Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d3bc3d8-82f7-3f1b-bb61-f89ab4e85b9f.roa
File: 2d3bc3d8-82f7-3f1b-bb61-f89ab4e85b9f.roa (raw, json)
Hash identifier: FokZreIPUn3BuXvbpKvpavnztPzDwgGrwrPBVlKeGhI=
Subject key identifier: A8:CD:52:54:FD:39:5B:19:F2:09:0F:11:60:33:D6:4E:18:75:07:84
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584195EE8C66E221F400F4578D60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d3bc3d8-82f7-3f1b-bb61-f89ab4e85b9f.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Sun 20 Jul 2025 04:00:00 +0000
asID: 834
IP address blocks: 166.0.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Apr 2023 16:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:95:ee:8c:66:e2:21:f4:00:f4:57:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 20 04:00:00 2025 GMT
Subject: CN=4325eb7f-4c31-4ae8-aae0-4dc9eda41d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:65:e4:12:93:bb:94:78:19:70:13:d7:46:
8e:f9:cd:26:a8:c6:bb:24:bb:8c:39:8b:6e:39:67:
2f:e8:4f:df:f7:f8:73:f3:da:01:3c:91:f9:06:d0:
56:a5:3b:55:d1:e8:34:50:9a:82:29:3f:fe:ad:22:
2f:84:05:1e:5d:aa:08:8d:cc:f3:be:9a:33:f5:cb:
e4:c4:78:3c:95:a2:d8:db:c7:fd:ef:3e:7a:ca:f0:
69:c4:ad:ee:b7:00:41:c9:da:67:e4:80:27:22:2b:
ea:30:9a:65:9a:b9:f3:10:72:7d:4d:5e:4f:57:2a:
87:82:78:6f:13:91:0d:3e:01:4c:2a:4a:b1:2a:bd:
0a:1a:ac:a2:ce:e6:57:22:bc:9b:13:00:f5:19:c0:
cd:ad:f0:9a:98:8e:e9:3d:a6:57:3a:ab:d0:f6:ad:
e5:63:6a:b4:a9:5f:19:4a:23:ea:54:0d:6c:68:b6:
86:e7:bb:25:8d:88:ab:9e:9e:9a:a6:8c:05:f4:2c:
2b:f6:fb:3f:b5:eb:10:df:0e:25:5e:74:b7:65:c1:
09:9c:4c:53:be:aa:40:f7:7e:60:6f:9c:d1:19:f0:
33:3e:42:c0:8a:00:de:04:8a:d2:13:10:1e:60:f8:
60:aa:60:5c:3e:29:0b:c1:d8:8b:e1:21:b5:45:8e:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:52:54:FD:39:5B:19:F2:09:0F:11:60:33:D6:4E:18:75:07:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d3bc3d8-82f7-3f1b-bb61-f89ab4e85b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:31:57:07:aa:ce:72:bf:55:f4:aa:b9:e4:4c:1a:43:14:e2:
cc:fd:52:b9:10:2b:0c:f1:25:6e:03:10:c8:c9:75:38:1b:cb:
6d:fa:7e:2e:35:c0:11:20:0e:21:1e:c5:32:75:f5:df:e0:e6:
81:d7:71:0b:0b:ec:97:ea:f5:08:c1:cf:2e:fb:c8:47:ec:43:
fd:ca:78:b1:f8:76:f8:27:ad:d8:9e:1f:65:95:38:14:27:b1:
d9:1b:d3:8c:88:67:b8:56:09:0f:70:16:f0:ce:16:f1:0f:38:
73:d7:bf:4d:f3:b0:32:4e:11:aa:d8:e5:93:bf:b8:8d:43:e8:
ef:66:ff:4d:55:f0:9a:14:bd:bc:5f:68:a8:9e:3a:4b:10:f2:
c0:90:a6:7d:44:cd:bd:be:9f:10:89:2f:b0:8f:77:79:76:84:
71:64:f5:9a:6c:9e:1a:28:22:fe:e3:80:b0:eb:5f:e0:c7:71:
bc:02:5a:00:5f:22:ea:1f:06:ec:38:2a:cc:7b:36:a0:b5:67:
47:d6:bf:c6:9a:b3:30:3e:0a:0b:6d:86:54:83:1f:ec:7d:f9:
03:54:dd:47:d7:e0:83:24:8f:34:ff:6a:91:be:c0:16:bb:b1:
d0:5c:fb:92:99:8f:db:31:8d:f2:02:94:d5:c9:02:f7:35:0f:
97:7b:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:00 2025 by rpki-client