Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c9b3802-5dd2-3f4f-81f0-2a9e3f8f92e6.roa
File: 9c9b3802-5dd2-3f4f-81f0-2a9e3f8f92e6.roa (raw, json)
Hash identifier: t9n3DpqxN0AGDVlq9hx8HLwlh5Kx1CCM3ceN4yN7ucA=
Subject key identifier: FE:8E:54:CC:9A:DC:7D:C5:E9:25:B9:6F:82:E3:B0:E0:FA:F4:06:B4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584838855A45F8D2C1BE15549160
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c9b3802-5dd2-3f4f-81f0-2a9e3f8f92e6.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 3257
IP address blocks: 108.165.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 18:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5a:45:f8:d2:c1:be:15:54:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=6a1bf3aa-e403-437b-9441-8d1ab59e6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:03:4c:44:8d:42:85:2f:2d:f2:05:5b:7d:
89:a5:2f:44:0d:79:bb:fa:01:a2:7f:af:c7:a7:5e:
6a:d0:29:b3:69:73:80:b6:ed:79:4b:24:af:63:e4:
c5:a1:e9:8d:0b:c6:63:57:77:90:01:3a:21:b6:2f:
88:0f:3f:17:14:55:a9:36:b9:3b:28:88:14:56:78:
6c:4b:0a:5d:13:49:99:27:9d:40:46:01:f6:69:3d:
e9:1d:cf:39:df:82:5c:6b:4e:d3:73:76:d5:22:06:
d6:55:f6:db:90:fe:ca:60:65:ca:89:9c:d5:0f:e9:
c3:39:6f:fb:d5:2c:e4:8e:67:78:da:fc:b2:94:da:
ea:6e:eb:bf:16:3e:01:56:10:0c:a6:b7:0d:99:07:
48:3c:c4:2c:d9:79:33:2b:83:cf:fe:82:e7:3c:3c:
42:03:60:01:91:b0:3f:5f:4e:15:0b:b9:46:f1:6b:
14:79:a3:61:70:25:f6:26:82:a8:e2:65:45:9d:bb:
6b:bd:74:b6:d0:78:6b:e9:5c:48:9f:cc:52:a3:30:
91:0e:6a:7b:24:a8:27:20:77:8f:77:8c:7d:62:1a:
fb:3e:f7:47:77:a8:40:a2:d3:d6:a7:64:4e:f8:13:
c4:80:c7:c0:ec:f8:ce:7e:ac:03:68:da:46:21:d4:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:54:CC:9A:DC:7D:C5:E9:25:B9:6F:82:E3:B0:E0:FA:F4:06:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c9b3802-5dd2-3f4f-81f0-2a9e3f8f92e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:29:b3:9a:90:b2:f1:c8:33:4a:24:1b:5a:23:2c:f3:01:1e:
c2:b2:5d:22:cb:c7:ea:03:7a:7d:07:3e:7f:70:ab:be:9d:ce:
7b:4b:0a:73:2c:4d:ff:bf:c9:5f:b7:bb:40:17:91:0c:f3:e7:
b8:83:4c:9f:39:f0:83:61:c9:22:b8:39:1f:a8:f9:be:fe:bf:
c8:2c:e1:95:ee:bb:13:f6:3c:87:af:1c:0a:59:9e:b4:72:54:
99:bb:e3:22:3a:c7:bf:5b:43:13:b1:45:00:f1:34:18:a3:4e:
b0:d8:4a:21:44:1a:98:94:58:76:7b:2e:c2:ec:ef:7d:ee:87:
4b:33:19:a6:e3:4e:96:3f:1a:b4:97:77:ea:e1:4f:71:61:1f:
ef:7f:fa:dc:e3:22:8e:1c:2c:16:92:c2:1b:d3:33:02:b8:c4:
c5:59:2a:b0:4e:ed:c1:a3:6d:94:49:01:d9:39:f6:57:4c:fb:
73:31:58:a6:fc:cc:78:ef:02:e1:60:6c:a7:f5:8d:50:31:04:
1b:87:7b:2e:52:34:bb:52:e6:e5:40:67:c6:2b:d0:74:fb:12:
a4:4a:28:38:25:37:5c:2a:33:8f:3f:21:cd:d1:06:92:a1:9c:
1f:3f:74:b5:19:c3:6e:ac:a0:d7:e1:87:d7:ac:39:40:c5:9a:
fb:6e:93:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVpF+NLBvhVUkWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NmExYmYzYWEtZTQwMy00MzdiLTk0NDEtOGQxYWI1OWU2MjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWUDTESNQoUvLfIFW32JpS9EDXm7+gGif6/H
p15q0CmzaXOAtu15SySvY+TFoemNC8ZjV3eQATohti+IDz8XFFWpNrk7KIgUVnhs
SwpdE0mZJ51ARgH2aT3pHc8534Jca07Tc3bVIgbWVfbbkP7KYGXKiZzVD+nDOW/7
1Szkjmd42vyylNrqbuu/Fj4BVhAMprcNmQdIPMQs2XkzK4PP/oLnPDxCA2ABkbA/
X04VC7lG8WsUeaNhcCX2JoKo4mVFnbtrvXS20Hhr6VxIn8xSozCRDmp7JKgnIHeP
d4x9Yhr7PvdHd6hAotPWp2RO+BPEgMfA7PjOfqwDaNpGIdSVXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP6OVMya3H3F6SW5b4LjsOD69Aa0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWM5YjM4MDItNWRkMi0z
ZjRmLTgxZjAtMmE5ZTNmOGY5MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0ps5qQsvHIM0okG1ojLPMBHsKyXSLLx+oDen0HPn9wq76dzntLCnMs
Tf+/yV+3u0AXkQzz57iDTJ858INhySK4OR+o+b7+v8gs4ZXuuxP2PIevHApZnrRy
VJm74yI6x79bQxOxRQDxNBijTrDYSiFEGpiUWHZ7LsLs733uh0szGabjTpY/GrSX
d+rhT3FhH+9/+tzjIo4cLBaSwhvTMwK4xMVZKrBO7cGjbZRJAdk59ldM+3MxWKb8
zHjvAuFgbKf1jVAxBBuHey5SNLtS5uVAZ8Yr0HT7EqRKKDglN1wqM48/Ic3RBpKh
nB8/dLUZw26soNfhh9esOUDFmvtuk10=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:15 2025 by rpki-client