Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa
File: 87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa (raw, json)
Hash identifier: U4hnclphS1Q64oPmTVb0aJVZBxIUNXB/lgd3hAs85tE=
Subject key identifier: A5:3F:73:14:6F:18:93:94:E1:AE:8E:53:88:E5:E8:D1:CE:BF:2E:D0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DD3BAC9AE649A26E30298980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 57731
IP address blocks: 166.0.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:ac:9a:e6:49:a2:6e:30:29:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=59ce7ebb-7b45-45ed-a6c2-37a855d0664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:67:d3:04:e3:f6:97:cf:b4:98:b0:bc:cb:
8f:b7:9e:c8:63:3d:24:0f:0b:5f:e9:29:79:81:5a:
df:0f:cf:44:8c:e5:53:6b:2c:14:d2:27:d3:a0:5c:
1c:f2:f0:11:1e:8c:13:c3:45:60:0c:c4:1d:09:03:
4e:e5:90:03:de:a4:90:01:85:d1:69:eb:0d:e0:12:
2b:d2:e3:64:7c:45:f9:40:7c:bd:9b:48:51:76:c6:
b2:11:ce:ba:77:e0:97:c7:bb:38:e1:5b:cc:ab:2a:
81:31:4b:1c:6d:a2:e1:76:f1:ca:c4:76:83:63:88:
42:dd:b3:b2:8b:22:c9:88:36:5b:c2:21:15:a2:17:
a5:5c:08:f4:0f:ce:8f:6f:5d:14:26:48:26:8d:5c:
76:32:a4:17:23:d1:52:38:76:0f:54:ab:b5:f1:94:
ad:5e:d6:1b:c1:5f:33:d0:8e:59:ba:34:7c:b4:2f:
fe:2a:7f:0c:73:2e:a7:35:a4:83:36:4c:43:36:bf:
c9:25:12:bd:64:bf:13:28:11:07:e4:b3:80:09:fb:
89:0b:1b:24:51:d2:58:f2:0e:e7:9d:00:5b:be:fe:
3e:aa:50:6c:92:21:15:fa:c5:33:61:93:85:04:43:
eb:6c:a6:43:fd:81:9c:54:98:14:b3:bb:79:08:af:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:73:14:6F:18:93:94:E1:AE:8E:53:88:E5:E8:D1:CE:BF:2E:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87f9dcc7-c3ed-36c9-a953-0ee4a5eaa2b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fc:99:87:61:ea:97:b7:7f:8f:22:bc:bb:52:21:f8:29:05:
16:76:8f:a8:3f:f1:28:e1:31:60:a2:77:05:e5:31:5b:e3:1b:
9e:23:0a:55:a3:86:6c:bc:f7:4a:db:69:65:e4:cd:52:db:f2:
33:c4:31:86:d5:ca:9a:bf:69:5c:19:dc:9b:6d:54:62:fc:6c:
b1:4f:6d:b2:fd:9a:da:bb:d0:eb:d8:b2:04:b0:52:ed:f2:e0:
5d:41:25:d0:b9:23:b7:d8:e5:b7:78:f2:38:10:ca:ee:cd:c1:
ed:58:64:ed:1d:6c:9f:18:7c:60:79:20:18:ff:69:11:f6:8b:
08:ef:37:00:00:ae:08:7e:7c:8c:6f:d2:9f:e3:26:af:e9:05:
17:7a:4f:b3:c3:be:37:ba:22:0d:14:7c:fd:c6:1f:0f:45:0e:
77:ce:4b:15:11:4e:bc:8b:ca:a9:24:80:1b:ca:67:d8:c5:b4:
4c:96:eb:a1:ec:ab:85:71:90:33:58:b5:95:29:91:b2:4d:9b:
3d:d6:dd:3b:49:00:18:65:1d:43:3b:04:91:8a:2a:66:55:d1:
83:e3:72:2f:25:8a:ac:94:f1:c2:b1:e0:5b:c8:44:5a:80:97:
25:0f:7f:fe:01:59:56:95:cf:f8:51:82:79:14:fd:20:c0:dc:
35:b7:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:41 2025 by rpki-client