Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e789850a-24b0-3f9f-a35c-3a56cfe03ee1.roa
File: e789850a-24b0-3f9f-a35c-3a56cfe03ee1.roa (raw, json)
Hash identifier: owQyOepazzvHcdP4SQdbvrj38c/50M1Pt/23ve12/VQ=
Subject key identifier: 27:8E:C0:A7:F8:ED:54:53:44:16:67:CC:0E:C3:7A:70:64:07:7F:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584808263EAD04DBE24287509340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e789850a-24b0-3f9f-a35c-3a56cfe03ee1.roa
Signing time: Thu 28 Nov 2024 18:10:25 +0000
ROA not before: Thu 28 Nov 2024 18:10:25 +0000
ROA not after: Wed 26 Feb 2025 18:10:25 +0000
asID: 21859
IP address blocks: 166.0.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 00:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:08:26:3e:ad:04:db:e2:42:87:50:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 28 18:10:25 2024 GMT
Not After : Feb 26 18:10:25 2025 GMT
Subject: CN=cb4d8164-780c-4945-b80b-b9f5d569d635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:b1:c2:b0:24:95:3a:e5:21:f5:81:e0:d5:
fb:88:00:19:ba:eb:f0:37:5c:fe:4a:7b:b9:e2:2d:
e1:93:dc:ed:2c:b9:92:a9:c4:e1:71:0d:35:32:37:
4c:e9:17:db:8b:3f:b0:e5:9b:68:4e:63:81:39:b9:
9d:63:1c:0c:b4:7f:f8:1e:f0:e8:32:38:8a:79:fa:
ac:f3:fe:e1:29:69:41:4d:8c:2e:e2:bc:f6:39:b2:
c5:57:ad:e2:4a:05:1f:1b:e3:a8:4e:b9:82:0d:14:
82:f4:62:e7:29:64:7a:78:7c:ed:4a:14:53:f4:55:
07:3e:56:71:b9:dc:f5:14:89:8f:94:f6:53:fe:7f:
61:6f:4e:dc:e3:ec:af:d3:38:a2:3d:37:56:89:54:
19:a8:89:46:92:b2:4a:55:90:d1:ef:3a:21:0a:93:
b6:0f:f4:4f:57:b3:4f:54:03:4a:96:86:66:5e:d7:
41:24:1c:af:f9:8a:18:00:b5:e8:95:6a:e0:18:f5:
b1:91:39:80:fe:72:73:08:58:6b:1c:e9:39:a8:d2:
7f:d9:e2:97:b1:62:b5:ca:8e:33:5b:99:53:72:34:
10:9e:fa:c0:f3:7b:bf:44:c9:3c:8e:27:dd:22:06:
ba:ec:fb:73:13:17:ba:38:43:08:9e:1f:57:07:3a:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:C0:A7:F8:ED:54:53:44:16:67:CC:0E:C3:7A:70:64:07:7F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e789850a-24b0-3f9f-a35c-3a56cfe03ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a9:ec:62:f0:e2:5d:08:38:b0:00:ec:43:d4:a3:66:6c:95:
08:50:65:3b:2e:67:d0:37:d2:cd:2f:18:7c:43:51:c7:e0:a9:
3d:47:ee:eb:f3:45:97:63:72:b4:76:ce:24:17:66:e0:10:9f:
40:4d:da:e4:d6:e0:ff:91:d3:3a:49:58:15:da:f1:9d:be:b6:
73:72:88:24:c5:f1:7b:55:47:35:5f:a8:f9:70:76:4c:89:e3:
3e:5d:37:a0:23:b3:46:03:1f:70:1c:81:9e:06:d2:69:30:06:
00:a5:0f:12:b6:15:da:ca:f0:30:7a:4c:43:37:63:5d:4e:d9:
47:7c:e0:0f:13:6a:86:f5:c4:8a:df:6b:d2:47:91:69:e0:cc:
37:f2:c0:1f:3d:5c:bf:46:13:f7:81:b8:d3:fc:37:96:e4:d0:
9e:86:63:ec:9e:6b:17:85:0f:8e:be:91:5c:55:4d:01:48:80:
39:b1:7d:96:a0:35:76:3a:4e:f3:60:41:2b:42:b1:e8:da:a4:
97:3c:2d:dc:95:86:c6:d0:b7:cf:08:15:41:9d:67:c5:0b:79:
49:7f:a9:31:c6:01:b8:6e:c5:a9:24:5a:ec:f0:49:f2:e3:46:
f6:18:fa:f6:2c:f4:a8:7f:f3:39:b1:89:d8:54:90:f6:6a:52:
a4:fc:ed:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgIJj6tBNviQodQk0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEyODE4MTAyNVoXDTI1MDIyNjE4MTAyNVowLzEtMCsGA1UEAxMk
Y2I0ZDgxNjQtNzgwYy00OTQ1LWI4MGItYjlmNWQ1NjlkNjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4ixwrAklTrlIfWB4NX7iAAZuuvwN1z+Snu5
4i3hk9ztLLmSqcThcQ01MjdM6Rfbiz+w5ZtoTmOBObmdYxwMtH/4HvDoMjiKefqs
8/7hKWlBTYwu4rz2ObLFV63iSgUfG+OoTrmCDRSC9GLnKWR6eHztShRT9FUHPlZx
udz1FImPlPZT/n9hb07c4+yv0ziiPTdWiVQZqIlGkrJKVZDR7zohCpO2D/RPV7NP
VANKloZmXtdBJByv+YoYALXolWrgGPWxkTmA/nJzCFhrHOk5qNJ/2eKXsWK1yo4z
W5lTcjQQnvrA83u/RMk8jifdIga67PtzExe6OEMInh9XBzrAkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCeOwKf47VRTRBZnzA7DenBkB3/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTc4OTg1MGEtMjRiMC0z
ZjlmLWEzNWMtM2E1NmNmZTAzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCp7GLw4l0IOLAA7EPUo2ZslQhQZTsuZ9A30s0vGHxDUcfgqT1H7uvz
RZdjcrR2ziQXZuAQn0BN2uTW4P+R0zpJWBXa8Z2+tnNyiCTF8XtVRzVfqPlwdkyJ
4z5dN6Ajs0YDH3AcgZ4G0mkwBgClDxK2FdrK8DB6TEM3Y11O2Ud84A8Taob1xIrf
a9JHkWngzDfywB89XL9GE/eBuNP8N5bk0J6GY+yeaxeFD46+kVxVTQFIgDmxfZag
NXY6TvNgQStCsejapJc8LdyVhsbQt88IFUGdZ8ULeUl/qTHGAbhuxakkWuzwSfLj
RvYY+vYs9Kh/8zmxidhUkPZqUqT87YQ=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:12 2025 by rpki-client