Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5688e39c-78f7-3cea-bf7d-536a84f2d4f0.roa
File: 5688e39c-78f7-3cea-bf7d-536a84f2d4f0.roa (raw, json)
Hash identifier: OmygsOXgYPkc3hElCkktRHkGi8d+53SM+OR2i62fPtI=
Subject key identifier: 04:99:8F:44:33:E6:E4:1F:EC:D7:4A:B2:C4:FA:B8:6C:1C:3A:85:2A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C2B6540FFEBDDC42B6F7CD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5688e39c-78f7-3cea-bf7d-536a84f2d4f0.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 7018
IP address blocks: 108.165.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 18:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:54:0f:fe:bd:dc:42:b6:f7:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=6d7fef5a-1277-43c1-9716-d2dcf26a95ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:f9:3f:37:5d:01:3f:8c:49:1a:46:a6:32:
fb:a9:bf:8c:70:92:cf:27:ff:24:07:7b:10:a8:6a:
fb:8f:22:eb:d4:a4:26:c4:24:d2:f8:e3:87:b2:bf:
85:6d:ae:90:35:78:6c:5f:2c:c1:e7:57:bd:39:84:
2d:94:7a:21:46:b6:9f:cb:3c:fa:4f:97:32:b3:83:
0f:83:d7:ee:29:ec:16:62:f0:5f:11:2b:c9:fc:21:
01:38:d6:2d:9f:e2:0f:ed:10:c2:d4:b8:fb:6c:7c:
f7:ff:b4:e2:67:a3:a9:7d:62:fd:f0:63:7d:cf:f3:
8f:89:5b:ae:08:e2:be:5b:f6:1e:a3:32:a9:33:fe:
53:20:cb:0c:77:4b:0b:11:7a:4b:99:ec:70:e9:fc:
94:0b:29:92:09:a0:2a:b1:88:f3:69:76:a0:0f:16:
82:bd:a8:a6:45:0a:e5:98:94:fd:b2:5c:d8:20:8f:
65:57:76:94:e2:90:24:90:6c:92:a8:e4:ff:ba:f5:
bf:41:c3:c5:2b:6d:b0:0d:b6:03:bd:4f:10:6b:13:
6e:c6:e5:80:cb:4a:43:a9:91:7f:9c:93:34:f0:67:
92:a2:72:68:86:84:5a:34:c3:13:fb:14:b7:db:bc:
6b:d8:98:c2:5a:6a:48:a6:86:77:46:e1:75:ee:1e:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:8F:44:33:E6:E4:1F:EC:D7:4A:B2:C4:FA:B8:6C:1C:3A:85:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5688e39c-78f7-3cea-bf7d-536a84f2d4f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c1:07:bf:04:4b:ed:a2:08:8a:09:60:42:e7:7d:aa:c0:09:
c4:2d:86:b3:3b:72:43:92:5d:24:72:dd:98:24:77:6f:d6:5e:
2a:bf:94:0b:85:14:f9:07:e8:81:e6:ec:04:80:dc:ec:1d:a4:
d2:b9:b4:75:d2:29:1a:07:cd:b9:40:fc:2d:a9:0d:68:e9:00:
92:de:9d:42:30:e2:bf:51:58:5a:b0:95:96:d4:80:e6:37:ff:
35:fa:57:8a:5b:c5:4f:59:6c:37:3b:a1:a6:0e:27:d7:6a:2e:
56:92:3d:88:f5:0c:ae:4a:e9:e6:7c:74:73:e3:bf:7d:22:0d:
39:01:f1:f8:4f:17:d1:1c:f0:88:80:ab:94:e0:fd:d3:d6:f2:
b7:c1:ef:e5:24:3f:6e:f6:d0:61:24:8f:34:44:f0:ad:9f:4f:
00:e6:82:8d:ca:e4:44:86:de:8c:54:f4:0d:bf:6f:3c:08:74:
ad:c4:69:e6:44:37:58:f5:f2:02:25:57:05:46:54:21:99:bb:
e8:c4:d2:b9:f4:c0:39:f2:9f:f5:e1:14:43:70:d7:d4:d5:ed:
25:95:a4:ad:53:b2:41:51:7b:2a:44:74:1a:7c:50:b9:bf:d9:
b8:29:ad:ad:90:2b:5b:cf:ec:fd:24:b6:ca:18:ab:64:bc:1e:
67:89:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:52 2025 by rpki-client