Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28388745-0670-3b08-b82f-f69c0fe1ce38.roa
File: 28388745-0670-3b08-b82f-f69c0fe1ce38.roa (raw, json)
Hash identifier: 8JzTeT8FKTkyRWnEj1YugNq4eub6eDmQYjPnhAOzruc=
Subject key identifier: 10:0B:3A:A2:7A:3D:11:A2:3E:CD:80:17:2C:C7:B8:BE:FC:53:78:CC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D80536A038FAB072730ED600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28388745-0670-3b08-b82f-f69c0fe1ce38.roa
Signing time: Tue 13 May 2025 21:58:56 +0000
ROA not before: Tue 13 May 2025 21:58:56 +0000
ROA not after: Mon 11 Aug 2025 21:58:56 +0000
asID: 7385
IP address blocks: 166.0.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 19:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:05:36:a0:38:fa:b0:72:73:0e:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 13 21:58:56 2025 GMT
Not After : Aug 11 21:58:56 2025 GMT
Subject: CN=a280004b-9b96-4dfd-95cd-33db5a113290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:48:93:25:61:ba:0e:be:6f:8b:51:e8:fb:
a5:f0:62:b7:b9:e6:52:f6:3e:89:a8:1c:34:1e:f0:
3d:1e:cc:6e:5b:29:b1:82:b0:2a:73:c1:03:48:f0:
fb:fa:9b:f4:ce:b2:d9:ac:13:42:a6:b6:be:54:fb:
90:25:4d:aa:81:11:77:5d:67:12:31:07:ca:fc:4e:
1f:e5:45:f0:3d:3f:0d:bf:1d:0f:0b:f3:a1:71:a0:
4a:6b:9f:bf:cd:66:67:26:ed:fd:83:40:12:76:bd:
26:f0:b4:60:c4:f0:a3:c6:8d:d1:32:ad:02:5c:9b:
e3:b2:55:09:19:7c:bf:6d:2e:9a:46:2b:85:ba:ad:
30:da:20:e9:31:e7:37:7c:57:22:41:dc:a9:4a:48:
cb:62:89:07:1c:a9:c9:c4:3d:ce:89:9c:ab:23:ed:
1c:5b:8a:f8:70:53:b5:af:08:64:bf:d9:a2:36:57:
ea:a5:76:3b:39:e9:07:fe:72:11:35:e2:38:ca:14:
4f:6d:f9:2a:5d:ea:76:02:39:f1:50:40:94:17:48:
14:28:89:2c:08:18:78:d7:dd:34:04:6d:a3:4a:4e:
30:4c:50:1e:b7:a2:cd:2b:de:43:a4:14:47:33:d6:
1d:64:cd:f0:f9:6c:ff:e1:c7:6e:38:63:78:d9:8a:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:3A:A2:7A:3D:11:A2:3E:CD:80:17:2C:C7:B8:BE:FC:53:78:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28388745-0670-3b08-b82f-f69c0fe1ce38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:84:5b:b9:53:ea:6a:92:a6:8e:9c:a4:15:f3:07:84:bd:3c:
e2:0b:b5:6c:e1:d2:69:ec:0f:73:01:0e:f3:11:c6:ef:f5:ea:
39:9a:ac:4a:f4:8f:1b:a2:e9:9f:ce:bf:b3:4a:a5:e5:45:f1:
ba:2f:02:b2:bb:42:63:67:8c:85:bf:5d:40:dd:e4:b2:8b:c8:
0d:26:02:cc:76:9b:03:2c:b1:2c:9a:c0:3c:0a:5f:21:f9:30:
a7:cb:aa:61:30:ed:84:3e:e8:8e:1a:88:1d:f1:f9:13:9a:ad:
3c:e5:b6:d0:18:fc:81:ee:1f:1f:73:d7:2d:6e:83:c5:b6:94:
ee:14:c9:73:3f:12:12:8e:b7:ed:50:7d:a9:04:b3:df:b2:95:
80:37:04:c1:61:97:fc:e7:12:ed:8c:dc:7a:28:99:64:fe:75:
da:37:39:61:bd:35:38:09:5f:8c:88:f5:8c:bb:53:d4:a7:0f:
a0:76:fe:96:13:cf:91:66:db:b6:a9:68:c1:65:77:e4:a6:ee:
fa:64:9f:81:c9:8b:b5:4e:0f:34:dc:6f:4c:a1:ad:4f:eb:c2:
ee:b3:0e:52:cd:c8:68:f2:58:aa:e8:b2:15:73:a6:de:1b:8a:
38:fa:8b:b2:6a:22:20:fb:d0:fd:46:72:5f:31:e9:83:fa:49:
61:a5:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:36 2025 by rpki-client