Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/663bf3a1-f1c1-37be-aebf-bf52ff9880e1.roa
File: 663bf3a1-f1c1-37be-aebf-bf52ff9880e1.roa (raw, json)
Hash identifier: 92oWXp5XLSz7wVxsTWjy+wsuaZcW1JceB3jZM8Tz3Ec=
Subject key identifier: 98:52:CB:BF:D3:B1:B5:EF:8A:4F:EA:47:EC:D9:8A:12:68:1E:2D:B0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848ECE8EE59484B19582B2C3080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/663bf3a1-f1c1-37be-aebf-bf52ff9880e1.roa
Signing time: Tue 18 Feb 2025 16:46:59 +0000
ROA not before: Tue 18 Feb 2025 16:46:59 +0000
ROA not after: Mon 19 May 2025 15:46:59 +0000
asID: 401152
IP address blocks: 108.165.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 16:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:e8:ee:59:48:4b:19:58:2b:2c:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 18 16:46:59 2025 GMT
Not After : May 19 15:46:59 2025 GMT
Subject: CN=4efde005-2a9a-494f-b72a-87f3e17ee2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:ff:ac:24:50:da:89:96:9a:82:3a:84:44:
33:3d:c2:9a:98:fd:52:a8:5c:8d:36:ed:35:53:77:
02:9c:aa:42:53:25:83:a8:9c:96:01:52:5b:5f:3e:
3d:e4:b6:c4:30:43:f7:6b:5f:6b:61:97:b6:1a:c8:
54:7c:63:b2:17:20:f3:e7:75:4b:66:3f:e0:dc:11:
7b:0b:04:26:98:9a:6f:98:4d:b8:d0:43:11:90:16:
6b:95:8b:28:a2:50:f4:94:c4:e6:05:75:7e:ea:d4:
e2:ea:58:18:f7:af:16:b8:b7:94:4e:51:7e:9f:fc:
76:26:87:e2:e3:59:f9:71:12:34:2d:52:5f:13:72:
90:d3:fa:3f:6e:3a:30:ab:17:4d:d5:e0:b4:af:57:
ce:f6:87:3e:b5:94:12:70:44:ca:35:89:7f:08:5a:
9c:c0:ed:03:9d:ec:32:79:70:5c:a7:09:ee:72:87:
78:68:75:1e:8e:1f:3e:56:77:3a:c6:17:5f:13:bd:
4d:73:a5:0e:0c:c9:dc:b4:72:f4:76:f5:a0:90:8b:
6f:d2:2c:3c:27:54:5c:2d:5d:9a:51:e5:45:2b:4c:
bc:2e:90:f5:3c:d4:1b:06:43:28:f6:ed:e8:05:3a:
f2:96:4b:b9:7f:5f:16:36:88:06:ea:9e:51:55:20:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:CB:BF:D3:B1:B5:EF:8A:4F:EA:47:EC:D9:8A:12:68:1E:2D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/663bf3a1-f1c1-37be-aebf-bf52ff9880e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:38:6b:5a:7a:ed:86:55:ec:4d:21:c5:d2:17:84:04:9b:cb:
cd:36:8a:55:4e:17:3b:05:43:05:e6:d3:f3:61:95:75:47:d0:
45:52:c6:32:08:c4:54:c5:46:1c:8e:df:0e:f5:c5:a9:a6:c5:
9e:ff:6b:3f:4d:68:3a:d9:1d:fd:a4:75:45:2a:59:7c:07:ec:
6b:49:46:cd:bd:a7:68:f3:46:77:64:5f:1c:11:6a:8e:9e:a5:
77:6c:33:6e:b1:9e:e0:20:db:b6:ba:de:7d:94:50:f0:ed:58:
83:96:bb:cb:cc:6d:68:d0:c4:0f:d7:94:55:77:76:b2:fb:0b:
4c:36:86:f4:54:54:f9:e8:4b:b5:47:ed:e6:78:cd:e3:3e:fd:
f3:85:7b:51:09:9f:16:66:96:4b:64:bf:0b:af:9e:17:61:81:
b3:5a:a8:c0:c2:ff:0d:72:41:4f:2b:28:7b:55:b8:78:7f:f8:
e0:c0:33:5d:4f:cc:e6:a2:53:30:84:5b:61:2f:84:2a:a8:76:
6d:49:fb:6b:32:d5:eb:bb:c9:dd:d1:e5:00:b9:f0:93:9b:8b:
28:85:ac:8c:85:46:a7:0e:cd:c0:9f:95:3a:e1:4e:c3:aa:65:
0c:c2:3b:f2:2b:f2:88:c5:1f:7f:6d:b2:1b:0c:5d:b1:f3:38:
c4:fa:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:22 2025 by rpki-client