Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/775ab6b3-be7e-3a90-922d-59c95f6de2cc.roa
File: 775ab6b3-be7e-3a90-922d-59c95f6de2cc.roa (raw, json)
Hash identifier: dyXjfI+oPSLGWU5ebl/qUMZaPbAB61ivUHx+LSfU6zY=
Subject key identifier: 0F:94:40:BF:DB:0D:27:9A:E9:5A:6D:07:E3:07:9A:AB:70:4C:D3:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584175FE6773D942BF0D60AC5880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/775ab6b3-be7e-3a90-922d-59c95f6de2cc.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 08 Jul 2025 04:00:00 +0000
asID: 834
IP address blocks: 166.0.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 14:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:75:fe:67:73:d9:42:bf:0d:60:ac:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 8 04:00:00 2025 GMT
Subject: CN=e189b728-f0e8-41a4-8145-c62d6233e116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:e8:01:10:e7:ab:fb:00:11:7e:7b:78:10:
9c:82:22:1c:7f:6c:dc:ed:ee:c9:37:90:e3:3f:f5:
8f:c1:e5:19:0a:c3:b9:2a:90:a1:56:0a:44:1e:fa:
a8:69:69:18:bc:7a:c0:86:2d:88:71:82:c2:b7:22:
aa:0f:05:3c:bb:c1:ea:65:42:54:9a:69:78:ac:71:
7b:b9:10:0f:2c:1f:e3:b6:6a:d2:a9:e4:3c:50:e6:
c3:1b:6a:9c:99:50:4e:73:7f:4f:73:2d:25:d2:d1:
a0:23:05:54:be:30:0a:08:5d:74:19:f4:35:98:03:
3c:d3:a1:a8:97:cc:8c:6c:83:ef:43:9c:e6:98:93:
2f:e9:05:cc:17:68:12:fd:8c:d3:0c:49:37:c6:ab:
cb:14:33:25:94:a1:51:61:a0:75:ba:b5:24:36:7d:
2b:5a:f5:24:e2:f1:4f:a9:4a:06:9a:e2:ec:18:20:
ea:c8:4e:4c:d8:99:af:9d:2f:5e:ee:e4:ac:a0:d9:
13:11:cc:05:85:70:df:41:fc:cf:8a:9a:65:8f:63:
6c:8b:12:57:ab:41:37:e1:e6:2c:fc:0d:d6:7b:a7:
16:97:83:f3:43:08:32:cd:a8:69:e5:2b:b0:20:48:
b9:a7:2c:f6:bd:67:10:15:c3:bc:ef:18:c2:2a:17:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:40:BF:DB:0D:27:9A:E9:5A:6D:07:E3:07:9A:AB:70:4C:D3:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/775ab6b3-be7e-3a90-922d-59c95f6de2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a0:90:d6:32:5b:df:9b:0a:97:fb:39:25:b6:c5:00:c4:90:
5e:3b:bc:db:33:5d:e6:30:11:70:39:06:40:bb:3e:3d:51:64:
e1:7e:67:7b:54:be:78:92:96:33:5c:c3:f5:85:aa:64:cc:da:
52:f2:db:c1:36:19:df:d1:e8:94:55:38:5d:67:78:7a:48:b2:
e4:6b:c7:4a:c5:32:ac:5a:f7:fa:f7:13:82:d2:b6:0f:b4:cb:
1f:3e:f8:4c:59:4f:37:fc:98:9f:f6:79:98:77:a0:c5:86:40:
dc:bc:65:21:44:40:a2:01:39:8c:48:6e:b3:bd:3b:27:8a:1a:
dd:34:ba:ea:2a:bc:2b:01:a8:00:ba:4c:a6:67:9f:57:78:3d:
dd:77:75:ed:fa:e4:6a:aa:8c:f5:e1:b2:66:a2:8e:37:21:41:
65:fa:db:b2:0d:79:06:f8:21:b4:91:ac:33:44:d5:48:2c:61:
2f:c8:37:da:3c:63:9b:33:4a:d3:99:15:70:ed:25:00:83:36:
50:12:b6:63:73:ec:67:97:c1:fa:84:7d:0a:e7:e0:10:46:03:
20:df:fd:bf:ea:5d:cc:27:a9:0e:73:ef:01:08:89:f2:10:b0:
5f:9c:bc:49:71:03:02:68:5e:f9:68:bf:ec:da:f0:d3:57:2a:
87:fa:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:36 2025 by rpki-client