Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff99cd1c-64e1-31fb-8a87-478273d420c6.roa
File: ff99cd1c-64e1-31fb-8a87-478273d420c6.roa (raw, json)
Hash identifier: ueXHtWP7pty6E4mmHhZPs2Xs6l6pcdVRNmeKOyiDduY=
Subject key identifier: 21:65:07:29:B9:17:5D:9E:7C:23:36:83:CD:D5:FF:92:99:AA:31:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B06AB9F4BBF617C15C1C95A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff99cd1c-64e1-31fb-8a87-478273d420c6.roa
Signing time: Tue 28 Jan 2025 00:44:12 +0000
ROA not before: Tue 28 Jan 2025 00:44:12 +0000
ROA not after: Sun 27 Apr 2025 23:44:12 +0000
asID: 834
IP address blocks: 108.165.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 21:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:6a:b9:f4:bb:f6:17:c1:5c:1c:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 00:44:12 2025 GMT
Not After : Apr 27 23:44:12 2025 GMT
Subject: CN=c9e57d16-ef0e-44a5-9055-96d20020c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:bb:01:51:6d:e9:eb:f7:44:cf:c8:84:97:
6a:40:b1:7d:35:23:27:3b:cc:ad:5f:61:65:43:27:
8a:aa:ca:76:10:5f:0c:43:ef:87:1c:a0:d4:84:85:
ab:73:22:41:55:15:dd:a9:ac:97:54:d2:32:53:ad:
8c:81:48:a9:5f:ed:8e:a2:a1:bb:be:99:75:b3:84:
08:b5:78:27:5e:b2:9e:c1:a6:9d:a4:bd:18:76:c2:
13:ba:a0:d9:5a:6b:ec:78:69:7d:c1:1c:64:b1:60:
7d:29:1e:22:26:db:62:db:53:11:77:a4:85:04:a6:
d5:23:9e:ec:9b:af:61:41:54:7c:be:26:ad:cf:ad:
11:e8:c4:96:7d:82:5a:e9:6a:aa:33:38:1f:fd:1b:
47:3c:be:54:73:5e:b8:34:e5:51:b4:12:80:45:69:
8a:a7:77:5f:2b:17:ee:59:95:16:c4:18:1e:24:bd:
37:16:00:c4:02:30:58:7b:6b:00:15:3a:0e:a1:8e:
f4:45:59:19:47:0f:dc:6b:f8:89:ca:87:33:e6:ae:
c3:99:e3:48:82:5e:4c:2b:00:43:b3:15:02:c6:a2:
8f:cb:ef:ff:a7:8b:54:2b:ae:22:48:dc:d1:e2:b7:
e8:bd:86:cb:ad:a3:3c:18:d9:cf:5d:19:ed:46:e8:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:07:29:B9:17:5D:9E:7C:23:36:83:CD:D5:FF:92:99:AA:31:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff99cd1c-64e1-31fb-8a87-478273d420c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:96:ba:45:53:0e:fe:46:18:fa:58:d7:0a:8b:f6:8f:b6:7e:
65:a5:2b:35:23:d3:68:73:86:52:54:82:a2:93:64:4d:c5:b4:
ea:37:59:90:20:95:68:0d:de:19:2a:55:17:94:a0:99:5b:3a:
05:c1:72:2d:e6:50:4e:a7:17:2b:73:98:34:56:a7:35:81:94:
1f:f6:66:7e:ba:14:62:24:22:31:fe:b4:a8:c0:61:aa:93:d9:
c8:03:77:4a:7e:f2:ea:ee:d9:35:d8:62:19:3a:37:11:bd:85:
c7:22:81:74:f7:5a:c7:d9:a5:2f:c2:be:57:84:c8:67:f1:1c:
70:98:c1:80:ae:49:d3:d0:7d:06:7e:41:69:16:05:5a:39:54:
cc:89:3b:80:cc:db:16:82:4b:73:24:27:66:97:2b:fd:10:19:
ed:ad:31:c7:76:5f:6c:e5:18:5d:d0:9c:c6:83:99:f3:11:93:
98:8e:bc:aa:29:dc:77:d3:e5:97:90:de:aa:d7:7c:09:6f:4e:
a3:b5:93:3f:77:31:90:f7:d6:8f:d3:a7:a9:15:58:d8:1e:5d:
f3:29:b4:b5:ce:20:b2:40:8d:f3:fd:a9:b5:1c:b9:87:c4:92:
4d:eb:61:0c:25:d2:d5:6e:d1:19:77:e7:22:27:20:7c:ca:69:
73:d0:76:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwarn0u/YXwVwclaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyODAwNDQxMloXDTI1MDQyNzIzNDQxMlowLzEtMCsGA1UEAxMk
YzllNTdkMTYtZWYwZS00NGE1LTkwNTUtOTZkMjAwMjBjODJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Xu7AVFt6ev3RM/IhJdqQLF9NSMnO8ytX2Fl
QyeKqsp2EF8MQ++HHKDUhIWrcyJBVRXdqayXVNIyU62MgUipX+2OoqG7vpl1s4QI
tXgnXrKewaadpL0YdsITuqDZWmvseGl9wRxksWB9KR4iJtti21MRd6SFBKbVI57s
m69hQVR8viatz60R6MSWfYJa6WqqMzgf/RtHPL5Uc164NOVRtBKARWmKp3dfKxfu
WZUWxBgeJL03FgDEAjBYe2sAFToOoY70RVkZRw/ca/iJyocz5q7DmeNIgl5MKwBD
sxUCxqKPy+//p4tUK64iSNzR4rfovYbLraM8GNnPXRntRugyLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFlBym5F12efCM2g83V/5KZqjFBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmY5OWNkMWMtNjRlMS0z
MWZiLThhODctNDc4MjczZDQyMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCWukVTDv5GGPpY1wqL9o+2fmWlKzUj02hzhlJUgqKTZE3FtOo3WZAg
lWgN3hkqVReUoJlbOgXBci3mUE6nFytzmDRWpzWBlB/2Zn66FGIkIjH+tKjAYaqT
2cgDd0p+8uru2TXYYhk6NxG9hccigXT3WsfZpS/CvleEyGfxHHCYwYCuSdPQfQZ+
QWkWBVo5VMyJO4DM2xaCS3MkJ2aXK/0QGe2tMcd2X2zlGF3QnMaDmfMRk5iOvKop
3HfT5ZeQ3qrXfAlvTqO1kz93MZD31o/Tp6kVWNgeXfMptLXOILJAjfP9qbUcuYfE
kk3rYQwl0tVu0Rl35yInIHzKaXPQdoQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:14 2025 by rpki-client