Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8828e1ea-bfee-34ff-820e-8fac26421e8c.roa
File: 8828e1ea-bfee-34ff-820e-8fac26421e8c.roa (raw, json)
Hash identifier: UIWkBmS3VG5swx5s8VHiiVCAycjZhpHdnnxKFwyS6ao=
Subject key identifier: 98:37:7A:DC:77:68:BE:03:8A:93:73:90:F6:1E:EB:E5:E3:A9:E1:91
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858484D759451E4FCF2F1D4B7E100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8828e1ea-bfee-34ff-820e-8fac26421e8c.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 62240
IP address blocks: 166.1.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:94:51:e4:fc:f2:f1:d4:b7:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=1d221c94-4f70-4fec-9320-5b23c45df96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:9a:25:cc:cd:b5:9b:ea:79:e1:14:b8:0b:
d7:6d:31:d1:98:03:3a:27:24:99:91:c4:78:24:11:
f0:5c:5e:56:b3:7f:c4:b7:5c:7a:1c:2d:04:9b:de:
da:ef:e5:3a:cf:a9:89:91:43:73:74:b8:08:cc:ee:
36:ec:21:b9:36:37:cf:bd:19:e2:ef:96:46:50:fb:
d8:24:e4:3d:21:ec:e8:f3:0c:fc:36:95:a5:86:7e:
c6:f0:23:71:05:e5:57:5b:2f:d2:ab:b7:4f:97:5b:
4b:d1:95:aa:98:b0:53:52:b4:21:f5:c8:43:78:c4:
b4:9e:67:9f:d9:dc:75:d8:6a:0d:5c:7a:4a:c1:67:
30:4a:51:0e:72:9d:7d:c3:3d:dc:6c:6d:5a:f2:6b:
70:26:a3:df:79:6e:7b:08:75:ad:5c:cf:ad:84:67:
7d:7e:4a:e9:9f:0a:d9:bf:31:15:34:b5:14:3b:fa:
07:b9:fa:09:4e:34:1b:cf:10:f9:ec:0f:52:d8:5a:
0c:8e:3b:13:36:20:c9:cf:c3:be:d9:ac:fa:c9:df:
8a:6a:74:83:67:55:cf:24:8f:fb:5e:62:5a:8b:bd:
f3:fa:30:98:57:96:ed:f6:a9:9f:c7:2b:14:a1:5f:
66:02:0f:98:51:a4:83:79:0f:8f:40:13:ca:3b:48:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:7A:DC:77:68:BE:03:8A:93:73:90:F6:1E:EB:E5:E3:A9:E1:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8828e1ea-bfee-34ff-820e-8fac26421e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c8:4e:a4:aa:7e:69:1c:e1:2d:74:7e:bd:53:d8:cc:8c:2a:
75:cc:a4:e2:54:3d:fd:a2:85:57:9a:d5:cd:8d:90:4b:4f:12:
a8:c8:52:f1:14:db:8f:21:fc:6b:75:db:6c:83:df:3f:f0:4b:
10:a3:e1:0c:e3:e4:f0:c5:2e:d2:63:46:e2:fe:a4:ad:66:df:
84:58:56:68:e9:65:08:37:d2:07:e0:1d:af:ae:02:dd:b9:71:
23:23:f5:38:e5:7a:d4:89:5b:57:16:6c:0e:fe:40:28:ca:0e:
05:27:5d:19:3a:ef:74:e8:f8:94:83:4d:0e:b9:26:6b:e5:95:
7e:18:dd:5d:e0:ef:f6:d0:5d:ca:e7:3c:7a:4f:fc:fc:83:4e:
99:18:d4:9e:6f:dd:e2:d8:2e:a7:be:60:fa:51:99:44:b3:ad:
b6:05:74:68:58:ab:f6:dd:df:be:82:3c:5b:30:3b:57:57:58:
6c:9c:aa:c3:d6:6f:a1:27:f3:68:5b:1f:b0:16:e9:dd:61:09:
cf:84:03:69:98:fe:e5:d3:4e:88:2e:85:6e:74:45:4c:cd:46:
8a:84:79:c3:7a:b7:75:65:a8:0a:83:28:c1:7d:e2:36:19:74:
5e:8a:76:96:8f:98:d1:16:5d:53:34:0a:22:a9:9d:90:11:a1:
35:81:d6:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZRR5Pzy8dS34QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
MWQyMjFjOTQtNGY3MC00ZmVjLTkzMjAtNWIyM2M0NWRmOTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfGaJczNtZvqeeEUuAvXbTHRmAM6JySZkcR4
JBHwXF5Ws3/Et1x6HC0Em97a7+U6z6mJkUNzdLgIzO427CG5NjfPvRni75ZGUPvY
JOQ9Iezo8wz8NpWlhn7G8CNxBeVXWy/Sq7dPl1tL0ZWqmLBTUrQh9chDeMS0nmef
2dx12GoNXHpKwWcwSlEOcp19wz3cbG1a8mtwJqPfeW57CHWtXM+thGd9fkrpnwrZ
vzEVNLUUO/oHufoJTjQbzxD57A9S2FoMjjsTNiDJz8O+2az6yd+KanSDZ1XPJI/7
XmJai73z+jCYV5bt9qmfxysUoV9mAg+YUaSDeQ+PQBPKO0inhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJg3etx3aL4DipNzkPYe6+XjqeGRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODgyOGUxZWEtYmZlZS0z
NGZmLTgyMGUtOGZhYzI2NDIxZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzITqSqfmkc4S10fr1T2MyMKnXMpOJUPf2ihVea1c2NkEtPEqjIUvEU
248h/Gt122yD3z/wSxCj4Qzj5PDFLtJjRuL+pK1m34RYVmjpZQg30gfgHa+uAt25
cSMj9TjletSJW1cWbA7+QCjKDgUnXRk673To+JSDTQ65JmvllX4Y3V3g7/bQXcrn
PHpP/PyDTpkY1J5v3eLYLqe+YPpRmUSzrbYFdGhYq/bd376CPFswO1dXWGycqsPW
b6En82hbH7AW6d1hCc+EA2mY/uXTToguhW50RUzNRoqEecN6t3VlqAqDKMF94jYZ
dF6KdpaPmNEWXVM0CiKpnZARoTWB1vY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:28 2025 by rpki-client