Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e4f4f6a-5d74-3e10-ac07-6135daa8ef6c.roa
File: 8e4f4f6a-5d74-3e10-ac07-6135daa8ef6c.roa (raw, json)
Hash identifier: 2TK8F9qFFS6Ukdhmspko5DedER5zzPxzOitMmKExHhI=
Subject key identifier: A9:6B:91:14:39:08:14:34:1F:FE:97:9D:B6:1D:1C:3C:81:B1:B8:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858490A4D97FC99FCCC622238A2E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e4f4f6a-5d74-3e10-ac07-6135daa8ef6c.roa
Signing time: Sat 01 Mar 2025 05:28:15 +0000
ROA not before: Sat 01 Mar 2025 05:28:15 +0000
ROA not after: Fri 30 May 2025 04:28:15 +0000
asID: 834
IP address blocks: 166.0.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:4d:97:fc:99:fc:cc:62:22:38:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 05:28:15 2025 GMT
Not After : May 30 04:28:15 2025 GMT
Subject: CN=e09faea0-d9e3-48ff-9ead-bb2fd7da533c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:33:45:69:de:08:53:56:a8:c0:9a:cb:12:
53:2f:34:a0:dc:66:1a:b3:00:e0:b5:c5:37:e0:a5:
7c:01:66:de:53:1e:04:a4:cc:d8:e8:1a:88:8b:e3:
20:af:8b:69:b5:c8:f2:a7:a9:aa:0b:9c:9d:31:b7:
9d:02:9d:16:52:ed:a8:90:7d:57:42:e7:d2:6c:85:
ad:9e:ee:cf:40:f9:73:0c:8e:f8:b7:72:1c:a6:58:
ad:9e:51:a4:ad:fe:fc:15:6e:fd:c5:c0:f4:95:dc:
e0:43:91:a1:70:86:83:72:e7:51:64:c6:72:94:6c:
11:d8:e4:7b:c3:f7:fe:18:a5:af:7e:00:7b:8f:de:
03:fc:2d:84:57:8f:ab:b7:95:6f:1c:e9:99:fb:5f:
5b:9d:cf:b7:e7:76:a5:97:a3:17:bf:84:85:49:61:
7a:23:08:72:6a:06:b2:97:88:c1:cf:4f:dd:dc:8e:
cf:df:07:39:c9:29:33:a1:4c:7d:3d:5b:25:e6:5d:
a1:04:4a:6f:9e:26:f3:02:63:a7:09:76:a8:a9:9f:
72:42:b8:a4:37:cb:93:0b:5c:3a:1e:f2:cc:01:bf:
23:78:41:74:c4:6c:31:00:c9:10:07:9d:e8:5a:d9:
35:e4:fd:a7:93:2a:eb:ab:a9:be:a3:26:63:66:28:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:91:14:39:08:14:34:1F:FE:97:9D:B6:1D:1C:3C:81:B1:B8:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e4f4f6a-5d74-3e10-ac07-6135daa8ef6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d8:ec:15:5c:36:a1:b3:c8:4a:8b:e9:75:1f:27:01:fc:89:
36:4c:bf:de:78:52:8b:de:5d:8c:ec:bc:1e:76:ac:d9:55:5a:
db:81:ea:5f:b5:71:32:0d:0d:df:3c:68:ea:10:35:f0:7c:63:
4f:a9:98:d5:e9:1e:9d:74:fb:e9:f0:81:6a:07:28:4a:16:57:
ca:1d:e2:7f:7b:fe:bc:6b:47:b3:b7:89:3c:0a:fb:19:c8:f8:
20:b2:4b:0f:7a:0d:70:34:08:2c:1c:b5:fa:28:79:59:9a:21:
1e:76:c4:a6:5f:73:9f:29:9d:64:a5:82:f1:b0:ba:6d:45:38:
23:1d:ff:7c:4c:d3:93:c7:9c:8c:0e:aa:ed:2e:db:7b:30:02:
21:33:b7:a3:f5:ef:fc:f5:7a:29:eb:c5:19:7e:47:d2:db:f1:
ef:83:79:88:53:aa:d0:aa:10:83:01:6b:3a:39:0e:1a:f6:ac:
8f:df:2c:e0:77:6a:1d:cb:3c:f8:9c:0b:69:9d:67:34:cd:0d:
c9:31:82:68:20:48:8e:a7:39:65:62:01:f5:36:2d:5e:e8:57:
86:a4:be:61:d4:3b:40:b1:69:e1:01:70:55:79:7c:7f:99:ba:
e6:2b:da:8d:b1:c0:f0:f8:83:b0:d1:bb:e2:0e:87:3b:7a:c1:
00:4d:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:05:19 2025 by rpki-client