Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29f06a14-27cd-3b81-a4c6-94ad0eabb6b3.roa
File: 29f06a14-27cd-3b81-a4c6-94ad0eabb6b3.roa (raw, json)
Hash identifier: BREJ2hNR0wNkWGCyReD426Extl7+ADZfHzzvMlE2aKw=
Subject key identifier: F1:F1:B0:A6:3D:4D:0E:03:37:A2:07:0F:06:00:02:95:13:C9:56:61
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584851A57EA0B5525F11EAEAB680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29f06a14-27cd-3b81-a4c6-94ad0eabb6b3.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 166.0.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 17:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7e:a0:b5:52:5f:11:ea:ea:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=b2a2f110-50ac-4a73-886e-b6610256afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c6:f8:d3:f4:5d:2f:b6:86:b7:5d:8e:c9:7e:
5b:4b:7f:20:c8:d6:c2:88:1c:3c:2a:9a:d0:7e:8e:
30:c2:af:7c:0f:85:47:1f:38:9c:25:7c:ed:f9:88:
b6:1b:63:cc:41:5d:3e:72:67:4f:07:59:e0:3e:17:
ae:65:01:96:5c:d4:9a:ff:3d:42:20:f0:88:d2:8a:
38:70:b9:1b:38:85:9b:4a:6b:44:7b:92:fe:a8:b3:
55:9f:89:3e:95:a7:4d:2c:e7:24:43:42:a1:bf:d4:
54:3e:bc:bc:22:ce:40:c3:d1:d3:de:fc:95:4c:4c:
e2:bf:2f:26:cf:7d:ac:8d:4b:81:ae:60:f8:f1:66:
c6:ec:5f:fd:61:6d:80:88:c8:30:68:fd:61:46:a9:
50:94:ab:3f:c3:33:aa:56:be:37:84:47:11:50:9a:
fd:4b:cd:5d:76:e2:e5:10:75:dc:f2:3e:cf:1d:88:
54:bd:47:89:1a:77:4a:fe:20:31:c4:c8:93:51:64:
d0:30:c9:00:ee:98:c0:73:fe:d9:ff:93:9b:5a:b1:
e8:8e:8a:8a:25:e3:fb:37:cd:dc:15:d4:1c:f5:87:
a8:db:c7:fc:83:bf:49:f9:30:b2:02:de:f6:7f:90:
cb:ec:b1:f5:c8:0a:30:40:b5:cb:c3:b9:cb:c0:cf:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:B0:A6:3D:4D:0E:03:37:A2:07:0F:06:00:02:95:13:C9:56:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29f06a14-27cd-3b81-a4c6-94ad0eabb6b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:38:41:2f:e1:fb:67:3e:4c:fc:7e:ad:70:f2:6b:4a:53:98:
65:c1:3a:f2:15:fb:37:cc:31:ad:d7:a8:55:af:e8:cd:4c:09:
ab:46:4a:43:9c:63:4f:64:39:c0:21:1d:27:ce:0b:30:4c:ce:
12:d8:9f:4b:e5:bd:2a:38:70:85:f6:14:5f:da:e6:08:ef:70:
1d:4c:56:f4:4d:f6:ea:b2:69:6e:1d:0d:cb:2c:dc:16:d2:4a:
31:d3:41:83:b6:d9:e5:ea:e8:1d:ee:e9:af:14:42:70:0c:f7:
7c:d2:9d:23:33:84:77:40:52:fa:64:89:f1:5c:91:2b:cf:72:
aa:0c:c5:14:5e:9e:66:07:97:cc:05:be:3c:a8:10:a1:8e:b8:
98:16:23:6b:01:64:9a:8a:fb:31:04:db:36:3a:ad:f9:b5:78:
f4:15:d3:a3:22:fb:e3:34:07:8b:28:96:c7:e2:d8:29:af:dc:
92:75:11:4e:b0:2a:eb:04:6d:82:8b:a6:29:1e:a4:f4:64:70:
c3:1b:08:73:32:20:e0:1d:f4:4f:2d:0a:95:01:53:6d:7d:64:
02:cb:4a:e4:f7:c9:7d:c1:ba:a6:02:2e:73:20:97:db:05:5f:
ca:21:6a:e3:1f:3c:a7:20:c5:da:3d:9d:3d:2d:96:76:53:6d:
47:34:6d:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpX6gtVJfEerqtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
YjJhMmYxMTAtNTBhYy00YTczLTg4NmUtYjY2MTAyNTZhZmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcb40/RdL7aGt12OyX5bS38gyNbCiBw8KprQ
fo4wwq98D4VHHzicJXzt+Yi2G2PMQV0+cmdPB1ngPheuZQGWXNSa/z1CIPCI0oo4
cLkbOIWbSmtEe5L+qLNVn4k+ladNLOckQ0Khv9RUPry8Is5Aw9HT3vyVTEzivy8m
z32sjUuBrmD48WbG7F/9YW2AiMgwaP1hRqlQlKs/wzOqVr43hEcRUJr9S81dduLl
EHXc8j7PHYhUvUeJGndK/iAxxMiTUWTQMMkA7pjAc/7Z/5ObWrHojoqKJeP7N83c
FdQc9Yeo28f8g79J+TCyAt72f5DL7LH1yAowQLXLw7nLwM+LpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHxsKY9TQ4DN6IHDwYAApUTyVZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjlmMDZhMTQtMjdjZC0z
YjgxLWE0YzYtOTRhZDBlYWJiNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKU4QS/h+2c+TPx+rXDya0pTmGXBOvIV+zfMMa3XqFWv6M1MCatGSkOc
Y09kOcAhHSfOCzBMzhLYn0vlvSo4cIX2FF/a5gjvcB1MVvRN9uqyaW4dDcss3BbS
SjHTQYO22eXq6B3u6a8UQnAM93zSnSMzhHdAUvpkifFckSvPcqoMxRRenmYHl8wF
vjyoEKGOuJgWI2sBZJqK+zEE2zY6rfm1ePQV06Mi++M0B4solsfi2Cmv3JJ1EU6w
KusEbYKLpikepPRkcMMbCHMyIOAd9E8tCpUBU219ZALLSuT3yX3BuqYCLnMgl9sF
X8ohauMfPKcgxdo9nT0tlnZTbUc0bQA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:03 2025 by rpki-client