Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6cd41bc0-1af4-3724-bff5-0d41c4c422f9.roa
File: 6cd41bc0-1af4-3724-bff5-0d41c4c422f9.roa (raw, json)
Hash identifier: T3iYdqZ8ChdR9mlpSud3kH23Zm/3/Y59LbpFWk+nZ4s=
Subject key identifier: 58:BD:0B:F1:F6:0B:19:BA:05:13:10:99:BB:53:87:A7:4F:63:8A:8A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841A42177E23FB31CB515FCD280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6cd41bc0-1af4-3724-bff5-0d41c4c422f9.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Fri 25 Jul 2025 04:00:00 +0000
asID: 834
IP address blocks: 108.165.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:a4:21:77:e2:3f:b3:1c:b5:15:fc:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 25 04:00:00 2025 GMT
Subject: CN=6ff728f0-9471-420a-b862-880c35bdbc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:65:e6:d7:59:d5:87:d4:87:62:c7:c8:07:
7e:bb:7f:85:4d:54:fb:4d:98:23:63:de:22:34:21:
4e:0d:01:7d:26:1b:6c:48:28:49:b6:e0:bc:c3:6a:
1b:de:3a:ab:28:21:67:78:5b:d6:81:3a:89:7b:f9:
2b:6c:f3:f4:26:2d:8d:0d:94:91:63:9b:74:bb:ec:
69:0f:a9:6b:43:a6:5c:c6:d9:d1:c5:33:41:e1:80:
58:cd:20:ca:88:a7:23:f5:b4:e8:9b:1f:83:de:9d:
2b:46:28:82:44:bd:b2:e5:0e:b3:61:74:4c:e5:6f:
15:0b:17:a4:90:22:df:1e:40:ac:41:18:d3:ed:92:
cb:eb:f0:23:06:55:cd:a0:87:b1:26:48:14:e3:1e:
3e:5b:0e:df:d0:ec:dc:16:14:36:90:4b:04:55:91:
bb:cf:5c:f7:f6:f9:31:47:cd:f6:9f:c5:6a:15:7d:
dc:60:2f:64:5a:68:3b:12:71:d1:a0:33:e7:49:ae:
a4:c3:ea:67:6b:4e:52:43:b0:99:69:62:83:39:f4:
53:b3:b6:36:39:53:2a:d6:e3:60:70:28:37:9a:89:
0a:45:73:57:17:57:b2:ee:19:cb:2d:43:a5:d1:da:
b6:a7:1f:be:1d:85:33:b0:3a:94:9e:81:a1:64:93:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:0B:F1:F6:0B:19:BA:05:13:10:99:BB:53:87:A7:4F:63:8A:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6cd41bc0-1af4-3724-bff5-0d41c4c422f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:54:d3:33:d7:8e:d1:7a:60:31:9a:01:34:07:be:92:17:e1:
67:0f:a5:32:8c:c0:e5:e0:a3:4a:3d:a5:77:54:15:b3:24:f5:
53:17:60:a9:3a:45:64:6a:84:93:e9:1b:a5:cc:13:a9:17:75:
f2:22:97:0b:86:c7:e7:66:61:0b:9b:75:f6:0f:52:cb:bb:ff:
9c:9d:21:ad:bc:bb:b8:cd:c4:f2:f1:a7:46:f4:39:09:09:d9:
8f:e8:4d:0d:6f:71:08:0f:ab:29:f3:76:dd:9c:0c:f9:37:02:
16:45:7b:e1:ff:2f:fd:23:7a:a7:f3:41:ac:e4:4f:85:7d:be:
9e:e6:a0:86:38:07:71:0e:2b:b5:3c:09:3b:7d:0a:3a:d1:83:
e1:38:a0:db:12:b1:fc:69:15:ba:25:02:ed:78:60:cb:54:63:
c9:b9:35:b1:2c:eb:10:b9:c2:76:4f:b8:04:9c:ed:07:95:26:
ea:37:96:a0:e2:34:8c:76:aa:77:bd:3e:ca:55:cc:62:3c:d5:
af:8b:d1:02:e9:b2:cf:d5:d2:05:aa:1d:36:80:a1:48:8d:ea:
bc:ef:7a:fe:eb:2f:d5:8b:18:2c:62:6c:3b:25:5e:ba:73:32:
11:c0:9d:b3:5d:bb:c3:91:9d:1b:72:45:ff:9c:7f:ce:ef:f3:
e5:c4:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:58 2025 by rpki-client