Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa
File: 32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa (raw, json)
Hash identifier: eYLRB5pnGfX1IoSU0i78zdPREAA7rZ7X2dKipJfOwrQ=
Subject key identifier: F2:A3:2F:CD:F6:38:6C:6D:6F:DA:60:A7:E2:89:0C:3E:6C:69:D7:11
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D2CA2939F14B1E809FCF2300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa
Signing time: Mon 12 May 2025 01:00:47 +0000
ROA not before: Mon 12 May 2025 01:00:47 +0000
ROA not after: Sun 10 Aug 2025 01:00:47 +0000
asID: 401152
IP address blocks: 108.165.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d2:ca:29:39:f1:4b:1e:80:9f:cf:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 12 01:00:47 2025 GMT
Not After : Aug 10 01:00:47 2025 GMT
Subject: CN=2497af45-1a31-4745-a126-557557e6a2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:19:7d:c3:1f:9a:dd:60:82:a7:d3:b3:ed:
44:17:06:50:95:55:4b:6a:00:d3:69:24:d4:31:13:
94:fe:a3:a2:d2:35:19:d4:a7:07:b4:99:f5:75:9c:
05:a9:9f:4e:f0:d0:91:89:4a:db:d4:ae:cb:20:8b:
f5:25:bf:62:7f:31:25:48:3f:71:63:80:c1:98:03:
91:b9:da:9a:97:91:de:ef:30:d5:39:0d:7b:c3:be:
1b:93:b6:9d:b6:2c:80:e9:93:1d:d8:de:09:60:03:
a1:58:90:3e:71:b2:91:0e:94:03:a5:62:41:ce:a8:
9e:79:67:2b:3d:79:7d:67:72:98:dc:69:c9:bc:37:
64:1f:3b:cc:c6:36:ec:86:98:18:c5:6d:f7:6a:c0:
cf:e1:36:51:82:5d:bd:53:cf:d3:36:0d:43:69:06:
62:8c:d4:11:a4:95:1d:81:a7:54:e7:69:20:4a:dc:
8c:0d:25:8b:11:95:de:e4:43:49:de:56:66:51:73:
2c:fd:f8:15:d1:51:ca:37:9f:b9:cf:8b:7e:5a:f0:
dd:c7:88:a2:72:e7:c2:34:bc:2c:58:70:54:b4:ec:
2e:86:07:7a:39:f4:d6:42:77:ec:c2:8c:5b:db:f0:
d9:81:21:f1:bc:36:8e:b4:b9:d3:b6:ea:8f:42:54:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:2F:CD:F6:38:6C:6D:6F:DA:60:A7:E2:89:0C:3E:6C:69:D7:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:8d:cb:c1:4b:75:5a:28:c0:a4:ec:6c:e5:47:df:01:55:1d:
4a:e7:61:9f:d9:0e:97:51:02:d7:8b:e9:88:53:be:b6:c2:a8:
62:15:7e:3d:b5:7d:70:04:0d:53:cd:40:d4:30:5a:90:2c:78:
5b:fe:9c:6e:d6:46:c9:79:7d:fb:6f:c2:f5:6d:d7:af:ac:1a:
99:92:d3:43:21:26:d8:3e:fc:c1:84:2f:e9:a8:e6:71:27:72:
f4:1f:72:a0:e4:fa:7c:71:46:12:d4:b1:0a:e7:de:b5:60:11:
b1:62:f6:86:41:dd:4e:68:90:9e:45:23:bd:aa:d5:fe:7c:89:
02:8f:98:53:c6:30:c1:25:04:1a:f7:18:66:31:02:93:be:ac:
44:bf:79:9c:dc:04:4f:03:5d:32:5a:8c:47:1f:95:dd:8c:02:
45:cf:36:ff:0d:2d:9a:e4:3f:76:b3:3d:8a:97:06:a0:f8:5a:
07:89:3d:e1:e5:12:71:c8:fb:94:bf:88:51:22:29:a4:28:a8:
b1:0d:e8:e9:ba:ee:9c:41:ba:21:57:21:d2:b3:5b:f6:25:56:
31:f8:36:26:a8:32:6a:67:a6:37:1d:81:49:f4:7e:36:c5:bb:
18:38:ea:f2:89:13:d3:f1:ab:8e:5a:60:e1:8e:99:9a:3d:6e:
7c:b5:18:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyik58UsegJ/PIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk
MjQ5N2FmNDUtMWEzMS00NzQ1LWExMjYtNTU3NTU3ZTZhMmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kZfcMfmt1ggqfTs+1EFwZQlVVLagDTaSTU
MROU/qOi0jUZ1KcHtJn1dZwFqZ9O8NCRiUrb1K7LIIv1Jb9ifzElSD9xY4DBmAOR
udqal5He7zDVOQ17w74bk7adtiyA6ZMd2N4JYAOhWJA+cbKRDpQDpWJBzqieeWcr
PXl9Z3KY3GnJvDdkHzvMxjbshpgYxW33asDP4TZRgl29U8/TNg1DaQZijNQRpJUd
gadU52kgStyMDSWLEZXe5ENJ3lZmUXMs/fgV0VHKN5+5z4t+WvDdx4iicufCNLws
WHBUtOwuhgd6OfTWQnfswoxb2/DZgSHxvDaOtLnTtuqPQlTz3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKjL832OGxtb9pgp+KJDD5sadcRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzJlY2UwNTYtN2VjYy0z
YmVhLWEzZGQtZjBjYmRjMDc1MmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaNy8FLdVoowKTsbOVH3wFVHUrnYZ/ZDpdRAteL6YhTvrbCqGIVfj21
fXAEDVPNQNQwWpAseFv+nG7WRsl5fftvwvVt16+sGpmS00MhJtg+/MGEL+mo5nEn
cvQfcqDk+nxxRhLUsQrn3rVgEbFi9oZB3U5okJ5FI72q1f58iQKPmFPGMMElBBr3
GGYxApO+rES/eZzcBE8DXTJajEcfld2MAkXPNv8NLZrkP3azPYqXBqD4WgeJPeHl
EnHI+5S/iFEiKaQoqLEN6Om67pxBuiFXIdKzW/YlVjH4NiaoMmpnpjcdgUn0fjbF
uxg46vKJE9Pxq45aYOGOmZo9bny1GP4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:47 2025 by rpki-client