Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89f39e48-7cdc-333b-bf9c-c3868fd6f4bd.roa
File: 89f39e48-7cdc-333b-bf9c-c3868fd6f4bd.roa (raw, json)
Hash identifier: 2UuzRd6yO00fc50/KE7LUBGcKCAGbCsDPXV9Sn60D+A=
Subject key identifier: 76:AD:55:21:20:C2:9E:6A:B7:D1:A6:DF:A3:EE:53:E0:89:23:9B:25
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DF5464EB62E5E72B8BC77C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89f39e48-7cdc-333b-bf9c-c3868fd6f4bd.roa
Signing time: Thu 13 Feb 2025 20:02:12 +0000
ROA not before: Thu 13 Feb 2025 20:02:12 +0000
ROA not after: Wed 14 May 2025 19:02:12 +0000
asID: 401152
IP address blocks: 166.0.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 16:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:54:64:eb:62:e5:e7:2b:8b:c7:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 13 20:02:12 2025 GMT
Not After : May 14 19:02:12 2025 GMT
Subject: CN=791a8b87-1f99-43c7-ba9b-666a5d6baf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:ee:00:58:6d:05:fb:65:1b:ad:fc:58:ee:
73:6f:c0:8b:ae:37:98:b0:2e:ad:28:f9:94:fa:ab:
1d:1d:6a:3d:78:65:3b:d5:15:42:70:e9:88:79:26:
ac:d7:c9:e3:10:c6:b9:58:ee:7a:32:06:6b:ab:4e:
ef:d0:6f:04:a9:f8:1d:1e:74:a7:0e:2b:ae:53:23:
95:24:11:89:66:7c:99:6c:f6:e8:2e:7d:a1:10:d4:
73:3e:51:83:9a:5e:99:fe:36:41:de:ea:1c:a2:f4:
60:b3:b6:1d:ff:33:5d:88:69:d2:ba:b6:34:f6:e3:
16:a6:da:7f:f0:1c:c7:22:92:0a:2f:3e:a1:84:84:
94:5a:19:e1:89:f2:34:4d:2f:aa:c6:10:ca:e6:e1:
23:db:9a:34:9b:ce:d5:4d:b9:1d:d6:59:9a:c1:b3:
75:13:ae:2a:a2:74:3f:16:e6:88:03:72:c3:63:26:
3c:79:45:35:56:b2:48:21:e2:c2:0c:4f:9b:56:26:
c0:94:4e:ae:61:06:18:fb:8a:ab:18:3f:0c:ec:51:
3d:45:5f:77:a5:89:fe:7f:18:ac:1a:0d:a0:81:76:
1f:69:38:42:21:50:4c:21:7c:95:ba:6a:a3:04:b7:
3c:56:d5:4f:de:b7:9d:b5:09:00:81:e4:dd:97:09:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AD:55:21:20:C2:9E:6A:B7:D1:A6:DF:A3:EE:53:E0:89:23:9B:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89f39e48-7cdc-333b-bf9c-c3868fd6f4bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:c8:f6:4d:8b:6c:af:13:c8:47:5b:a5:54:a6:5c:d8:22:88:
ed:a9:68:76:5b:7a:2c:42:c2:6e:78:35:a0:6c:ce:1c:07:83:
47:69:60:c0:08:85:76:9e:7b:24:c8:a5:4e:6c:42:71:ad:08:
d0:8a:31:f7:bb:fd:65:f3:47:16:80:6f:1b:67:98:26:2c:15:
e1:31:17:98:e5:cc:8b:6a:3e:63:cb:1f:a1:f9:20:b2:c6:f7:
9e:97:90:49:09:08:30:8f:9a:c9:7f:06:cb:7e:37:ae:04:42:
02:87:11:83:16:bb:73:c4:cf:59:a8:5f:36:e6:5e:b9:44:39:
eb:4f:ab:eb:2f:85:14:3c:f7:27:21:a0:27:bb:17:bf:fb:91:
16:36:d2:2e:44:fb:10:29:de:8c:e9:85:d6:1c:34:a4:a7:c0:
be:9f:a7:a5:2a:d4:d2:ef:1f:4d:0a:e1:94:c7:d5:99:35:a7:
53:78:4c:42:60:87:e0:5c:24:57:97:31:a8:6e:ec:c0:97:75:
f4:29:0d:2f:37:81:47:a4:30:77:dc:f6:43:fb:d1:f9:76:9f:
20:2b:c9:73:58:14:58:00:80:96:79:56:62:fd:eb:60:fd:cf:
13:76:5e:c5:52:f1:9a:3b:7e:59:78:1a:37:e2:ba:8d:ec:95:
0e:8b:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:00:28 2025 by rpki-client