Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52b6694a-f629-3c47-9119-68ce4f87301f.roa
File: 52b6694a-f629-3c47-9119-68ce4f87301f.roa (raw, json)
Hash identifier: mRDKzcyHByWCcT16Ft9spjkCxOn4x1kL90VIM4dRdv0=
Subject key identifier: 52:8A:57:96:35:C4:1F:4F:FA:C5:FE:8F:A8:8F:1B:D2:36:2D:38:42
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D594CEA60A8C1FEBB7A965C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52b6694a-f629-3c47-9119-68ce4f87301f.roa
Signing time: Tue 13 May 2025 01:00:47 +0000
ROA not before: Tue 13 May 2025 01:00:47 +0000
ROA not after: Mon 11 Aug 2025 01:00:47 +0000
asID: 401152
IP address blocks: 108.165.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 22:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d5:94:ce:a6:0a:8c:1f:eb:b7:a9:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 13 01:00:47 2025 GMT
Not After : Aug 11 01:00:47 2025 GMT
Subject: CN=bd9e313e-3b96-4c6f-8c3e-ba6d7baebb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:21:e3:c5:16:90:fc:43:38:7b:09:9e:cd:
73:84:4a:7a:a2:8e:ba:5c:d8:b2:0b:92:0d:7a:3f:
05:f6:5a:40:37:e7:43:78:33:ba:e0:b8:04:6f:34:
50:40:4c:d2:40:65:67:34:65:92:e3:bb:4c:3e:8d:
56:cf:b6:03:a8:3f:d4:1b:bd:d7:76:20:93:88:c0:
70:cf:4d:79:a8:96:77:24:cc:29:a7:9a:fb:19:e9:
c0:38:20:65:ec:a7:0b:7f:58:2e:fb:5b:a5:41:5c:
66:17:fb:66:20:88:6f:b6:5e:0b:9d:45:18:de:4f:
e6:ec:61:49:ab:4f:6a:66:87:ed:b2:21:29:12:20:
0a:b5:fb:5f:6e:9d:2d:c9:d7:db:f5:e3:59:d5:d7:
6b:33:e0:96:5c:46:b4:9e:82:aa:e6:96:e5:18:ca:
2f:9f:8f:df:cb:66:e0:59:c6:c3:8d:f8:38:9f:9d:
ed:f4:e6:fd:3e:01:da:c6:b3:65:48:7c:27:b1:6a:
90:7c:ad:0e:32:4d:ab:af:63:7e:cc:3e:b9:a8:d9:
77:ca:dc:5c:17:31:2c:46:8a:26:22:29:61:bb:0b:
93:9b:8c:55:8d:30:1e:13:d1:2b:ea:ac:06:d6:0a:
2b:0f:ad:d2:9b:ac:f4:7c:a9:39:bd:a0:b8:91:50:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:57:96:35:C4:1F:4F:FA:C5:FE:8F:A8:8F:1B:D2:36:2D:38:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52b6694a-f629-3c47-9119-68ce4f87301f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:33:06:33:24:57:d4:87:f5:c4:c4:7c:27:31:cb:27:be:04:
84:0c:14:40:16:7b:91:86:19:f4:ed:4b:a6:f6:40:c1:d6:e9:
36:a3:40:62:1e:c2:96:69:c3:c4:0c:42:32:07:3f:b2:d0:94:
64:79:66:78:96:c2:ca:66:f0:6c:c7:97:8f:83:0f:51:6c:da:
4a:0c:bd:16:62:40:8c:5e:b5:9b:9d:4c:81:14:bb:32:af:46:
4b:5b:36:49:32:5a:42:00:76:dd:fa:72:6b:ed:60:bd:20:81:
52:3e:d4:f2:5c:85:96:65:ca:93:75:59:5b:48:54:a3:57:dc:
9a:de:d7:81:1a:6c:09:84:31:23:f8:3c:4f:7e:43:43:72:c2:
59:8e:79:4b:f8:f3:4c:5e:bb:35:09:c8:28:b2:d2:db:fa:71:
30:28:dc:f9:b6:56:75:f8:93:09:9a:63:4d:12:c8:fe:fd:fc:
bc:a0:5a:01:14:12:1e:36:73:fe:5f:d3:1e:69:98:66:8d:15:
1d:3a:93:6f:a4:c2:96:f0:be:db:97:01:30:5d:77:70:af:41:
61:97:59:0a:f6:e2:e4:fa:11:b4:ab:f2:19:0a:b5:e0:3e:81:
e0:9f:93:70:df:68:3a:35:2c:de:b4:67:46:c5:63:67:6a:89:
a6:84:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:59:35 2025 by rpki-client