Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66346864-c564-30e8-a5f7-5f8b1eb1778d.roa
File: 66346864-c564-30e8-a5f7-5f8b1eb1778d.roa (raw, json)
Hash identifier: uz47vIK7pYqh4e5Tx4zxvJW/94cGK0JeZei+Zx6QUEk=
Subject key identifier: C3:F3:93:60:DD:9F:D4:A8:82:81:54:44:8B:2C:A7:05:EF:C5:8C:E4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858490A4D9770BEC8BD2DDCE23BF0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66346864-c564-30e8-a5f7-5f8b1eb1778d.roa
Signing time: Sat 01 Mar 2025 05:28:15 +0000
ROA not before: Sat 01 Mar 2025 05:28:15 +0000
ROA not after: Fri 30 May 2025 04:28:15 +0000
asID: 834
IP address blocks: 166.0.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:4d:97:70:be:c8:bd:2d:dc:e2:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 05:28:15 2025 GMT
Not After : May 30 04:28:15 2025 GMT
Subject: CN=b8f1c801-0e67-48be-9086-7fdc78a0a8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:a6:c3:b1:5b:64:41:61:b3:c5:9c:c5:1d:
4d:7b:9b:3f:20:99:12:75:54:8f:f4:91:fe:b6:3c:
bd:ad:6f:db:3d:78:76:f3:e2:cb:f7:31:c1:bf:57:
c6:53:f9:89:38:7b:ba:c2:9c:08:7c:3d:47:31:71:
0f:4c:d1:67:a8:f1:60:cb:0f:b6:70:d4:f9:17:de:
10:69:2c:23:5e:15:ab:cb:31:52:d4:d8:04:c8:f3:
25:15:1b:44:d3:55:da:e2:e9:c6:88:2d:9d:b5:b1:
f2:40:98:35:9d:b0:25:d9:b3:f0:e5:f5:e0:63:4f:
2c:52:52:80:32:a4:c3:de:4c:d2:f8:27:e8:2c:4e:
cd:6e:db:99:30:62:65:59:50:46:55:60:e2:f4:f7:
2d:97:38:14:a3:63:e7:97:48:30:8a:e7:1a:57:56:
bc:79:68:5b:14:c3:7e:6d:8d:4b:66:43:f1:d1:50:
9a:06:92:d2:1e:a7:80:f4:29:af:f8:8b:08:7d:b4:
97:34:ff:e0:9c:70:75:23:f1:8d:a4:68:d9:7e:06:
0e:13:4f:9b:ae:ea:41:a4:7d:77:db:d5:29:59:8f:
9a:f6:b5:c6:23:16:2e:06:25:e9:a8:28:75:1d:a6:
00:c3:99:6c:b5:53:16:9d:9a:82:a1:9f:f5:af:1c:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F3:93:60:DD:9F:D4:A8:82:81:54:44:8B:2C:A7:05:EF:C5:8C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66346864-c564-30e8-a5f7-5f8b1eb1778d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5e:b0:54:23:c5:c3:1b:5b:76:8b:ab:bd:40:2a:40:7e:58:
a5:4b:aa:f8:40:d0:da:ab:86:90:bb:a9:78:5a:21:6a:61:67:
6a:be:d6:57:b5:b9:d0:04:7d:a0:14:f9:d3:70:12:d3:1d:74:
bb:14:1d:5e:ef:35:93:00:61:54:52:44:65:95:11:f0:41:9d:
ef:f0:56:f1:f4:60:ad:e1:af:0a:8c:c5:c5:7d:e4:7e:af:b4:
73:95:40:be:44:43:e6:d1:b5:cb:92:0f:db:09:b4:99:58:71:
79:3b:8d:56:5a:20:a3:5d:db:9f:9a:50:5e:f9:b7:c5:c2:e7:
cf:bb:22:3d:02:31:12:4c:bd:06:60:ff:43:01:c1:5f:4f:96:
f2:2f:57:94:1e:03:7a:ae:78:90:ce:e3:4c:97:34:29:a4:0f:
90:cf:ed:5c:73:69:40:34:c8:58:99:34:f7:82:46:ae:4c:de:
d6:3d:3d:c0:f5:f6:56:55:f2:77:54:54:38:27:c0:ba:7d:85:
49:7a:51:b9:dc:81:cf:68:59:88:5e:20:5c:84:cb:7b:a7:64:
cd:b2:81:2c:d8:d6:74:41:ba:6b:14:b1:56:99:b2:68:83:66:
73:f8:a4:f0:8f:6c:62:ba:e9:f7:e2:a8:0a:53:46:9b:22:51:
60:83:d1:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkKTZdwvsi9LdziO/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwMTA1MjgxNVoXDTI1MDUzMDA0MjgxNVowLzEtMCsGA1UEAxMk
YjhmMWM4MDEtMGU2Ny00OGJlLTkwODYtN2ZkYzc4YTBhOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Smw7FbZEFhs8WcxR1Ne5s/IJkSdVSP9JH+
tjy9rW/bPXh28+LL9zHBv1fGU/mJOHu6wpwIfD1HMXEPTNFnqPFgyw+2cNT5F94Q
aSwjXhWryzFS1NgEyPMlFRtE01Xa4unGiC2dtbHyQJg1nbAl2bPw5fXgY08sUlKA
MqTD3kzS+CfoLE7NbtuZMGJlWVBGVWDi9PctlzgUo2Pnl0gwiucaV1a8eWhbFMN+
bY1LZkPx0VCaBpLSHqeA9Cmv+IsIfbSXNP/gnHB1I/GNpGjZfgYOE0+brupBpH13
29UpWY+a9rXGIxYuBiXpqCh1HaYAw5lstVMWnZqCoZ/1rxzHhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPzk2Ddn9SogoFURIsspwXvxYzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjYzNDY4NjQtYzU2NC0z
MGU4LWE1ZjctNWY4YjFlYjE3NzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5esFQjxcMbW3aLq71AKkB+WKVLqvhA0NqrhpC7qXhaIWphZ2q+1le1
udAEfaAU+dNwEtMddLsUHV7vNZMAYVRSRGWVEfBBne/wVvH0YK3hrwqMxcV95H6v
tHOVQL5EQ+bRtcuSD9sJtJlYcXk7jVZaIKNd25+aUF75t8XC58+7Ij0CMRJMvQZg
/0MBwV9PlvIvV5QeA3queJDO40yXNCmkD5DP7VxzaUA0yFiZNPeCRq5M3tY9PcD1
9lZV8ndUVDgnwLp9hUl6Ubncgc9oWYheIFyEy3unZM2ygSzY1nRBumsUsVaZsmiD
ZnP4pPCPbGK66ffiqApTRpsiUWCD0eE=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:21 2025 by rpki-client