Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c32ea449-f679-3beb-b596-2c1134b49488.roa
File: c32ea449-f679-3beb-b596-2c1134b49488.roa (raw, json)
Hash identifier: 2Oa4xjiBeMk56gZwypjJcNPWuRnpi9Yo1Hox7mKbAKk=
Subject key identifier: 91:D5:A0:FB:DC:8A:E6:F3:38:06:CC:F5:22:DC:A6:B7:C6:15:73:F0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DF546532672229558CEFA360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c32ea449-f679-3beb-b596-2c1134b49488.roa
Signing time: Thu 13 Feb 2025 20:02:12 +0000
ROA not before: Thu 13 Feb 2025 20:02:12 +0000
ROA not after: Wed 14 May 2025 19:02:12 +0000
asID: 401152
IP address blocks: 108.165.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 16:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:54:65:32:67:22:29:55:8c:ef:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 13 20:02:12 2025 GMT
Not After : May 14 19:02:12 2025 GMT
Subject: CN=f5f36ded-4d76-4df6-8a02-3ba949822c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:4b:e1:7c:93:78:04:7f:06:df:d8:3a:44:
83:d8:78:a7:fd:f3:67:1a:f6:f5:06:f5:3d:fb:b4:
b0:54:18:e0:50:e8:4d:e1:37:3d:22:05:61:2d:ee:
64:22:5c:70:f5:eb:cc:78:04:a6:c0:95:33:ad:88:
c3:b2:24:9e:d1:b6:df:83:ab:93:bf:ce:22:5f:d6:
a1:99:0e:2b:99:f4:bb:9d:51:c7:bf:3a:d6:43:15:
6a:9a:2e:eb:cc:d0:ea:9f:22:45:11:2a:25:c7:76:
93:f1:0e:4e:22:1a:e3:63:91:17:b7:cd:f9:26:77:
67:62:26:e5:b9:7c:bf:18:bc:bd:58:a2:5c:45:c0:
9e:16:bd:4a:6c:f5:aa:78:90:25:a9:fd:a2:06:a6:
68:78:2f:52:84:1c:83:0c:aa:34:cd:36:d4:50:15:
85:ea:79:48:14:a0:f2:0e:fc:63:f6:60:b3:4a:fe:
30:da:30:06:b3:df:c8:4e:14:de:66:75:f7:c8:6c:
4b:92:ef:b4:15:3b:a0:13:85:61:6a:09:e2:e3:31:
8d:dc:d7:f1:9c:19:49:03:14:6d:a9:2c:d1:48:0a:
44:5d:d2:01:fb:09:48:dc:45:7a:60:7f:04:f3:bd:
94:73:b9:7a:d0:c8:0c:81:fd:e3:3b:5f:af:75:5a:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:A0:FB:DC:8A:E6:F3:38:06:CC:F5:22:DC:A6:B7:C6:15:73:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c32ea449-f679-3beb-b596-2c1134b49488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a5:de:ec:3a:97:43:28:d6:32:96:48:dc:0b:90:98:41:39:
b6:8a:cc:3e:cc:0f:ec:33:92:d6:63:68:d9:e3:21:6b:6b:66:
70:c3:5a:bc:c7:de:5b:db:8a:15:98:8a:e5:b5:fa:82:25:d5:
77:47:03:f8:50:f6:47:d9:b4:bd:ed:11:0c:7d:c1:a7:47:cd:
08:fa:9d:26:bf:58:db:4a:60:a9:39:34:0f:5a:aa:29:54:ab:
45:de:5a:37:a5:50:8d:15:3f:22:2b:c7:cd:8f:71:23:22:55:
37:a5:f6:b5:76:c7:87:a4:2c:32:20:55:b2:1d:77:98:48:e3:
3e:d3:fc:5d:e0:c7:62:54:59:6b:68:af:97:ba:bd:10:b6:ca:
19:a4:44:6b:92:ab:fb:4c:ca:c3:16:cf:20:70:62:10:c2:d9:
2a:45:d1:cf:83:d7:27:03:08:7d:0e:27:75:fa:78:ce:b4:26:
a9:9d:44:b0:5b:05:fa:4f:2d:79:c6:47:87:b8:6d:e6:a8:c2:
71:3b:4a:87:85:31:7b:26:91:18:5f:10:c5:08:9b:0d:8d:d0:
9a:1e:bf:62:56:e7:45:65:b8:f0:42:8c:89:32:1a:fc:2a:b9:
da:6a:1a:26:18:71:bb:8f:af:7c:da:bb:e9:08:5e:64:be:86:
15:ff:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:45 2025 by rpki-client