Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ea775e2-afc6-32da-a858-03ca92d859e7.roa
File: 4ea775e2-afc6-32da-a858-03ca92d859e7.roa (raw, json)
Hash identifier: amv7v3kVgXLjK/nezjAkCCif9mE+yPJRhTS4elmZ6h4=
Subject key identifier: 3C:24:80:9A:AB:2A:36:3F:30:51:52:21:AF:CC:BD:BB:17:FA:AC:9B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D98565FD5D4AD92B9BD15E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ea775e2-afc6-32da-a858-03ca92d859e7.roa
Signing time: Tue 11 Feb 2025 18:06:05 +0000
ROA not before: Tue 11 Feb 2025 18:06:05 +0000
ROA not after: Mon 12 May 2025 17:06:05 +0000
asID: 834
IP address blocks: 166.0.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 20:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:85:65:fd:5d:4a:d9:2b:9b:d1:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 11 18:06:05 2025 GMT
Not After : May 12 17:06:05 2025 GMT
Subject: CN=6d05e6d4-bfa7-43a6-9285-ca973b220e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:32:8d:f3:60:5c:f1:1a:3a:37:f6:1b:2b:
d9:25:65:61:2c:11:b4:f5:1c:f7:32:20:77:55:2a:
15:e2:93:4a:1d:9c:56:72:30:98:38:e7:c2:4b:4d:
6f:73:21:9c:86:90:a1:2b:1b:b2:d1:4b:5c:db:75:
9f:8f:2a:fa:8c:1a:d2:9f:ed:30:fe:81:68:af:4c:
a6:0a:d6:d6:8b:03:b2:b7:e9:5b:7e:4e:82:b1:68:
fb:2f:40:6a:b4:4c:4d:2e:89:85:94:e5:04:19:a4:
09:d3:03:fe:f3:03:0e:68:70:24:82:31:9e:db:3e:
47:06:f5:7f:b1:c0:6a:bc:72:c4:4b:5f:15:fd:d9:
56:9f:48:95:a1:ea:ee:d2:f8:c7:c7:e5:4a:58:99:
20:03:e7:28:cf:44:96:c8:04:4e:fe:21:da:e4:66:
76:a7:43:85:44:31:f2:d9:30:4f:86:61:c1:d0:b3:
da:43:13:93:62:14:16:f1:b9:5c:3b:31:71:4a:50:
b5:a2:73:55:a2:08:44:cc:95:19:a9:19:c7:27:f7:
7e:0c:32:d2:e8:25:b5:ed:20:00:b7:3a:01:e4:fd:
70:b3:c0:81:0d:0f:b2:e5:26:a2:09:9b:27:19:94:
7c:43:36:ec:d0:76:ec:5b:9b:af:c9:39:20:1e:e3:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:80:9A:AB:2A:36:3F:30:51:52:21:AF:CC:BD:BB:17:FA:AC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ea775e2-afc6-32da-a858-03ca92d859e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:46:8c:60:b7:13:3c:c2:77:fd:cf:dd:cc:19:a8:f4:fe:08:
aa:38:8b:bf:7e:69:fe:c5:c2:1c:74:06:ef:9a:57:02:06:3a:
21:6a:c3:a2:c6:54:bf:5d:91:40:f0:d8:30:8f:d9:41:9c:0c:
af:b8:7e:5d:69:4d:74:87:60:f7:1b:1b:e4:28:ba:7c:34:84:
ac:a4:8a:3a:66:40:b7:6b:af:50:42:b2:c9:67:d1:14:57:54:
75:28:df:ee:44:31:88:4c:28:8a:ed:30:a6:f9:4b:2b:a7:00:
fa:0e:a2:ec:40:29:b7:96:6c:87:72:9b:0b:b1:52:46:16:12:
fc:16:82:0d:83:8f:d4:cb:6a:7b:b7:aa:3e:e5:bc:7d:4f:e5:
6c:aa:26:6b:8d:3b:7f:5a:0a:7a:e0:fc:50:b6:cf:99:92:fa:
06:51:23:60:55:b2:75:e0:b3:ff:59:35:d1:87:83:c9:17:9e:
24:37:41:7b:bb:69:f1:1c:92:eb:af:c0:dd:fd:c2:4a:13:67:
9a:65:88:f6:25:54:71:46:6c:56:22:8c:e6:e9:8f:4b:63:4f:
ef:0b:d8:63:8a:cf:dd:68:e5:87:ca:94:2f:d4:bc:3d:ad:58:
39:d1:0e:6f:0c:e7:f9:f9:1f:ec:d7:77:08:4a:56:ae:11:e7:
9f:37:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:28 2025 by rpki-client