Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e48cde5-133e-32f8-8d22-4727676f6436.roa
File: 2e48cde5-133e-32f8-8d22-4727676f6436.roa (raw, json)
Hash identifier: 78DaatZiPjNwqZLvZzociTN+b+YXHKVVKgJkUf1xgUg=
Subject key identifier: C0:94:A1:EF:F8:4F:9F:A4:D8:1E:29:82:4D:E1:3C:07:6F:AE:0D:FC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F80386D9DAED4DCF08D0B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e48cde5-133e-32f8-8d22-4727676f6436.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:38:6d:9d:ae:d4:dc:f0:8d:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=5a9a2abc-5aad-4745-9a1a-0694b0be1779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:25:e0:08:e6:47:df:ff:72:d4:7e:50:27:
ed:48:ee:9a:7d:ce:ac:16:e5:57:79:e6:0a:20:fb:
a7:ec:9c:50:b4:cf:f3:b4:1c:bf:53:cb:29:1f:6f:
a2:8a:36:10:a4:5e:6c:12:d2:69:07:06:94:38:02:
9f:32:29:82:4b:9d:c7:01:e2:de:ae:8c:ee:15:a3:
9d:6c:59:b7:76:ae:18:cc:42:92:e8:23:64:ef:6c:
5d:91:b8:9b:48:95:5c:62:df:8c:6c:f3:c9:d4:c3:
c9:99:c1:c3:98:dd:43:35:b8:08:19:86:9c:10:96:
6b:79:f8:8d:6d:fb:d6:d2:ba:d5:84:ee:4e:14:ec:
89:1d:ff:72:45:a0:29:00:33:c7:68:e7:65:a2:3a:
02:05:fa:18:90:1a:db:96:7e:c4:5b:cc:b6:ab:42:
02:35:3f:68:8e:17:24:08:70:b8:20:af:18:7c:3c:
e4:94:62:65:ed:8e:92:21:44:f3:44:1d:71:4e:af:
10:49:8c:13:af:cc:b8:bc:1f:74:0a:ba:82:3f:6c:
d1:45:11:6d:cb:81:b1:59:81:7f:7e:cd:76:0a:3b:
1f:77:6b:e4:62:3b:9a:e8:84:52:36:bb:ad:2b:a5:
71:6d:02:5c:37:f4:3e:93:50:f2:27:41:84:08:0a:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:A1:EF:F8:4F:9F:A4:D8:1E:29:82:4D:E1:3C:07:6F:AE:0D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e48cde5-133e-32f8-8d22-4727676f6436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ce:7b:a6:74:cd:c6:f9:4e:fc:bb:0f:1b:2f:96:a0:80:73:
a4:a4:e3:d1:73:80:e3:19:e0:cc:97:ca:f8:6f:22:41:b7:7a:
de:f4:69:37:fb:46:5a:e4:73:b0:60:d6:c0:2b:fb:72:bc:4a:
50:86:c0:59:bd:f0:e1:46:b0:05:84:ed:0c:de:a0:ed:0b:24:
27:fb:82:86:a8:b0:39:02:67:bd:40:8f:08:75:5b:22:48:62:
e0:8d:1b:1b:94:90:02:e9:64:84:cc:83:12:a4:1d:d3:4e:5e:
b3:8d:2d:8d:3f:1b:f2:2f:c4:8c:e3:71:29:04:c6:f8:ac:87:
04:a7:c9:67:52:6b:f2:0c:11:eb:da:be:3a:69:91:91:52:31:
15:82:63:1e:2a:a9:e7:80:bd:bd:9d:80:90:47:ab:ba:64:60:
62:01:9c:55:a7:71:25:fa:e6:6b:81:6e:51:70:cb:47:86:01:
a8:ac:b6:d9:b2:95:f0:ea:cd:b1:2a:8e:42:b1:ba:6b:52:ea:
12:73:db:8f:7f:9e:2b:98:f9:f0:9b:da:42:26:1b:f2:92:7c:
87:fe:27:02:76:13:db:0d:fe:cb:96:3a:8a:1c:25:66:3b:d5:
96:98:c9:3a:84:e0:ed:26:ec:b3:72:25:19:e1:37:c1:2a:26:
dd:72:7a:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDhtna7U3PCNC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
NWE5YTJhYmMtNWFhZC00NzQ1LTlhMWEtMDY5NGIwYmUxNzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDkl4AjmR9//ctR+UCftSO6afc6sFuVXeeYK
IPun7JxQtM/ztBy/U8spH2+iijYQpF5sEtJpBwaUOAKfMimCS53HAeLerozuFaOd
bFm3dq4YzEKS6CNk72xdkbibSJVcYt+MbPPJ1MPJmcHDmN1DNbgIGYacEJZrefiN
bfvW0rrVhO5OFOyJHf9yRaApADPHaOdlojoCBfoYkBrbln7EW8y2q0ICNT9ojhck
CHC4IK8YfDzklGJl7Y6SIUTzRB1xTq8QSYwTr8y4vB90CrqCP2zRRRFty4GxWYF/
fs12Cjsfd2vkYjua6IRSNrutK6VxbQJcN/Q+k1DyJ0GECAoJ1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCUoe/4T5+k2B4pgk3hPAdvrg38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmU0OGNkZTUtMTMzZS0z
MmY4LThkMjItNDcyNzY3NmY2NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrOe6Z0zcb5Tvy7DxsvlqCAc6Sk49FzgOMZ4MyXyvhvIkG3et70aTf7
Rlrkc7Bg1sAr+3K8SlCGwFm98OFGsAWE7QzeoO0LJCf7goaosDkCZ71Ajwh1WyJI
YuCNGxuUkALpZITMgxKkHdNOXrONLY0/G/IvxIzjcSkExvishwSnyWdSa/IMEeva
vjppkZFSMRWCYx4qqeeAvb2dgJBHq7pkYGIBnFWncSX65muBblFwy0eGAaisttmy
lfDqzbEqjkKxumtS6hJz249/niuY+fCb2kImG/KSfIf+JwJ2E9sN/suWOoocJWY7
1ZaYyTqE4O0m7LNyJRnhN8EqJt1yelA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:39:23 2025 by rpki-client