Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d5a1af1-6788-39e6-89ac-705ae19dfb47.roa
File: 4d5a1af1-6788-39e6-89ac-705ae19dfb47.roa (raw, json)
Hash identifier: p0OjcWIssYrHJqaL9GJywv48+jWhMYNUiebznbjBEpU=
Subject key identifier: 71:AB:73:13:6F:E7:C4:AB:7A:D2:98:53:54:74:7B:F7:1E:F8:F9:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D80535783B52F88AAC484980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d5a1af1-6788-39e6-89ac-705ae19dfb47.roa
Signing time: Tue 13 May 2025 21:58:55 +0000
ROA not before: Tue 13 May 2025 21:58:55 +0000
ROA not after: Mon 11 Aug 2025 21:58:55 +0000
asID: 7385
IP address blocks: 108.165.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 19:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:05:35:78:3b:52:f8:8a:ac:48:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 13 21:58:55 2025 GMT
Not After : Aug 11 21:58:55 2025 GMT
Subject: CN=fb8689e1-f960-458a-be57-80581ea44347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:de:a0:c1:3d:79:09:a7:16:3b:f3:70:33:
2f:e9:21:4a:c0:6a:fa:92:ad:76:c1:6e:79:97:da:
f0:c2:b8:3c:8b:40:69:b1:fa:f0:62:b6:3f:87:48:
c1:b1:46:d4:43:41:6a:c0:7b:33:b4:a3:74:14:0c:
37:f7:ee:e7:d6:fa:85:0c:95:07:d8:a5:76:b7:70:
7f:52:8a:a1:5a:62:54:d9:2d:f5:c5:e8:15:cf:ee:
25:56:77:cc:60:da:a9:2c:9f:bd:46:f9:25:a1:89:
0a:c9:2e:89:31:4e:79:f1:03:14:cb:bf:1d:0d:ed:
b4:7a:de:1a:ed:a1:03:d9:f2:fe:57:e4:87:b8:c7:
f1:25:40:63:31:86:78:8e:2f:d3:10:18:d2:1a:b8:
0c:fa:a1:90:4e:77:70:88:6f:3f:d2:65:3e:9a:ce:
7c:a6:e5:2f:ed:83:9c:3e:a1:0b:0b:01:b1:5a:87:
f0:d6:18:c5:c6:6a:12:7a:4e:5f:1c:21:5c:dc:5f:
9f:e2:df:f3:e6:8d:93:f4:93:6b:96:0a:96:c7:79:
96:6e:38:6f:00:66:77:8c:05:b2:4f:ee:73:cf:cd:
ee:15:09:10:d8:26:9f:0e:f0:b5:de:0c:88:cd:c2:
7a:f4:df:2f:83:0a:14:31:d4:38:ff:dd:ec:d2:b5:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:73:13:6F:E7:C4:AB:7A:D2:98:53:54:74:7B:F7:1E:F8:F9:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d5a1af1-6788-39e6-89ac-705ae19dfb47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:e8:de:8c:52:f6:ef:f9:ce:f8:6c:d3:e3:a9:ef:20:4f:a4:
a8:66:a2:bb:76:47:23:e5:78:f7:6b:60:1f:ca:bf:cb:51:f9:
42:5b:31:a7:36:f8:84:b7:a6:9a:7c:fc:81:af:ca:38:00:a4:
ff:b3:31:32:79:d2:7c:98:59:eb:3f:75:c1:0f:68:be:4d:c0:
4a:a1:17:17:5b:f7:39:8d:2c:61:91:16:55:8a:7e:dc:73:04:
0e:20:36:61:ef:d2:6a:68:c9:62:67:92:68:6b:ef:e0:02:69:
8d:c9:07:d2:4b:76:83:8f:7c:84:09:6a:b4:9d:a7:92:2f:e1:
af:4c:4d:60:df:a9:41:29:3d:55:1f:ac:66:04:67:17:41:47:
55:03:d0:1b:fe:bc:c6:bb:07:9f:d6:41:0a:66:30:f5:3b:7d:
d8:5f:2b:83:30:4b:27:3d:df:cf:ad:2d:47:64:46:8e:b0:2e:
7a:f7:ea:9e:f7:40:89:ad:5e:1b:81:e6:8d:40:8a:a2:4a:c6:
4f:58:c6:e2:10:8e:06:51:56:af:ad:7a:1e:10:6d:70:e9:59:
e2:f3:8e:bb:ef:a4:aa:34:a8:3e:73:ce:fc:8b:64:62:30:0e:
a8:be:d9:0c:11:f8:ce:cd:25:49:af:44:32:57:9d:fa:4f:22:
19:7c:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:49:30 2025 by rpki-client