Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa
File: 1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa (raw, json)
Hash identifier: 6Sbjh1a7RSuq0Co6XMI4qXl/9ObHdnqeQsWisjJ6098=
Subject key identifier: 43:1A:00:C7:EC:82:40:EE:37:E0:E6:82:0A:1E:33:A1:6C:C5:C3:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849B8D23493833BB3561CF40380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa
Signing time: Fri 02 May 2025 17:46:06 +0000
ROA not before: Fri 02 May 2025 17:46:06 +0000
ROA not after: Thu 31 Jul 2025 17:46:06 +0000
asID: 401152
IP address blocks: 50.114.66.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b8:d2:34:93:83:3b:b3:56:1c:f4:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 2 17:46:06 2025 GMT
Not After : Jul 31 17:46:06 2025 GMT
Subject: CN=b86492a7-e919-4b2d-8763-135ca9e52711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:57:27:58:c3:42:c4:58:ea:3d:5e:10:fc:
bb:fe:89:73:cc:08:6d:ed:61:22:21:0a:63:21:cc:
26:63:e3:98:ec:5e:dc:09:23:2f:f8:94:de:a7:e1:
fa:63:5b:38:00:3c:77:0d:ee:64:ba:c1:05:34:83:
d4:41:21:fd:c0:23:89:21:05:00:7e:cf:e9:70:10:
3a:0a:11:db:c0:f8:9f:ab:5e:ba:9d:61:13:f8:d3:
68:94:1f:96:8d:1b:79:c5:24:ab:7a:30:3a:78:bd:
c5:29:fe:5a:4a:ce:3d:c9:02:22:4e:96:96:62:74:
df:15:68:12:06:55:fc:48:fc:d5:3d:13:74:76:82:
0b:36:23:9e:13:e0:1e:2a:27:51:b2:55:ae:70:7e:
c6:81:0a:09:66:0a:67:5f:2a:45:41:85:23:11:56:
c1:0f:66:ca:e0:6c:0a:1f:61:db:a8:dd:f7:5e:85:
e8:14:a1:3e:f4:a6:a3:01:e1:6b:ad:16:51:25:3e:
77:e4:24:6d:15:63:c4:ba:ea:f5:27:95:d8:a0:e8:
06:0c:48:87:6c:a1:8a:16:00:2e:46:aa:f4:7f:50:
75:fe:82:6f:6c:09:5b:01:8f:db:6f:49:09:2f:b9:
7a:bc:c9:55:85:db:26:42:94:42:a4:ce:bb:59:c3:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:00:C7:EC:82:40:EE:37:E0:E6:82:0A:1E:33:A1:6C:C5:C3:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:69:70:0a:d0:0b:5e:21:d0:c9:44:4e:50:f6:89:58:c9:45:
7a:3e:75:35:02:25:9b:18:d0:13:25:f0:f1:7c:50:32:57:87:
ca:99:ef:55:98:6c:0d:7c:30:dc:68:41:24:e6:a3:37:e9:fc:
0c:e3:bd:41:7a:7b:5c:aa:41:96:53:9e:bf:d9:7f:84:b8:7c:
58:0b:bd:98:c8:ff:4c:e7:12:78:08:8b:07:19:b2:a4:57:91:
cb:16:1e:09:de:e0:ef:b9:0c:99:22:a2:f9:f5:47:55:c7:d3:
b7:f3:4d:af:50:2e:bd:7a:a9:fb:c0:44:dc:90:e1:b3:55:26:
ce:8f:c6:77:b5:01:4f:0d:5b:89:5f:2c:c2:a9:e5:e1:ec:c4:
b0:10:15:fa:da:b5:72:8a:94:b9:70:65:c5:e8:57:e2:d8:df:
b3:35:33:3a:bb:c6:1c:ba:2a:f6:a3:72:0b:87:10:cc:48:39:
37:9f:0c:8b:d1:9a:e3:4c:24:c6:e0:51:2e:91:fb:cf:65:40:
9e:9d:10:5d:86:a2:3c:53:5b:f4:43:57:02:35:d2:bc:13:c8:
6f:5d:83:d0:14:cd:ce:80:28:e2:40:f7:5c:81:11:1f:d4:25:
6a:0b:56:a5:77:d1:37:13:ad:b3:99:4f:4c:69:68:73:78:10:
a9:f0:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:57 2025 by rpki-client