Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b89c7bb3-fd6e-3f04-a881-2c44e6018f07.roa
File: b89c7bb3-fd6e-3f04-a881-2c44e6018f07.roa (raw, json)
Hash identifier: rjaz6mslKao4QRM8HIPK1J5QCk7uEWzP3KfapOfnq+Q=
Subject key identifier: 0A:FD:B1:32:34:F4:44:9D:9F:23:E6:EA:40:B5:E2:BB:09:B2:F0:80
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849ABB4951F277A8BBD92F58B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b89c7bb3-fd6e-3f04-a881-2c44e6018f07.roa
Signing time: Mon 28 Apr 2025 01:00:48 +0000
ROA not before: Mon 28 Apr 2025 01:00:48 +0000
ROA not after: Sun 27 Jul 2025 01:00:48 +0000
asID: 401152
IP address blocks: 108.165.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 16:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ab:b4:95:1f:27:7a:8b:bd:92:f5:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 28 01:00:48 2025 GMT
Not After : Jul 27 01:00:48 2025 GMT
Subject: CN=a6076330-6077-43b8-8c9f-0afa0c458cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:46:46:d0:64:df:d5:f5:a3:b7:85:cd:cc:
67:2a:3d:11:fe:54:6a:6c:de:92:ed:92:9a:fc:cb:
b4:32:68:b5:13:53:d3:a4:60:53:70:32:e1:a4:be:
5a:9e:8d:b9:50:1b:77:e0:0b:3b:de:c5:75:1c:34:
1d:8a:bf:86:b6:12:ee:b7:73:f1:30:c0:d0:9b:97:
1b:57:cb:1e:ae:50:01:13:2e:3a:a7:1d:b1:d6:89:
58:1a:5b:a1:01:1a:d4:05:07:21:b7:ba:33:16:d9:
ef:c5:6a:a2:c5:3d:4f:00:68:4b:9b:e7:68:37:22:
d0:f8:7c:68:47:c1:18:54:36:ef:0e:62:32:c7:6b:
74:5c:f9:ed:d4:87:d6:53:a8:ca:12:77:61:49:e5:
47:59:60:41:6d:10:9d:07:ce:ce:d6:7d:b7:05:76:
4b:74:62:fe:ef:69:0b:2b:db:d9:0a:de:c0:76:82:
80:e3:9a:8a:e7:f7:48:ca:32:63:f5:64:f6:d8:b3:
5e:09:ae:71:28:ac:f1:a7:c7:48:d8:5e:20:03:90:
fe:e6:c0:24:5e:4e:a0:6f:06:e7:ef:19:5e:c6:82:
7a:5f:11:6c:16:94:bd:27:6e:a6:9e:ae:f0:73:7f:
3a:4a:30:9a:bf:bc:80:e0:81:c3:7d:4c:04:55:85:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:B1:32:34:F4:44:9D:9F:23:E6:EA:40:B5:E2:BB:09:B2:F0:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b89c7bb3-fd6e-3f04-a881-2c44e6018f07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3b:3f:73:bc:c5:0a:4a:d3:ee:f8:f5:71:59:c7:8a:ff:e5:
62:c6:a7:74:05:f4:d4:6c:eb:ea:75:8a:a8:f4:f6:d6:af:9a:
dd:0f:28:ef:39:89:54:e9:65:4d:a2:1f:60:2b:ec:d3:7c:ab:
53:00:19:f3:a5:4d:68:b3:56:e6:ee:59:13:84:b3:d6:08:3e:
11:c8:b0:99:5c:40:10:2c:8e:47:8a:1c:55:8c:5a:41:25:11:
ca:6d:2e:01:55:a1:78:29:15:24:eb:de:72:49:94:26:ad:4c:
a6:d6:a3:2f:5c:aa:15:65:5b:f8:37:7c:d2:b0:a5:1e:c6:5e:
2e:89:6f:cd:50:86:20:a8:02:51:e4:09:f4:e1:34:8a:03:fd:
bf:32:1a:09:7f:b4:c1:7a:53:2e:4d:95:04:08:cc:d3:9c:fc:
3b:cc:3f:82:b6:b8:b7:73:ad:97:d4:9d:ce:05:5f:07:31:a3:
b4:b4:df:b4:35:5a:52:0d:d9:53:34:40:27:88:36:b4:84:75:
5e:b0:41:1e:a1:6f:f1:25:74:31:1e:f9:49:9b:25:56:c1:26:
a5:24:8b:f0:fc:e8:2c:27:37:e1:99:9e:29:53:06:e7:2f:05:
ad:6a:b6:3a:67:8f:82:d9:5b:63:9e:a1:f4:35:3c:9b:6f:3e:
79:af:30:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJUfJ3qLvZL1iwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
YTYwNzYzMzAtNjA3Ny00M2I4LThjOWYtMGFmYTBjNDU4Y2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrdGRtBk39X1o7eFzcxnKj0R/lRqbN6S7ZKa
/Mu0Mmi1E1PTpGBTcDLhpL5ano25UBt34As73sV1HDQdir+GthLut3PxMMDQm5cb
V8serlABEy46px2x1olYGluhARrUBQcht7ozFtnvxWqixT1PAGhLm+doNyLQ+Hxo
R8EYVDbvDmIyx2t0XPnt1IfWU6jKEndhSeVHWWBBbRCdB87O1n23BXZLdGL+72kL
K9vZCt7AdoKA45qK5/dIyjJj9WT22LNeCa5xKKzxp8dI2F4gA5D+5sAkXk6gbwbn
7xlexoJ6XxFsFpS9J26mnq7wc386SjCav7yA4IHDfUwEVYVXtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAr9sTI09ESdnyPm6kC14rsJsvCAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjg5YzdiYjMtZmQ2ZS0z
ZjA0LWE4ODEtMmM0NGU2MDE4ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ7P3O8xQpK0+749XFZx4r/5WLGp3QF9NRs6+p1iqj09tavmt0PKO85
iVTpZU2iH2Ar7NN8q1MAGfOlTWizVubuWROEs9YIPhHIsJlcQBAsjkeKHFWMWkEl
EcptLgFVoXgpFSTr3nJJlCatTKbWoy9cqhVlW/g3fNKwpR7GXi6Jb81QhiCoAlHk
CfThNIoD/b8yGgl/tMF6Uy5NlQQIzNOc/DvMP4K2uLdzrZfUnc4FXwcxo7S037Q1
WlIN2VM0QCeINrSEdV6wQR6hb/EldDEe+UmbJVbBJqUki/D86CwnN+GZnilTBucv
Ba1qtjpnj4LZW2OeofQ1PJtvPnmvMN8=
-----END CERTIFICATE-----
Generated at Fri May 9 04:56:14 2025 by rpki-client