Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4be546be-d16a-327f-90c2-ef4a52f7fb63.roa
File: 4be546be-d16a-327f-90c2-ef4a52f7fb63.roa (raw, json)
Hash identifier: fEClqFnMPFkMqKRKg61U1ha8+g660l89ibQb02WWwJU=
Subject key identifier: BA:23:77:8D:57:4D:54:A8:02:B3:89:D6:26:43:0E:6E:79:EA:4A:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858414EEB0E3DD90981CAE842BD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4be546be-d16a-327f-90c2-ef4a52f7fb63.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 24 Jun 2025 04:00:00 +0000
asID: 399976
IP address blocks: 166.0.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 22:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4e:eb:0e:3d:d9:09:81:ca:e8:42:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jun 24 04:00:00 2025 GMT
Subject: CN=6db25d0c-3bf2-4de4-bda1-deff8b5f9470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:75:c3:2b:8e:6e:bc:47:62:93:59:36:93:
05:ca:7a:98:3a:d2:42:87:51:49:fd:eb:6f:59:7f:
53:2c:17:04:e9:17:a3:41:33:7d:61:93:e5:7d:e8:
70:cf:34:a6:cd:4c:87:6d:6d:f9:f6:e6:a1:ca:d7:
a9:cb:55:86:1b:7b:d7:9f:5c:60:f2:af:ce:0f:dc:
2b:58:52:6c:40:b9:53:60:34:dd:f0:30:c8:93:33:
19:3b:ec:31:c2:89:4b:07:f5:53:8a:85:9b:c8:11:
bc:e0:d2:f6:b8:c2:7a:26:4c:fe:98:97:46:df:45:
40:c6:56:3a:f2:dd:85:b1:03:41:99:b4:c1:74:74:
d0:98:6e:de:3e:db:7a:af:c8:bc:e3:d3:c9:73:d6:
c5:40:70:c5:4f:1d:0a:89:f8:5c:d7:c7:28:b8:80:
69:6c:cc:2f:0b:4e:31:21:e5:09:95:16:24:b7:4a:
f6:59:77:af:96:79:99:47:77:0e:69:da:8a:c7:51:
f1:68:15:c2:d7:59:b7:76:71:2b:ed:20:d8:f6:5a:
5b:dc:f4:28:26:f6:4a:df:d6:31:55:e8:6a:72:24:
6d:92:4b:03:20:b4:73:94:11:c7:fc:91:a6:18:e3:
c9:76:b5:b6:b3:00:0e:bd:e5:9e:62:82:52:d5:57:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:77:8D:57:4D:54:A8:02:B3:89:D6:26:43:0E:6E:79:EA:4A:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4be546be-d16a-327f-90c2-ef4a52f7fb63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:fe:8b:29:9c:0f:b7:2a:0c:af:6a:b3:eb:8c:b1:0d:7d:b1:
65:89:92:2d:c5:5d:4f:df:ae:07:69:0b:01:94:82:d7:12:73:
f0:b1:3c:8b:20:7c:80:aa:9c:ff:5c:32:93:b0:9d:e2:ba:a1:
07:25:36:c9:7f:5e:d2:e3:fb:d1:4b:b2:4e:f0:d6:e5:78:67:
1f:20:91:86:91:ac:e0:d5:6f:8d:df:a3:2b:52:3d:68:68:c4:
76:d1:81:cb:3e:00:f0:17:36:0b:46:78:7e:31:a0:77:e6:ee:
f1:cd:54:5e:fa:e7:5d:d1:24:b6:dc:fa:a9:21:cf:5f:4b:a2:
37:20:78:f3:d7:59:60:d8:a2:02:91:a6:2c:be:46:c1:7a:70:
81:02:5e:27:53:15:a5:af:0d:97:9b:c3:86:16:c3:70:ea:da:
0d:5e:2b:b3:73:2f:af:c5:4b:11:26:ad:10:5d:79:19:bb:f4:
bf:65:a9:9e:17:3e:9d:a5:00:f9:50:3a:18:45:d0:d0:78:7b:
69:8f:14:c8:15:5b:42:8f:99:f7:05:1c:60:0b:4c:5a:62:00:
0d:7e:60:2f:1d:69:9a:6b:8a:3d:b2:31:e2:9e:a0:47:06:d3:
09:25:cd:56:cc:de:47:b5:aa:52:01:56:54:ab:d6:51:d8:13:
bb:80:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:25:29 2025 by rpki-client