Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ba81cbe-d7ed-3838-80f8-4068f03c60b8.roa
File: 3ba81cbe-d7ed-3838-80f8-4068f03c60b8.roa (raw, json)
Hash identifier: j/QSN21b0shMDdTW6RjrDWWaYZqIFaBIAHJrNixoz5Q=
Subject key identifier: 9C:50:B5:55:26:93:BD:BF:F3:3E:E7:A6:B4:90:22:A1:AC:31:B2:F2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858416703A48F283655112DCC08C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ba81cbe-d7ed-3838-80f8-4068f03c60b8.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Thu 03 Jul 2025 04:00:00 +0000
asID: 211585
IP address blocks: 166.0.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 04:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:67:03:a4:8f:28:36:55:11:2d:cc:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 3 04:00:00 2025 GMT
Subject: CN=2f55248a-22ed-4f72-8355-ac38df9e1adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:fa:79:5d:69:66:96:7e:a6:9a:fc:e0:28:
b8:f7:6f:65:48:46:92:58:3c:e3:21:ab:af:08:cb:
e0:ca:07:90:37:93:78:a4:a7:38:db:01:8a:39:46:
10:c4:0d:e9:98:0d:da:0a:dd:c5:c9:49:ea:65:26:
83:be:a5:2b:f9:91:de:40:84:2a:b9:68:ab:fe:bb:
e0:6e:26:ca:e3:3b:4f:0e:31:46:6f:71:43:aa:b9:
02:21:9b:ab:b9:68:38:26:46:da:93:92:68:e8:82:
c7:c4:c1:f0:d7:51:31:a9:cf:33:b8:dc:77:b1:1b:
66:72:2e:78:eb:0d:cb:3e:0a:d7:f2:47:f0:1c:ed:
40:1e:05:db:90:7e:b1:9e:72:cd:fe:39:45:89:3c:
e6:07:ae:62:fc:a5:f3:28:ea:5f:0b:1c:89:df:86:
74:44:48:6a:7e:45:5e:40:5b:39:20:85:6c:03:ed:
e8:93:f3:c2:4d:ec:97:2a:92:57:b1:27:b4:06:e9:
e0:e9:9f:a4:e4:11:76:db:6f:7f:00:f4:71:52:fb:
78:d2:25:ed:45:b3:b5:5a:48:a1:00:1d:28:57:b0:
74:09:ea:76:c6:82:e9:53:6d:39:e7:23:d2:d4:ad:
65:02:2e:f0:f0:a2:cb:c3:03:63:25:e6:c3:c0:bb:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:B5:55:26:93:BD:BF:F3:3E:E7:A6:B4:90:22:A1:AC:31:B2:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ba81cbe-d7ed-3838-80f8-4068f03c60b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:86:13:d5:13:26:22:b1:a6:b1:4d:7a:9b:51:28:6d:60:12:
eb:a4:d5:c0:6c:ab:05:9d:60:29:12:59:83:c0:f5:b2:f6:bd:
ee:b9:1b:2a:37:cf:9b:89:68:d1:f4:31:97:42:8b:f0:ef:e4:
3a:e2:a7:e5:af:ac:d8:a3:2a:f1:a2:7a:ba:9d:06:19:ab:7f:
bb:90:0d:c5:15:55:84:c5:c1:89:ca:a0:d2:7f:68:e0:4a:b2:
18:3e:71:33:77:ed:78:21:3c:84:c0:18:b3:f0:09:b8:3e:78:
59:a5:e1:23:6f:19:68:9c:40:55:49:79:26:ec:c3:c0:10:f0:
05:80:14:a4:95:06:89:39:8c:c4:b0:c5:ec:18:e5:c5:42:14:
5c:2b:7a:b8:0b:bb:8c:a5:ab:b3:71:dd:27:5e:cd:15:16:45:
ee:76:c8:02:75:6d:da:9a:13:de:a3:cc:d3:9b:3b:81:39:5d:
ef:f1:23:7e:66:51:fd:eb:05:49:9e:c0:a5:d8:0f:f4:74:f7:
59:2a:cb:80:bc:92:43:74:d2:b5:41:c3:45:b6:c4:44:15:53:
c3:21:dc:5c:d1:c2:61:f7:e1:e4:f1:31:c4:86:1a:7c:3b:1d:
b5:62:40:ac:5c:35:ce:fc:40:7f:4a:74:f6:aa:fc:ba:e9:30:
23:8f:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:55 2025 by rpki-client