4:b7:a5:b4:83:7c:4b:77:35:dc:c2:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:83:7A:9D:A6:D9:AE:FF:3B:8A:69:2F:DE:76:33:64:33:30:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d675eb2-cbe7-3ccc-aace-d79e5c9eb1dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:22:e8:e7:7b:6d:d2:0a:32:ad:1e:6d:98:f9:c3:b5:f4:30:
27:07:d4:b1:36:23:99:26:3c:0a:7f:e4:7b:52:f7:3c:7c:b2:
c6:48:ee:80:c4:31:ab:11:25:70:98:2f:5d:7b:64:23:9b:f0:
fc:6d:0c:9c:d3:9c:90:36:02:d5:a3:9f:07:82:ff:dd:50:2d:
cc:de:35:3e:ab:cf:3c:a5:1b:56:75:0e:d2:8a:b5:48:a3:c4:
5e:02:ae:be:67:da:26:bf:f2:ba:e6:79:29:61:72:a9:80:0d:
23:67:e8:3a:8a:06:98:42:f2:69:22:86:45:73:aa:da:03:56:
cc:a4:74:d6:c6:77:be:a9:e8:ab:a8:2d:99:bf:38:61:f8:c5:
a7:7f:55:dc:c3:1a:aa:6d:1d:71:1c:aa:05:ba:cf:80:8e:11:
7d:9b:38:62:d1:b0:31:93:0f:55:5f:22:c4:7b:19:d1:b7:52:
2f:fb:34:46:2e:5d:83:bc:9c:86:2d:3a:68:61:06:6b:32:d6:
6b:15:56:c1:2b:60:45:76:b8:f9:6b:e8:1d:7f:a6:30:4a:05:
b9:79:50:92:09:b9:a2:ce:a9:99:54:fe:7c:3b:9a:be:19:f5:
02:11:97:9a:ad:43:fa:2b:91:f5:19:ef:59:f3:6d:d2:1b:0f:
4c:42:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:09 2025 by rpki-client