Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb91bee2-ee5d-33dd-8adc-5a41e82868d9.roa
File: cb91bee2-ee5d-33dd-8adc-5a41e82868d9.roa (raw, json)
Hash identifier: mapraVH9NvdFfj4xSsjv7bAGfBPbT0UOURaAdQ+wGZc=
Subject key identifier: 7A:80:A0:AE:CD:0B:A9:C1:A6:A5:17:4B:C9:0D:9B:BA:6A:24:3E:52
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF833743D7E6647AACD720
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb91bee2-ee5d-33dd-8adc-5a41e82868d9.roa
Signing time: Wed 05 Feb 2025 20:03:23 +0000
ROA not before: Wed 05 Feb 2025 20:03:23 +0000
ROA not after: Tue 06 May 2025 19:03:23 +0000
asID: 11798
IP address blocks: 108.165.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:83:37:43:d7:e6:64:7a:ac:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:23 2025 GMT
Not After : May 6 19:03:23 2025 GMT
Subject: CN=19fca8f0-67ca-4092-9d45-9533e9c84793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:1f:11:5b:7e:07:98:07:97:d6:1b:8a:8a:
9c:dc:a1:7b:b4:14:12:69:e2:16:b9:99:a4:95:b5:
16:ac:21:64:cd:4b:ea:e8:b0:b0:22:c6:82:e2:8c:
ce:ff:db:59:b0:69:11:58:04:a8:69:60:aa:35:50:
0b:70:f1:2c:be:0d:e1:12:f6:55:6f:8a:c3:54:64:
76:f5:d7:f1:ec:9b:c8:63:b0:dd:6f:5a:a0:d2:e2:
8a:92:95:bf:f9:a9:86:ba:3f:d6:a1:6a:f2:b8:88:
8b:04:50:4f:26:48:a5:7c:51:68:bd:34:b3:ed:81:
4d:1f:1d:24:c2:99:4b:76:d0:f4:2d:15:58:4e:eb:
91:47:07:87:05:5c:6a:69:6e:30:4c:9b:b6:e7:fd:
cc:ef:c8:62:80:4e:03:b2:fc:29:45:c1:66:56:5e:
21:ca:72:77:22:4a:2d:94:e9:46:eb:6e:bb:fc:ee:
1d:84:ac:35:91:7a:4a:63:a1:a7:bb:c3:d7:a0:89:
c4:c1:32:66:03:33:66:01:77:f6:99:f6:0a:0b:8d:
8f:bc:b3:2f:ea:a9:3a:9c:36:34:3b:cb:3f:60:6c:
6c:7c:bd:6d:e8:b3:fb:b5:e0:1e:5c:6d:72:76:98:
d4:e6:46:da:52:6d:06:d3:e2:f0:0b:68:04:46:6f:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:A0:AE:CD:0B:A9:C1:A6:A5:17:4B:C9:0D:9B:BA:6A:24:3E:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb91bee2-ee5d-33dd-8adc-5a41e82868d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ad:1a:b5:85:04:e6:44:d9:f6:81:88:1b:06:bc:7c:d4:ea:
03:32:d1:19:27:60:78:74:6b:5f:f9:a0:23:f1:ca:07:cf:8f:
29:fe:3e:a2:f1:f5:19:54:59:09:b6:9d:b3:3b:2f:67:70:d6:
14:32:9e:d6:63:d0:a3:fb:2f:3a:df:43:28:5c:9a:00:0a:a2:
ce:5e:3b:05:22:7f:7a:a5:09:40:57:80:43:07:22:03:03:33:
8a:7e:ff:ba:af:60:95:f6:c2:a9:2c:c9:5a:2f:ad:4e:d5:2e:
14:08:37:b0:86:e8:05:48:7c:7e:09:9a:3e:37:e8:6d:51:a9:
85:36:1e:fb:61:c3:c1:f7:24:ef:c7:3f:11:a4:80:d3:b9:61:
6b:20:3f:51:7b:e1:f5:d4:a0:b5:ae:1d:05:62:17:7f:9f:0c:
8a:66:8b:e3:b4:c5:32:ac:1f:71:71:37:15:3b:9b:d5:7f:de:
00:e6:f5:50:b4:90:ec:66:af:c6:f5:80:ac:99:bc:71:4e:d6:
8b:ea:b9:40:fe:0b:c3:52:40:a6:8e:90:3d:4b:16:e0:ef:b4:
9d:82:53:e4:7c:3d:cd:9d:0c:8f:7b:47:47:bf:4c:b5:a3:cd:
ad:86:9b:97:d5:6a:44:29:21:33:6e:4a:d1:96:0a:b1:78:1b:
28:0c:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:43 2025 by rpki-client