Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3738f5a-0cca-3cde-9190-841636741e9c.roa
File: e3738f5a-0cca-3cde-9190-841636741e9c.roa (raw, json)
Hash identifier: OMWd0TUGIohgE1I8NOORVfTXv6cmz6VEy7itmHmhSIk=
Subject key identifier: 7B:C9:C9:68:AD:56:7F:4D:65:0B:FF:D3:0E:0B:0F:4B:CB:FC:16:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA42864DD4456027C3EF080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3738f5a-0cca-3cde-9190-841636741e9c.roa
Signing time: Mon 27 Jan 2025 18:04:06 +0000
ROA not before: Mon 27 Jan 2025 18:04:06 +0000
ROA not after: Sun 27 Apr 2025 17:04:06 +0000
asID: 11798
IP address blocks: 166.0.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:28:64:dd:44:56:02:7c:3e:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:06 2025 GMT
Not After : Apr 27 17:04:06 2025 GMT
Subject: CN=2b651d75-f359-4ac6-8e5e-c8bb066d2f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:ae:6d:51:db:c0:a1:29:a6:7b:5a:b6:2d:
55:f3:ea:3b:e4:7e:43:85:51:be:7b:38:b7:e8:2e:
4d:f8:e7:37:e6:96:a1:2c:c8:07:a7:93:2c:12:16:
7c:13:b8:9d:ac:eb:4f:d5:06:b7:c0:97:d3:17:2c:
2a:65:96:cb:f4:41:7e:ed:2d:4f:21:33:68:12:1f:
7f:21:ce:44:50:43:8e:ee:50:b9:90:dd:d0:0d:73:
1b:c1:a1:93:2f:e6:8f:72:86:83:1b:27:59:a3:eb:
e7:6e:4d:2b:7a:8e:e5:0d:a9:bc:be:74:41:43:23:
8f:d4:0a:97:ba:47:13:18:a2:39:8a:08:1a:7c:49:
ae:33:0f:c2:02:e0:f3:fa:64:6b:90:85:05:b1:19:
a6:17:fe:9d:d6:8d:01:2a:df:87:8a:71:31:f1:07:
20:70:a8:2c:23:8c:de:49:66:5d:fb:77:33:d0:cd:
fe:05:cb:32:3c:ec:35:96:db:c4:38:5a:21:74:3e:
1b:1c:18:62:1f:3c:90:a8:27:6f:ed:de:55:6d:83:
e8:f3:c1:fe:69:ce:42:8c:52:e6:36:d6:34:5d:c6:
dc:38:2a:37:6f:a9:60:d3:b1:0d:6a:a8:0e:0d:0f:
ee:35:41:4e:ae:58:24:7d:79:d9:50:d9:38:36:ca:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:C9:68:AD:56:7F:4D:65:0B:FF:D3:0E:0B:0F:4B:CB:FC:16:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3738f5a-0cca-3cde-9190-841636741e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6f:72:97:98:1f:a3:dd:0e:d4:9d:b8:d2:1d:6e:c1:b3:50:
eb:22:76:5d:09:0d:a8:c8:00:04:d8:02:70:57:fd:2b:da:e8:
fd:f2:6a:36:2f:5c:46:05:aa:e7:33:83:31:cf:9f:64:ac:c4:
32:21:23:65:e2:d2:69:17:6e:e9:bb:c2:6d:0e:84:5a:a0:99:
3e:d2:80:8e:39:4b:32:05:21:a1:d0:77:04:a5:1e:eb:d3:b6:
d7:9f:b0:f9:03:5f:6d:63:05:d7:05:79:52:60:de:37:36:e0:
7c:58:b7:78:f5:3d:70:ce:a8:e2:48:7b:a4:5c:16:26:8a:0c:
45:5c:25:54:d3:c5:c8:54:7f:93:b5:49:59:7d:b9:b3:50:06:
5a:56:1e:45:7a:e0:ec:ae:1f:6e:d7:d1:6d:7e:67:3d:3a:b1:
d2:89:4e:93:68:d0:6b:96:81:45:c6:2c:20:1d:78:03:db:c5:
cd:23:9c:cd:36:96:43:2f:b9:16:1f:7b:2a:14:75:ea:e4:04:
eb:3e:37:36:2f:c8:17:57:e4:fb:81:5a:bb:1b:27:71:90:eb:
0c:3a:4c:98:df:8b:73:a6:c7:f6:2c:3f:75:06:80:0f:db:e2:
48:b9:c6:42:41:d4:d4:be:88:b7:4c:5f:d0:e5:80:db:a0:c3:
64:f0:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:46 2025 by rpki-client