Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa
File: b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa (raw, json)
Hash identifier: sXjS0694nxTLrS5cRsUUg6IWJb1A6SMF+3Nymnhf/aY=
Subject key identifier: B4:41:88:47:A4:FB:36:73:08:11:A2:14:FD:3E:5F:A5:AC:29:22:18
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D7A64E05346EA9DA12DB0D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 166.0.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 16:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4e:05:34:6e:a9:da:12:db:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=ea38c728-dd6a-4e93-85d0-ca5c5091f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:73:24:bf:69:9e:29:6c:74:c7:aa:b3:fa:
8d:84:16:7b:a5:d9:41:b5:1d:15:94:b2:19:a0:d3:
43:0a:ba:93:13:0c:ce:5b:38:ff:0e:25:45:b4:ef:
6a:10:e2:96:ce:85:9e:43:a1:03:7c:84:9f:aa:b4:
4f:4d:38:1a:e8:6c:e3:b1:73:23:8a:5c:c0:c2:de:
a2:ce:fa:2b:e4:17:f9:4b:28:71:d5:4f:15:26:e7:
9b:c2:ca:91:08:2b:d6:4c:11:7a:c7:0a:41:b2:56:
29:c9:4d:97:26:1a:58:76:6c:79:17:88:6d:36:da:
3f:ad:69:5f:7b:4f:e3:82:a1:16:e1:50:00:b5:fe:
42:6d:0f:f2:6a:cc:d9:97:e9:a8:73:1d:a6:61:15:
8c:da:ad:f0:8d:f6:f7:55:a9:43:c7:14:bb:4a:cd:
86:91:1a:a7:4c:99:06:5e:07:08:e8:2a:49:33:d7:
ca:a5:af:3e:96:45:d6:5e:17:94:dc:4f:7a:ac:c2:
f9:23:7b:c4:f3:73:82:97:93:8d:0f:66:28:0b:3c:
4c:97:93:2c:1c:e9:48:28:7d:87:12:f6:f3:31:d5:
27:70:23:31:7f:fb:b7:64:b7:dd:c2:42:00:85:50:
49:45:fb:1b:a3:63:2d:3c:4b:50:61:52:58:51:0c:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:88:47:A4:FB:36:73:08:11:A2:14:FD:3E:5F:A5:AC:29:22:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b542a38e-5c90-3ab9-84da-559a4f3a33e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c5:48:65:f6:ec:8c:98:52:dc:cf:7d:96:72:39:b5:3e:49:
04:19:ee:66:11:38:0e:48:44:2c:ea:52:ee:b1:dd:cd:de:a1:
24:12:0e:2d:f8:56:03:f5:f1:42:ec:20:4f:36:31:4b:61:6f:
7d:4d:d6:fd:cb:c3:0c:3a:ef:da:6a:ce:43:6e:d7:d1:77:6c:
d3:08:15:70:e6:a3:4d:4d:43:ad:e7:d2:2b:59:7d:d7:c7:ea:
36:c4:a8:7d:2b:1c:d7:01:30:0f:07:e2:24:ab:fe:43:2e:34:
9a:c4:c4:a7:7a:4f:e6:18:87:e3:87:58:e7:3e:8d:b7:69:2c:
83:21:8b:6e:21:e0:38:6a:1a:d3:b4:e7:8f:9a:97:3d:d1:e8:
da:3b:b1:3a:ca:68:0b:f1:a3:6b:2a:9b:bf:a0:f8:f1:75:3f:
12:23:1c:fe:0f:cf:8b:45:b9:6e:22:2b:52:09:98:de:5f:00:
cd:34:52:41:9c:7b:ee:2b:83:72:9d:cc:04:2b:b0:66:57:ac:
1c:8d:d5:02:f2:01:f0:22:e2:e9:d7:1c:c4:b9:4e:00:dc:c0:
69:fb:6d:4c:0f:3d:31:ea:e6:3d:9c:80:cd:d0:48:0f:bb:b9:
a5:90:bb:98:74:1a:9a:20:90:ad:34:5a:bc:75:9a:72:c3:f2:
25:95:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:09 2025 by rpki-client