Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86f4dd35-0d81-3435-8d62-a65d2d371451.roa
File: 86f4dd35-0d81-3435-8d62-a65d2d371451.roa (raw, json)
Hash identifier: pq8VjoIld3AlI257VKaXtdp/wlGHhK/9OvygPf6pApw=
Subject key identifier: 06:C7:F1:1A:AD:25:16:8E:3D:BF:03:54:B3:22:40:F1:60:71:ED:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848E1F341A6FF2863313B098F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86f4dd35-0d81-3435-8d62-a65d2d371451.roa
Signing time: Fri 14 Feb 2025 18:33:54 +0000
ROA not before: Fri 14 Feb 2025 18:33:54 +0000
ROA not after: Thu 15 May 2025 17:33:54 +0000
asID: 834
IP address blocks: 108.165.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 19:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:f3:41:a6:ff:28:63:31:3b:09:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 14 18:33:54 2025 GMT
Not After : May 15 17:33:54 2025 GMT
Subject: CN=7635316e-1990-4d57-bcf8-b2d069cc34c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:f2:79:42:3a:3a:e1:d4:22:62:a8:6f:e7:
48:d9:43:fb:b3:e9:4c:a9:bc:9e:5c:cc:bd:74:c4:
54:27:0f:d9:ff:ba:f9:a9:bf:62:7f:8f:6a:64:1e:
0d:66:d7:55:86:74:f2:49:08:24:ea:39:a5:79:07:
bb:9b:40:d8:0c:6a:9b:9b:a3:dd:14:1c:9e:5a:46:
c3:22:55:60:78:6a:fb:6f:2f:15:ce:d5:b8:f3:77:
48:6e:da:ff:c5:e7:9b:97:ff:e7:61:7d:77:b9:42:
62:37:4f:ad:d0:4d:87:cf:7d:c3:18:e9:48:9b:cb:
85:fd:db:f1:dd:ce:20:d2:4d:41:de:5e:1e:2f:18:
d0:8a:0b:2f:17:1c:23:b2:7a:48:0a:b6:dd:c0:b2:
93:80:f4:a7:2f:42:31:81:12:58:9d:41:fb:3d:24:
ec:c9:b9:c6:cb:4f:33:a5:42:88:d2:65:b1:93:f9:
47:1e:35:78:b8:f8:69:7e:c7:2b:ec:86:31:82:16:
b6:8d:99:37:7b:d5:81:b6:ef:a9:18:94:36:12:84:
77:49:cb:d7:fc:13:3e:d2:ab:c0:86:e8:a8:68:2f:
7e:b8:98:47:f0:84:77:b5:58:b0:40:a7:7b:83:3e:
4b:6d:e0:fc:87:2d:ce:38:5c:73:97:bc:cd:bf:71:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:F1:1A:AD:25:16:8E:3D:BF:03:54:B3:22:40:F1:60:71:ED:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86f4dd35-0d81-3435-8d62-a65d2d371451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:22:c8:6d:8c:17:ec:d8:0f:c9:0b:f9:89:ff:ea:6b:cf:62:
06:c2:4c:01:40:14:6e:c2:72:f7:e1:44:10:71:26:8e:e0:90:
e6:6d:f9:da:23:37:87:17:45:5f:65:d1:5d:21:13:03:38:fd:
37:da:67:9c:b4:97:1b:ea:8e:cc:1b:10:0e:b2:18:4c:1c:57:
f9:9c:4f:7c:e5:d9:77:b3:cd:5c:36:31:cb:d9:25:70:d9:5e:
03:4c:5d:53:f2:b9:30:9c:4c:bc:29:6b:66:25:05:f6:ac:21:
06:7c:51:05:ec:3c:38:b7:b0:91:6d:9f:13:99:1f:a2:cb:1e:
1c:d4:cb:88:2a:89:06:f1:e5:33:e8:a6:9c:1e:39:d5:a5:b0:
bb:27:da:45:14:5e:03:4a:32:10:5f:30:c8:43:0e:b2:f0:f6:
48:eb:d8:8f:ca:73:a4:f8:38:25:f9:2c:cb:e5:74:32:23:3e:
fe:0f:47:89:be:82:28:70:3c:a1:39:cb:27:66:2f:96:39:5f:
4c:07:64:0c:7c:aa:34:b4:fe:78:f3:ed:70:3f:6a:0b:d8:88:
2d:dc:52:97:bd:54:e8:20:8a:ab:24:83:a9:7c:10:6c:a9:8a:
73:09:86:e3:46:f6:09:93:2c:6c:a5:9a:de:b1:7f:eb:d6:9f:
a8:e4:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:37:57 2025 by rpki-client