Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42d30fb3-5806-31ce-b8d2-c41cc88e5ef0.roa
File: 42d30fb3-5806-31ce-b8d2-c41cc88e5ef0.roa (raw, json)
Hash identifier: GWVZQUCId4efmZgmiMNwx+3oNikyXQA4AAYDOp99XLE=
Subject key identifier: 50:D2:C1:7C:CE:F1:07:6D:C1:53:56:AA:E7:FA:F1:87:5D:7F:6C:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584188D7D7131183AA0785A392C8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42d30fb3-5806-31ce-b8d2-c41cc88e5ef0.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 15 Jul 2025 04:00:00 +0000
asID: 834
IP address blocks: 108.165.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 14:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:88:d7:d7:13:11:83:aa:07:85:a3:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 15 04:00:00 2025 GMT
Subject: CN=72cd94d0-498b-4d3b-b7cf-ebf6af389ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:d4:5e:98:82:78:9d:28:45:c3:52:e0:a3:
5d:da:6b:a5:9a:41:62:82:9f:7a:5c:d9:b0:f0:d4:
fd:1d:a3:9d:b8:39:7e:99:fe:59:1b:da:b6:9f:7c:
be:53:41:91:6a:12:79:01:0b:26:65:f5:6b:01:73:
ad:e7:e1:81:f6:47:c4:ae:a6:b5:88:f1:fa:90:b0:
69:6b:6d:60:f7:0a:fa:42:9d:86:e8:ae:d2:9e:6d:
ae:47:3b:01:e8:30:89:59:ce:43:d3:bd:17:1e:35:
41:2d:2a:93:4b:0d:a7:de:d6:3d:b9:e3:65:c7:bf:
a1:c4:cc:be:76:22:73:b4:6c:09:1f:1f:2c:44:16:
75:6c:a6:c5:db:83:ca:1c:1a:f9:d0:a3:7f:3c:b9:
b8:d7:01:f9:e1:45:50:6c:bc:13:b4:b2:79:52:5a:
c6:a2:80:69:7b:9a:e1:4f:77:d6:62:ce:a7:1f:be:
bc:0c:d9:65:46:27:93:71:95:b5:a6:8a:a9:67:c7:
7f:c6:b4:6d:25:bf:1c:63:2f:ce:2f:45:43:15:4e:
1e:d2:1e:69:5b:3a:c3:f1:08:e1:a5:07:4b:e0:47:
d9:fb:d6:9e:38:36:f2:24:11:4c:37:1d:47:1e:89:
55:2e:e7:1e:06:cc:f5:79:a7:0d:f4:89:84:70:2b:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:C1:7C:CE:F1:07:6D:C1:53:56:AA:E7:FA:F1:87:5D:7F:6C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42d30fb3-5806-31ce-b8d2-c41cc88e5ef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:11:a8:2b:21:d8:a5:24:34:c5:f4:c3:da:2b:f6:fa:54:34:
06:33:85:cd:ca:ed:0e:6a:de:37:fd:15:4b:fd:c1:91:f4:42:
df:56:fb:8e:4e:c9:d6:25:cf:c9:a8:1b:d1:14:2c:25:a6:ae:
6a:ae:66:93:38:e8:8e:41:15:59:be:20:3f:83:89:a2:5e:aa:
c4:bf:54:1e:9d:cf:d2:ad:7a:12:83:ed:78:ef:a5:54:fc:d0:
ab:80:55:88:73:6a:e3:bc:03:5c:ce:1e:15:13:93:3f:5e:33:
77:f6:fe:41:f0:32:d7:1c:36:d1:b2:db:6c:a1:18:12:6e:b6:
ff:eb:49:58:b5:69:b6:4a:ea:1b:ca:16:8c:ec:62:dc:95:df:
f7:58:52:b8:30:c2:97:50:41:2e:74:5b:af:c8:69:06:2a:72:
83:95:0d:e6:be:70:ae:10:39:49:c4:60:de:c0:45:81:70:3a:
e6:16:c7:bf:b9:82:88:0f:94:25:79:93:ef:84:02:93:12:7a:
4f:a0:99:a0:b6:cd:76:10:7d:29:53:06:15:d6:86:d1:64:d2:
f7:8b:8c:52:88:47:2e:04:9b:9c:3f:3e:6d:18:12:78:f4:eb:
fc:a0:0c:95:91:e3:7d:ff:0b:f1:02:49:40:6f:e5:7c:69:d6:
89:36:dc:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGI19cTEYOqB4WjksgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDcxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NzJjZDk0ZDAtNDk4Yi00ZDNiLWI3Y2YtZWJmNmFmMzg5ZmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkDUXpiCeJ0oRcNS4KNd2mulmkFigp96XNmw
8NT9HaOduDl+mf5ZG9q2n3y+U0GRahJ5AQsmZfVrAXOt5+GB9kfErqa1iPH6kLBp
a21g9wr6Qp2G6K7Snm2uRzsB6DCJWc5D070XHjVBLSqTSw2n3tY9ueNlx7+hxMy+
diJztGwJHx8sRBZ1bKbF24PKHBr50KN/PLm41wH54UVQbLwTtLJ5UlrGooBpe5rh
T3fWYs6nH768DNllRieTcZW1poqpZ8d/xrRtJb8cYy/OL0VDFU4e0h5pWzrD8Qjh
pQdL4EfZ+9aeODbyJBFMNx1HHolVLuceBsz1eacN9ImEcCtSBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDSwXzO8QdtwVNWquf68Yddf2xoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDJkMzBmYjMtNTgwNi0z
MWNlLWI4ZDItYzQxY2M4OGU1ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIURqCsh2KUkNMX0w9or9vpUNAYzhc3K7Q5q3jf9FUv9wZH0Qt9W+45O
ydYlz8moG9EULCWmrmquZpM46I5BFVm+ID+DiaJeqsS/VB6dz9KtehKD7XjvpVT8
0KuAVYhzauO8A1zOHhUTkz9eM3f2/kHwMtccNtGy22yhGBJutv/rSVi1abZK6hvK
FozsYtyV3/dYUrgwwpdQQS50W6/IaQYqcoOVDea+cK4QOUnEYN7ARYFwOuYWx7+5
gogPlCV5k++EApMSek+gmaC2zXYQfSlTBhXWhtFk0veLjFKIRy4Em5w/Pm0YEnj0
6/ygDJWR433/C/ECSUBv5Xxp1ok23PE=
-----END CERTIFICATE-----
Generated at Fri Mar 28 13:24:34 2025 by rpki-client