Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/219582ee-1074-3442-904a-4a94be713eaf.roa
File: 219582ee-1074-3442-904a-4a94be713eaf.roa (raw, json)
Hash identifier: OeO5G1x8VxWQUpvzXE/W9Eu+oiXwEjoQQKFTFIWeDuQ=
Subject key identifier: 74:1B:0D:6D:D8:61:D8:CA:65:71:64:4A:1A:2D:A9:49:42:0B:9E:34
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858490A4D974CFBEBC3A040F02F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/219582ee-1074-3442-904a-4a94be713eaf.roa
Signing time: Sat 01 Mar 2025 05:28:15 +0000
ROA not before: Sat 01 Mar 2025 05:28:15 +0000
ROA not after: Fri 30 May 2025 04:28:15 +0000
asID: 834
IP address blocks: 166.0.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:4d:97:4c:fb:eb:c3:a0:40:f0:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 05:28:15 2025 GMT
Not After : May 30 04:28:15 2025 GMT
Subject: CN=9021be6d-72e9-42d5-8721-c645b846e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:23:43:27:e7:6e:28:f5:d0:93:77:f4:5e:
90:96:7c:0f:67:b8:c8:a3:d0:1e:c8:f9:93:41:25:
ac:32:e4:b7:8b:49:a6:57:52:ac:e9:10:64:1a:40:
b7:22:55:f1:69:5e:25:15:5c:8f:b4:41:5d:08:12:
dc:a6:28:68:ff:d2:c9:81:30:eb:d1:9a:8b:a2:a0:
ca:98:4e:bc:b5:b7:41:32:c9:04:a8:e6:a9:cc:b7:
68:0f:3f:e9:48:81:f5:c5:21:6f:5b:ec:4f:b1:0a:
6c:8c:76:b0:11:4a:81:e0:e9:0b:d8:9c:de:66:a1:
5e:70:50:c5:63:f6:e9:46:fe:06:dd:6d:76:89:1d:
c5:8d:29:fe:60:7d:05:38:8f:44:f7:d4:b7:22:cf:
0a:fd:bf:80:de:11:4a:0a:89:70:68:76:77:d0:70:
1f:92:22:18:b2:e8:27:2d:cb:91:c6:0e:dc:6a:99:
82:8b:0a:b8:f5:70:32:7a:c6:0e:b8:75:ba:65:52:
82:26:38:c8:63:c7:7d:03:8c:80:72:0c:87:28:6b:
cd:32:cb:17:6a:3a:bb:c4:72:52:01:82:90:18:32:
81:94:71:ac:64:96:fe:f4:24:a3:37:31:05:68:97:
54:86:f3:b8:9f:67:b0:fc:be:9d:3e:45:eb:70:0e:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:0D:6D:D8:61:D8:CA:65:71:64:4A:1A:2D:A9:49:42:0B:9E:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/219582ee-1074-3442-904a-4a94be713eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:85:82:66:5e:36:1c:d2:90:5c:65:7f:c6:22:e7:0e:53:a6:
95:42:ad:d3:91:d6:86:91:7c:11:7d:b8:14:4b:9b:a5:34:0f:
21:3a:7f:d7:f0:37:15:ab:27:b7:1c:ef:ee:87:e0:53:2f:d8:
a1:4d:1a:14:92:fb:d5:eb:66:ab:8d:d4:d2:c0:9f:3b:92:6b:
1d:c7:54:54:e9:c7:ca:1a:23:5e:93:22:29:5e:d2:5b:41:b4:
a2:39:c8:83:52:87:e4:c5:f8:b7:f6:e6:06:92:2c:24:1a:a7:
ce:0c:22:9b:8a:42:47:d5:60:44:6c:d4:22:b5:a9:97:21:58:
58:ae:c6:23:c6:e3:f2:73:4e:3c:6e:02:fb:38:dd:9f:c9:6f:
f7:ee:5c:73:1d:84:e9:a9:cc:03:78:c6:48:04:99:c4:06:ee:
81:6d:69:35:f9:ab:e2:94:09:e9:ad:87:3d:42:61:19:87:10:
c6:5e:42:2f:60:07:5a:81:71:41:9d:0f:a4:17:e8:25:4b:4c:
70:65:bf:16:ee:fa:5e:8f:91:a3:37:1d:8f:c6:d6:a1:32:50:
1f:13:b1:c8:56:4b:d3:78:46:d0:f8:ad:30:46:b1:30:4c:a9:
9b:bc:22:80:78:08:64:32:a6:bb:cf:04:ed:dd:31:68:4d:8b:
c6:c8:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:15 2025 by rpki-client