Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86e900ce-eced-3010-bdd6-f1a5f832d835.roa
File: 86e900ce-eced-3010-bdd6-f1a5f832d835.roa (raw, json)
Hash identifier: y+8J0/KdFg7lhfR0fK02tSiQ/crSoWjlYqK6i6P/XJA=
Subject key identifier: 41:23:26:84:72:F2:F7:96:9A:A9:1C:67:D4:B3:0F:C1:91:4A:1D:E6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858496827616160A82043C02CAB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86e900ce-eced-3010-bdd6-f1a5f832d835.roa
Signing time: Thu 03 Apr 2025 20:17:14 +0000
ROA not before: Thu 03 Apr 2025 20:17:14 +0000
ROA not after: Wed 02 Jul 2025 20:17:14 +0000
asID: 215224
IP address blocks: 166.0.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 16:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:27:61:61:60:a8:20:43:c0:2c:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 3 20:17:14 2025 GMT
Not After : Jul 2 20:17:14 2025 GMT
Subject: CN=034c70eb-0c43-42ae-b128-f1aaa959a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:36:83:29:cc:be:cb:e0:01:1d:d8:9f:5f:
c1:56:27:3f:ea:9a:17:08:7c:26:b2:c9:5c:ef:9d:
4e:be:63:c6:b2:16:7c:2b:37:56:5e:4b:f8:ee:dd:
9d:1f:c2:7c:26:30:2b:6f:0a:04:dc:db:92:46:3a:
91:db:98:c5:d2:b2:0f:0b:d9:f9:e3:ff:43:43:0b:
eb:bc:ca:b4:c6:56:0d:36:8a:93:df:58:9d:5a:45:
35:9e:ad:e7:bc:4c:67:5d:6e:47:43:e6:9c:8c:22:
8d:95:17:a2:3f:94:a4:11:c4:30:38:23:08:86:6c:
42:b3:34:81:ec:cf:f9:ae:d4:2f:27:11:5a:e4:c3:
09:41:cf:71:35:de:45:61:80:2a:82:1c:ac:f8:7b:
0a:b8:aa:26:cf:1a:bc:7b:09:0c:da:f8:00:84:24:
8b:ea:2e:a3:f9:b2:6f:ef:db:16:38:d2:95:04:82:
06:1e:2f:08:87:05:29:28:28:69:c5:83:06:95:1a:
a3:e1:b9:a8:b7:06:63:0e:bb:39:1e:e3:2e:a5:00:
ab:f8:8d:f0:8b:e4:85:dc:04:4e:f4:01:52:a8:01:
8f:27:6f:6e:73:c8:22:bf:17:64:1f:61:d4:61:32:
a4:20:d5:49:a9:cd:3b:32:80:52:d9:e6:29:57:a1:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:26:84:72:F2:F7:96:9A:A9:1C:67:D4:B3:0F:C1:91:4A:1D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86e900ce-eced-3010-bdd6-f1a5f832d835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:48:c3:94:9e:43:51:db:24:82:37:fd:52:cc:0c:6d:e7:d5:
eb:b7:43:7d:e3:f3:57:02:d7:6e:f3:e0:f0:05:b9:03:cc:62:
e1:e6:6e:27:87:b1:83:c1:78:fe:88:49:fb:5e:7d:29:9b:18:
92:4e:cb:42:c7:4b:e9:0a:6a:ae:a2:37:8b:7b:f2:45:61:e3:
b6:02:7e:08:b3:b3:19:7c:34:47:80:93:6f:87:be:44:75:85:
27:5a:94:f6:28:88:40:df:13:da:23:7f:c4:fb:5f:81:1c:f9:
f4:d8:d3:93:1f:ae:20:ea:cd:25:4b:e0:03:6a:9a:99:8d:9f:
0f:c4:de:64:7e:d0:48:44:7a:75:42:ec:1a:8c:2b:b7:33:01:
07:6a:98:be:b4:57:a0:7a:d5:1a:d9:5d:d6:6b:07:2a:9d:bd:
c6:cf:d0:ad:31:02:6d:19:25:e3:55:de:b8:01:3e:11:c9:d0:
34:45:73:3e:83:20:08:20:99:bd:8e:e9:a9:60:40:a6:3f:cd:
89:c3:33:52:48:96:7b:ff:03:18:80:3f:e1:3c:e6:cd:00:6c:
1b:3b:d4:48:da:d1:8a:30:da:8e:24:f4:8d:d8:42:92:1b:46:
26:a4:b5:00:1f:66:99:29:67:3f:29:76:bd:c5:27:df:7b:1b:
42:35:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:38:02 2025 by rpki-client