Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af17eef0-62a8-3f02-96bd-69fc39ce857c.roa
File: af17eef0-62a8-3f02-96bd-69fc39ce857c.roa (raw, json)
Hash identifier: 6XNCY6C6S/6ja+b8pkb9aMQHC0Lxq+qcLJNoak85QyU=
Subject key identifier: 2A:22:01:20:C4:5D:96:2D:92:5B:F8:2B:A0:EB:5E:FB:40:BE:D0:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841ADF3728629CD113FF5D8C300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af17eef0-62a8-3f02-96bd-69fc39ce857c.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 29 Jul 2025 04:00:00 +0000
asID: 834
IP address blocks: 166.0.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 18:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ad:f3:72:86:29:cd:11:3f:f5:d8:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 29 04:00:00 2025 GMT
Subject: CN=8b85d3e9-9560-4231-976c-13052584230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:73:90:4c:c0:a3:c5:7a:cf:3f:c3:6f:80:
e7:50:42:62:41:da:63:17:03:e1:80:f3:e4:29:47:
d8:d8:14:ad:45:5b:1b:a0:46:25:45:66:28:80:61:
60:12:60:f4:98:17:ed:cd:f6:f1:61:32:09:0b:bc:
80:18:9b:da:e6:68:9b:36:78:69:6c:59:0e:a7:54:
f4:d2:0e:83:e5:48:7b:ee:3b:64:3f:27:c0:db:ba:
44:31:08:d8:9d:88:77:0a:52:82:3e:eb:07:f9:c5:
b6:5d:d3:56:fd:7b:b1:4a:b3:6c:5a:24:79:02:26:
76:f7:05:ba:eb:87:8a:28:b1:bc:13:69:4f:bc:c1:
02:26:99:24:24:b5:13:65:ed:e1:08:56:37:84:6e:
08:00:b8:ae:1c:a6:1f:aa:be:37:b3:92:ba:6c:65:
98:f1:30:ba:1d:2b:e6:b1:83:89:a2:17:70:7b:d0:
b4:14:c9:1e:47:92:d8:d9:2c:f0:7d:c1:c6:fb:7a:
c1:50:f2:24:dd:96:43:36:0e:fa:13:ac:32:a5:1a:
f2:2a:cd:b6:fd:76:d9:ab:97:3b:db:d0:47:f7:14:
aa:13:09:25:f5:0a:b6:86:8b:ea:56:5a:da:34:27:
03:75:16:88:f3:48:bd:be:80:5f:f2:a6:c1:84:30:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:01:20:C4:5D:96:2D:92:5B:F8:2B:A0:EB:5E:FB:40:BE:D0:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af17eef0-62a8-3f02-96bd-69fc39ce857c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:37:1b:d8:b1:4a:95:0d:ea:76:eb:ea:03:45:33:f6:2e:ef:
3b:6d:c6:6b:51:d5:40:44:55:ed:68:d4:6a:c9:6b:01:ba:e4:
bf:09:a3:5c:f3:53:82:c3:73:93:c0:8e:e6:bd:f9:22:f8:56:
5c:c2:d2:55:9b:e2:06:72:d9:67:1d:85:8f:5d:05:ee:fc:ef:
ac:bf:f7:b6:01:74:fb:0c:7f:34:2a:98:b1:a8:b3:ac:95:20:
b5:43:51:88:ee:1b:db:3d:95:06:e7:0d:50:54:fa:9a:57:b4:
d0:7a:42:ed:b0:52:37:b4:4b:d4:b5:bd:a3:f0:1d:c6:89:37:
a0:13:e7:ec:59:54:0f:06:a7:ec:67:e2:a0:95:92:e4:0f:fa:
b0:ee:8f:82:c8:3f:e8:67:1f:a1:c6:33:cf:bf:18:a4:e6:ab:
10:78:54:05:51:85:8f:38:55:e6:4b:7c:bc:ac:f6:8b:42:89:
96:ad:5b:a5:ba:48:be:00:0e:31:65:4f:06:f9:c1:97:82:34:
de:c1:33:ec:63:88:dd:93:dd:5d:fd:db:85:80:4a:c5:23:d9:
dd:05:d7:b6:17:46:a5:9c:36:6a:fb:a2:15:07:7f:b8:f5:d1:
7a:bb:af:d9:c6:3b:5e:6d:ec:0f:4a:70:a8:47:cf:2f:72:d3:
08:1a:49:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGt83KGKc0RP/XYwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
OGI4NWQzZTktOTU2MC00MjMxLTk3NmMtMTMwNTI1ODQyMzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG1zkEzAo8V6zz/Db4DnUEJiQdpjFwPhgPPk
KUfY2BStRVsboEYlRWYogGFgEmD0mBftzfbxYTIJC7yAGJva5mibNnhpbFkOp1T0
0g6D5Uh77jtkPyfA27pEMQjYnYh3ClKCPusH+cW2XdNW/XuxSrNsWiR5AiZ29wW6
64eKKLG8E2lPvMECJpkkJLUTZe3hCFY3hG4IALiuHKYfqr43s5K6bGWY8TC6HSvm
sYOJohdwe9C0FMkeR5LY2SzwfcHG+3rBUPIk3ZZDNg76E6wypRryKs22/XbZq5c7
29BH9xSqEwkl9Qq2hovqVlraNCcDdRaI80i9voBf8qbBhDBKowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCoiASDEXZYtklv4K6DrXvtAvtCIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWYxN2VlZjAtNjJhOC0z
ZjAyLTk2YmQtNjlmYzM5Y2U4NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHA3G9ixSpUN6nbr6gNFM/Yu7zttxmtR1UBEVe1o1GrJawG65L8Jo1zz
U4LDc5PAjua9+SL4VlzC0lWb4gZy2WcdhY9dBe7876y/97YBdPsMfzQqmLGos6yV
ILVDUYjuG9s9lQbnDVBU+ppXtNB6Qu2wUje0S9S1vaPwHcaJN6AT5+xZVA8Gp+xn
4qCVkuQP+rDuj4LIP+hnH6HGM8+/GKTmqxB4VAVRhY84VeZLfLys9otCiZatW6W6
SL4ADjFlTwb5wZeCNN7BM+xjiN2T3V3924WASsUj2d0F17YXRqWcNmr7ohUHf7j1
0Xq7r9nGO15t7A9KcKhHzy9y0wgaSdI=
-----END CERTIFICATE-----
Generated at Sat Mar 22 00:41:59 2025 by rpki-client