Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27c07480-a61c-32d6-8c4a-8ea171f4a23d.roa
File: 27c07480-a61c-32d6-8c4a-8ea171f4a23d.roa (raw, json)
Hash identifier: w/hwuZyUsDa3VOZKazvaxQ+nrAJ+8S8RAmDmhk8tnJo=
Subject key identifier: AD:13:33:FB:0B:A5:25:C6:5D:79:E0:81:13:CD:DA:1B:A6:95:8A:CD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849C3DD2BE10710B57935EBD880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27c07480-a61c-32d6-8c4a-8ea171f4a23d.roa
Signing time: Tue 06 May 2025 16:42:05 +0000
ROA not before: Tue 06 May 2025 16:42:05 +0000
ROA not after: Mon 04 Aug 2025 16:42:05 +0000
asID: 834
IP address blocks: 108.165.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 17:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c3:dd:2b:e1:07:10:b5:79:35:eb:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 6 16:42:05 2025 GMT
Not After : Aug 4 16:42:05 2025 GMT
Subject: CN=778f52b7-2a6e-407e-9750-ae68276a0503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:f5:6d:4c:e6:9a:b7:1f:a8:a5:7f:a3:10:
32:00:27:66:a4:9d:cb:58:92:15:34:61:70:4b:23:
1a:f2:e1:4b:a9:ff:f9:8d:9c:e3:26:ee:8c:62:f4:
b7:7b:a1:35:fd:83:82:63:b8:71:e3:f9:a0:5f:d9:
1e:6e:b7:22:f7:a0:1e:c5:bf:48:ee:20:61:06:d8:
e4:9b:8b:dc:31:03:1b:62:e6:03:68:96:21:6f:d9:
ba:44:53:1f:55:22:c7:0c:df:93:4d:ee:08:35:a3:
d4:64:a9:fc:03:b9:7a:27:53:13:6d:c4:a2:79:a0:
8c:a2:3a:1f:f8:71:b2:35:43:f2:4d:ee:cc:f4:d0:
9c:e7:7c:26:a5:5d:e0:65:a3:b4:0e:15:0f:a0:5f:
d5:f4:53:58:6b:df:1e:7a:d9:65:45:7f:d4:cb:64:
3c:1b:93:59:6c:e8:77:67:3f:8d:f9:96:72:3f:24:
d7:ab:bf:cf:c6:e5:9f:ea:ba:b6:96:b0:55:26:c8:
55:6a:c7:90:d1:c9:1d:80:90:05:01:65:91:23:f4:
cc:2b:7e:fc:5a:a0:72:bb:40:74:24:fc:fa:ea:6c:
8c:bb:25:c1:9e:6c:ba:f0:13:c7:9b:a0:6e:e1:a5:
24:5b:31:75:b6:bd:32:51:69:0d:f0:80:0e:9b:ef:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:33:FB:0B:A5:25:C6:5D:79:E0:81:13:CD:DA:1B:A6:95:8A:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27c07480-a61c-32d6-8c4a-8ea171f4a23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:06:28:2a:44:83:dd:03:e3:c0:39:0a:28:58:8a:08:fe:37:
83:bc:26:91:a6:b8:3f:5b:89:7e:69:89:bb:b4:12:ea:27:6a:
76:c9:13:00:3f:04:72:0d:d4:a6:b2:7b:61:69:6e:47:ca:66:
79:e9:9f:50:bf:88:d9:92:d7:d4:ab:20:05:8d:47:ef:87:22:
40:4b:fe:6e:79:63:76:02:fa:87:fc:af:df:fe:83:26:9e:d0:
34:72:dc:20:fd:b0:b4:ff:6b:3d:e3:8f:6f:52:1e:4e:09:32:
70:de:6c:6e:cc:e4:14:2d:e3:77:b5:7d:d2:9b:a4:01:bb:de:
4b:df:5c:48:23:c1:86:e0:83:eb:df:d1:24:36:34:17:c7:95:
95:2a:42:67:26:0e:18:ab:37:77:f5:c5:c7:43:57:22:ae:b3:
26:56:a0:db:8b:83:13:f7:45:4e:b5:50:d2:2c:17:9f:a1:fc:
62:23:7f:60:b1:d0:4f:62:66:43:a0:56:09:85:43:f6:da:11:
2e:17:83:85:7a:8f:9c:ce:8a:ec:ee:1e:02:7b:4b:6d:92:e7:
a2:f4:c2:4f:13:23:8f:ae:38:22:96:28:b2:c2:83:f5:7b:b2:
df:b7:e1:76:09:e1:a6:3e:01:3a:79:2c:48:4c:5e:6c:00:a8:
76:65:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:40 2025 by rpki-client