Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/301e0eb4-9c90-36ca-9b6a-20eb9a6ed6bb.roa
File: 301e0eb4-9c90-36ca-9b6a-20eb9a6ed6bb.roa (raw, json)
Hash identifier: BfIyx4YUzqp0Gc0RCcGuvBXpd2n7stzzuwAHJVvD4EU=
Subject key identifier: A3:67:1E:3E:B4:EC:10:E8:CE:56:A4:F0:0D:0C:CF:05:F8:14:B1:33
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858497BC8ABDFBCF3F7D69F981C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/301e0eb4-9c90-36ca-9b6a-20eb9a6ed6bb.roa
Signing time: Thu 10 Apr 2025 21:02:35 +0000
ROA not before: Thu 10 Apr 2025 21:02:35 +0000
ROA not after: Wed 09 Jul 2025 21:02:35 +0000
asID: 401152
IP address blocks: 108.165.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 17:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7b:c8:ab:df:bc:f3:f7:d6:9f:98:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 10 21:02:35 2025 GMT
Not After : Jul 9 21:02:35 2025 GMT
Subject: CN=612375e3-6e1c-4bb3-a959-20e9d8b12dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:3b:39:63:a1:32:2d:8a:d3:a6:b9:ef:75:
d0:90:13:f3:2e:41:17:db:86:e1:ee:fc:90:b2:82:
7b:9c:c4:b2:df:8d:49:5e:93:89:21:34:8b:7e:1a:
ab:05:89:0b:44:f2:97:49:c0:82:a0:ff:dd:10:15:
b1:f7:1f:b4:4c:da:79:3e:71:96:42:f9:83:63:53:
fa:0d:20:4f:3a:e2:76:0a:ac:11:de:1f:c1:8c:3b:
95:ac:91:fa:aa:c5:cf:63:68:54:bf:b2:ea:36:59:
aa:c9:2f:19:96:1c:14:40:b0:34:e2:2d:b6:4f:3c:
59:1e:12:aa:1d:cb:2d:db:56:7c:3b:be:14:cb:27:
78:bc:83:37:eb:8f:16:1d:64:41:3f:cd:26:26:78:
ef:70:5a:bd:83:7b:23:c5:91:92:40:93:9d:91:5b:
0f:a3:3c:6a:ca:af:2e:74:15:5f:58:88:a7:b1:9f:
c2:aa:8b:b7:f6:5f:46:38:ff:52:42:ce:76:72:97:
90:ac:75:d7:c7:e7:6d:b0:25:ed:bb:ef:f5:7d:d2:
51:95:ad:1c:f6:52:a8:8d:07:d0:ff:b0:98:f7:1e:
c2:2d:b9:2f:5d:49:49:5c:34:1e:15:e1:60:65:c2:
96:e3:75:29:0f:f0:08:89:46:ac:1f:49:cc:2e:a6:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:1E:3E:B4:EC:10:E8:CE:56:A4:F0:0D:0C:CF:05:F8:14:B1:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/301e0eb4-9c90-36ca-9b6a-20eb9a6ed6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:2d:58:12:4a:34:67:db:64:13:8e:d5:f6:38:23:72:7a:f7:
51:9e:65:7a:fc:d2:97:42:e7:37:62:37:69:bb:29:12:9b:79:
e0:45:df:d1:b2:cc:02:48:68:3f:3f:4f:1a:c3:72:fc:d0:5d:
a3:99:50:86:2c:e7:dd:f7:e7:9d:1d:3a:8f:59:c9:96:f9:59:
f0:b9:3e:43:82:8c:d8:4c:6f:89:00:0b:42:56:3f:bb:7f:07:
f0:29:6d:a1:27:3d:95:ef:6e:a3:ba:0e:87:bd:48:d5:5d:12:
84:96:4a:bd:41:93:60:d3:f2:cc:34:7c:93:bf:f7:9c:d3:7e:
39:6d:06:18:bf:ce:04:47:e6:cb:53:af:86:1f:4e:93:61:a9:
c7:cd:cd:70:69:e6:01:67:7d:0c:8b:e4:c6:bd:b5:7c:17:1a:
28:83:6a:eb:20:d5:03:01:1f:43:e4:39:b9:e6:3a:fc:cf:7b:
b4:00:83:ce:6b:68:9b:c2:c8:ec:6b:df:95:35:54:e0:77:b7:
1b:0f:1d:a3:c1:bd:37:9b:1e:15:9d:03:80:c8:55:ce:cf:aa:
47:a9:5e:27:6b:91:13:02:49:5c:da:12:8f:1f:45:0e:0b:4c:
17:f7:91:74:3d:a3:5e:3d:42:cd:de:c4:7e:2c:c0:58:7a:3e:
49:bd:dc:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl7yKvfvPP31p+YHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQxMDIxMDIzNVoXDTI1MDcwOTIxMDIzNVowLzEtMCsGA1UEAxMk
NjEyMzc1ZTMtNmUxYy00YmIzLWE5NTktMjBlOWQ4YjEyZGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vs7OWOhMi2K06a573XQkBPzLkEX24bh7vyQ
soJ7nMSy341JXpOJITSLfhqrBYkLRPKXScCCoP/dEBWx9x+0TNp5PnGWQvmDY1P6
DSBPOuJ2CqwR3h/BjDuVrJH6qsXPY2hUv7LqNlmqyS8ZlhwUQLA04i22TzxZHhKq
Hcst21Z8O74Uyyd4vIM3648WHWRBP80mJnjvcFq9g3sjxZGSQJOdkVsPozxqyq8u
dBVfWIinsZ/Cqou39l9GOP9SQs52cpeQrHXXx+dtsCXtu+/1fdJRla0c9lKojQfQ
/7CY9x7CLbkvXUlJXDQeFeFgZcKW43UpD/AIiUasH0nMLqbNkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNnHj607BDozlak8A0MzwX4FLEzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzAxZTBlYjQtOWM5MC0z
NmNhLTliNmEtMjBlYjlhNmVkNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADktWBJKNGfbZBOO1fY4I3J691GeZXr80pdC5zdiN2m7KRKbeeBF39Gy
zAJIaD8/TxrDcvzQXaOZUIYs5933550dOo9ZyZb5WfC5PkOCjNhMb4kAC0JWP7t/
B/ApbaEnPZXvbqO6Doe9SNVdEoSWSr1Bk2DT8sw0fJO/95zTfjltBhi/zgRH5stT
r4YfTpNhqcfNzXBp5gFnfQyL5Ma9tXwXGiiDausg1QMBH0PkObnmOvzPe7QAg85r
aJvCyOxr35U1VOB3txsPHaPBvTebHhWdA4DIVc7PqkepXidrkRMCSVzaEo8fRQ4L
TBf3kXQ9o149Qs3exH4swFh6Pkm93Fg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:42:58 2025 by rpki-client