Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b52e249f-e634-3a74-9a1a-93ea85332363.roa
File: b52e249f-e634-3a74-9a1a-93ea85332363.roa (raw, json)
Hash identifier: YC1C8g7Hl/i+q2N3i5m64rj9PwxwrFLXhvURy82+ptI=
Subject key identifier: 27:20:9E:1F:C3:50:CB:70:3C:89:6B:BD:1E:EE:8C:3E:91:A2:0C:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858488DFF82024599048064DC9980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b52e249f-e634-3a74-9a1a-93ea85332363.roa
Signing time: Wed 15 Jan 2025 16:50:41 +0000
ROA not before: Wed 15 Jan 2025 16:50:41 +0000
ROA not after: Tue 15 Apr 2025 15:50:41 +0000
asID: 834
IP address blocks: 166.0.128.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ff:82:02:45:99:04:80:64:dc:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 15 16:50:41 2025 GMT
Not After : Apr 15 15:50:41 2025 GMT
Subject: CN=de7de953-830e-459e-94f3-de15d3b9a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f8:1f:a8:72:7d:09:b3:9b:a2:45:53:8e:12:
20:bc:2b:db:25:b6:e0:9e:fe:4f:bb:e9:d0:0a:c1:
85:c2:89:f9:77:42:3f:2d:9c:89:cd:58:26:33:0e:
56:cf:32:13:0d:02:35:a0:a7:7e:40:49:76:4a:0c:
51:af:d7:71:47:31:fe:60:15:c9:c0:c9:44:04:ff:
56:bd:ef:92:ac:2c:d3:1c:8a:9f:61:06:91:c8:19:
5f:ae:0e:35:50:ce:e8:d8:f7:2f:41:85:57:42:d4:
7f:a9:55:99:c0:aa:70:89:39:07:09:4f:b6:52:80:
fe:01:df:34:06:ca:bf:3d:9b:49:44:58:ae:f0:e1:
13:0a:e2:0c:d4:bc:9d:2d:94:76:fc:ba:44:fd:f8:
48:b1:84:a3:e4:d2:7d:e3:a8:ed:f7:20:fa:93:73:
8a:88:56:a7:b6:e7:19:1d:33:f0:83:76:d5:16:9f:
d8:11:dd:45:8f:08:a1:6c:25:6d:a7:1c:0b:cb:88:
89:ed:c5:2b:66:a1:1e:ee:5d:34:2c:60:bb:63:c9:
7a:41:a6:20:8c:bb:5a:5b:f0:10:a5:ad:4f:a2:2d:
c7:c5:32:db:78:2a:3c:bd:3e:0d:0b:8a:77:b1:d1:
52:4f:a6:49:31:cf:ef:52:75:d9:a6:46:22:62:6d:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:9E:1F:C3:50:CB:70:3C:89:6B:BD:1E:EE:8C:3E:91:A2:0C:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b52e249f-e634-3a74-9a1a-93ea85332363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:31:3f:7f:d2:9a:b9:18:0e:f2:a7:8c:30:d7:65:8b:02:af:
1f:46:ca:cb:3a:23:42:20:50:9c:d2:bb:c7:0f:9a:52:cd:df:
72:cb:d1:e2:9b:6f:2b:d9:5d:c3:d7:b2:f3:f7:a9:f3:82:ee:
de:77:84:95:5e:41:90:38:39:7b:50:54:fd:8a:a8:36:a0:07:
12:32:c9:a2:2a:3f:ac:9b:61:2b:af:b9:28:87:c2:81:37:da:
4d:5b:ee:8b:03:f9:d6:bb:69:f1:1c:76:9a:1e:4b:0a:75:ed:
02:8b:83:c7:b2:f1:3e:60:93:aa:fd:e9:3b:c8:cf:c2:a9:72:
dd:4e:70:01:e4:d7:b7:0d:ee:b6:bb:e3:47:de:87:d9:45:e7:
1f:cc:c7:44:7b:01:ad:6d:a7:42:e8:ee:a0:ae:6c:14:4c:cb:
ab:0b:d3:6c:2b:94:63:91:ca:d2:3e:3d:1d:3c:18:94:49:c4:
95:ab:69:9b:b2:6e:86:4e:a2:b3:c3:3f:99:12:73:63:5a:ee:
45:f7:66:88:4b:b0:c6:7b:a1:60:81:71:9b:40:fb:42:ba:ff:
6f:5c:7e:fa:51:61:05:a1:48:e2:60:06:18:82:38:73:c6:73:
f2:c7:06:f7:da:ec:40:b0:37:7f:72:2a:26:64:ae:7b:74:a4:
c3:16:ca:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiN/4ICRZkEgGTcmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDExNTE2NTA0MVoXDTI1MDQxNTE1NTA0MVowLzEtMCsGA1UEAxMk
ZGU3ZGU5NTMtODMwZS00NTllLTk0ZjMtZGUxNWQzYjlhNjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPgfqHJ9CbObokVTjhIgvCvbJbbgnv5Pu+nQ
CsGFwon5d0I/LZyJzVgmMw5WzzITDQI1oKd+QEl2SgxRr9dxRzH+YBXJwMlEBP9W
ve+SrCzTHIqfYQaRyBlfrg41UM7o2PcvQYVXQtR/qVWZwKpwiTkHCU+2UoD+Ad80
Bsq/PZtJRFiu8OETCuIM1LydLZR2/LpE/fhIsYSj5NJ946jt9yD6k3OKiFantucZ
HTPwg3bVFp/YEd1FjwihbCVtpxwLy4iJ7cUrZqEe7l00LGC7Y8l6QaYgjLtaW/AQ
pa1Poi3HxTLbeCo8vT4NC4p3sdFST6ZJMc/vUnXZpkYiYm0fOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcgnh/DUMtwPIlrvR7ujD6RogxlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjUyZTI0OWYtZTYzNC0z
YTc0LTlhMWEtOTNlYTg1MzMyMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHExP3/SmrkYDvKnjDDXZYsCrx9Gyss6I0IgUJzSu8cPmlLN33LL0eKb
byvZXcPXsvP3qfOC7t53hJVeQZA4OXtQVP2KqDagBxIyyaIqP6ybYSuvuSiHwoE3
2k1b7osD+da7afEcdpoeSwp17QKLg8ey8T5gk6r96TvIz8Kpct1OcAHk17cN7ra7
40feh9lF5x/Mx0R7Aa1tp0Lo7qCubBRMy6sL02wrlGORytI+PR08GJRJxJWraZuy
boZOorPDP5kSc2Na7kX3ZohLsMZ7oWCBcZtA+0K6/29cfvpRYQWhSOJgBhiCOHPG
c/LHBvfa7ECwN39yKiZkrnt0pMMWypU=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:43 2025 by rpki-client