Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/824de00f-cc57-3061-a01a-ddeab03a5179.roa
File: 824de00f-cc57-3061-a01a-ddeab03a5179.roa (raw, json)
Hash identifier: B6SHytfMY4rn/YgVNRMSL2Kgo6fHupz9+/VEi6l9WLw=
Subject key identifier: 99:9B:C1:92:A6:F6:88:BC:8F:AD:E4:4E:5E:27:27:D4:0A:F0:12:53
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584914421DD4319C7EA2FB66BEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/824de00f-cc57-3061-a01a-ddeab03a5179.roa
Signing time: Tue 04 Mar 2025 19:03:12 +0000
ROA not before: Tue 04 Mar 2025 19:03:12 +0000
ROA not after: Mon 02 Jun 2025 18:03:12 +0000
asID: 401152
IP address blocks: 108.165.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 18:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:14:42:1d:d4:31:9c:7e:a2:fb:66:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 4 19:03:12 2025 GMT
Not After : Jun 2 18:03:12 2025 GMT
Subject: CN=44eb58ab-a35f-4bea-946e-8af113ad38a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:72:54:d8:de:e9:5f:af:d3:cf:2d:61:fe:
63:b7:96:92:87:fb:11:cd:f0:37:e6:75:07:bd:36:
6d:0a:cf:9d:fb:a9:81:9c:bd:f7:25:85:b0:00:85:
49:c0:57:50:c0:70:c3:7a:0d:44:3c:2a:cb:25:a5:
c6:b7:a3:0c:b2:d1:c2:7d:3b:14:b2:3f:3c:8a:cb:
a2:b5:80:c5:74:34:74:fc:ee:02:60:6c:02:a6:f2:
1d:d8:ed:fd:3d:35:e1:ac:4b:8e:6a:25:c2:3d:33:
c2:06:92:b6:13:9d:4e:12:ca:c0:56:43:eb:72:39:
24:2e:c9:bf:f0:f7:4b:2a:ec:10:53:67:36:d2:2d:
bb:4d:f9:44:ef:0d:78:12:73:39:a2:f5:ce:66:ec:
44:b6:84:59:f1:05:ac:75:d1:d3:ed:8e:c9:7e:60:
29:2a:e2:c4:5b:06:b7:e1:6e:34:fb:bb:5b:2b:0c:
51:a1:df:05:bc:97:59:92:c7:4f:1b:ff:17:2f:8a:
8e:37:83:d6:53:5a:f9:a5:6e:d7:1b:71:d6:77:54:
cb:85:2e:ab:c6:7c:87:45:20:13:bf:81:ea:5f:4b:
d8:a2:44:5d:a7:26:ca:9a:d1:86:9e:c7:b9:e0:24:
3f:93:96:72:00:08:32:95:d7:8e:f7:b9:c7:7d:55:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:C1:92:A6:F6:88:BC:8F:AD:E4:4E:5E:27:27:D4:0A:F0:12:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/824de00f-cc57-3061-a01a-ddeab03a5179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:01:52:1e:a7:0a:63:80:3f:50:41:eb:7b:29:fa:c4:af:57:
b7:5c:2b:d2:c1:4b:35:f8:55:18:f6:cb:b6:30:83:22:14:11:
cd:2c:22:d2:cd:58:a1:59:37:f3:e0:77:73:b1:fa:4c:a1:62:
5c:c5:96:70:5d:25:f2:60:a8:6f:4e:7f:67:d4:e1:55:6c:be:
87:06:ee:a5:16:e8:91:97:00:37:d3:b0:10:43:f8:54:b2:c0:
68:ff:20:dc:0c:3b:13:03:4d:0f:aa:63:90:65:0d:44:63:3e:
08:82:ac:e6:0f:65:23:96:99:88:ba:4f:ac:d9:bf:5a:d0:70:
8b:9c:e5:e5:ca:de:89:53:56:e4:5a:d9:da:0a:90:2c:6e:32:
57:9e:0b:42:e7:4c:6a:fb:e7:77:5c:c9:96:82:ff:49:a1:df:
67:e0:97:5a:e7:49:31:3a:11:d4:a4:6e:37:f9:11:6d:99:15:
f6:ce:0e:b7:b4:e7:5c:4d:5a:a0:02:a3:bd:32:28:8a:b1:31:
15:0a:04:09:79:a1:3e:da:67:a2:34:1f:06:3f:ee:3c:c0:74:
8c:4b:5d:48:08:b9:7c:84:88:5b:15:e9:51:95:95:07:5c:09:
73:9d:0a:42:5d:a1:58:8f:bf:0c:b5:32:3c:93:cd:45:b8:44:
76:9b:45:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkUQh3UMZx+ovtmvsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwNDE5MDMxMloXDTI1MDYwMjE4MDMxMlowLzEtMCsGA1UEAxMk
NDRlYjU4YWItYTM1Zi00YmVhLTk0NmUtOGFmMTEzYWQzOGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMxyVNje6V+v088tYf5jt5aSh/sRzfA35nUH
vTZtCs+d+6mBnL33JYWwAIVJwFdQwHDDeg1EPCrLJaXGt6MMstHCfTsUsj88isui
tYDFdDR0/O4CYGwCpvId2O39PTXhrEuOaiXCPTPCBpK2E51OEsrAVkPrcjkkLsm/
8PdLKuwQU2c20i27TflE7w14EnM5ovXOZuxEtoRZ8QWsddHT7Y7JfmApKuLEWwa3
4W40+7tbKwxRod8FvJdZksdPG/8XL4qON4PWU1r5pW7XG3HWd1TLhS6rxnyHRSAT
v4HqX0vYokRdpybKmtGGnse54CQ/k5ZyAAgyldeO97nHfVVYAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmbwZKm9oi8j63kTl4nJ9QK8BJTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODI0ZGUwMGYtY2M1Ny0z
MDYxLWEwMWEtZGRlYWIwM2E1MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIBUh6nCmOAP1BB63sp+sSvV7dcK9LBSzX4VRj2y7YwgyIUEc0sItLN
WKFZN/Pgd3Ox+kyhYlzFlnBdJfJgqG9Of2fU4VVsvocG7qUW6JGXADfTsBBD+FSy
wGj/INwMOxMDTQ+qY5BlDURjPgiCrOYPZSOWmYi6T6zZv1rQcIuc5eXK3olTVuRa
2doKkCxuMleeC0LnTGr753dcyZaC/0mh32fgl1rnSTE6EdSkbjf5EW2ZFfbODre0
51xNWqACo70yKIqxMRUKBAl5oT7aZ6I0HwY/7jzAdIxLXUgIuXyEiFsV6VGVlQdc
CXOdCkJdoViPvwy1MjyTzUW4RHabRTQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:27:46 2025 by rpki-client