Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/828ce1e4-5b83-3721-9d9f-db2168a08615.roa
File: 828ce1e4-5b83-3721-9d9f-db2168a08615.roa (raw, json)
Hash identifier: nBVaT0Z7yUAvnMNSu+pdAJVQyDlJAddsI0AAUV6Lzjw=
Subject key identifier: BA:76:C9:6A:92:38:4A:81:4D:05:40:44:B2:0D:54:EE:A0:0E:6A:F5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489EBF2DE3927BE77C41D78240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/828ce1e4-5b83-3721-9d9f-db2168a08615.roa
Signing time: Tue 21 Jan 2025 16:49:49 +0000
ROA not before: Tue 21 Jan 2025 16:49:49 +0000
ROA not after: Mon 21 Apr 2025 15:49:49 +0000
asID: 834
IP address blocks: 108.165.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:bf:2d:e3:92:7b:e7:7c:41:d7:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 21 16:49:49 2025 GMT
Not After : Apr 21 15:49:49 2025 GMT
Subject: CN=e684714c-d4a9-4019-bdfd-3af88b0015a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:3d:06:01:ae:b0:84:4f:20:e1:96:12:ce:
6e:fa:22:81:ed:6d:46:f5:d9:bb:a1:bb:d5:97:20:
d5:43:9f:eb:52:a5:7d:ec:ee:3c:d7:e0:9c:78:7a:
c2:8e:0d:f2:53:26:9f:86:7b:12:0a:29:00:b9:33:
4d:8a:b1:ac:4b:af:a9:c4:d0:3b:8b:f2:84:89:57:
e8:e0:3c:10:51:c1:e9:e1:9a:b3:78:ef:51:b1:93:
de:95:7c:8f:8d:79:f3:45:2a:bd:1e:2d:d2:ae:98:
04:37:ad:7e:2f:72:56:90:70:9a:02:04:cb:fd:63:
1f:5c:27:cc:47:b1:09:dc:a6:b8:53:42:75:c7:8b:
b2:79:f6:06:dc:de:c4:72:39:ee:05:4e:4c:20:4b:
82:93:17:ab:3d:bc:b9:d6:cb:e4:54:e9:8a:d8:42:
5e:0f:6c:6f:d7:a2:17:c3:bd:dd:69:b3:e0:77:4a:
18:4c:db:e3:90:68:d1:c6:4b:9a:df:38:d0:99:f1:
8d:f1:29:42:5f:b8:16:30:7e:21:e1:43:77:1e:b5:
26:4d:85:aa:95:2a:64:42:b9:b6:71:10:82:a3:91:
15:8e:79:d0:af:15:17:59:60:51:07:ef:1e:d9:ef:
ef:5e:6d:c5:a5:2c:df:74:c9:b5:c9:b0:59:05:e4:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:C9:6A:92:38:4A:81:4D:05:40:44:B2:0D:54:EE:A0:0E:6A:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/828ce1e4-5b83-3721-9d9f-db2168a08615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f3:d4:ca:2c:6b:36:0f:ad:e9:fc:64:a3:8e:87:d7:53:ec:
a1:19:49:54:0c:9a:fa:de:7e:ee:4d:06:04:66:60:43:c9:2e:
3f:71:eb:19:4a:0b:93:13:db:49:af:0a:f0:a9:f7:f4:d2:a2:
32:89:de:00:dd:a1:d5:96:00:7f:cd:b1:f5:8a:a0:65:fc:c4:
d8:8f:6e:0a:8c:9f:38:74:a6:a2:e9:04:1d:ff:b0:bd:cf:cc:
c1:5e:32:1a:10:a6:41:2d:86:40:ad:fe:d8:00:ad:5f:c0:85:
da:1a:4a:8a:77:bc:2b:41:16:b8:3d:bf:ee:fb:f2:2c:84:7d:
c0:52:9e:bc:ac:5a:ef:8b:29:a0:18:ab:90:be:48:4d:ae:e8:
e5:41:f5:22:02:6a:2a:3a:7c:cf:8d:31:00:59:c6:6e:fd:95:
28:cd:e8:3b:3f:c8:8a:69:aa:5e:21:1c:7e:46:06:79:41:57:
ef:87:7d:3e:19:21:4a:2c:11:12:16:f8:c5:43:c8:e0:7c:33:
af:5d:3a:ea:f4:1e:d7:d7:72:30:f0:5f:d2:ea:25:18:52:08:
5c:ce:4e:3e:a1:f7:b4:fe:88:66:54:11:62:d5:16:aa:b7:ec:
42:1d:1b:75:05:47:cb:02:1c:ed:d5:b3:93:41:55:62:b1:57:
dc:f2:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:06 2025 by rpki-client