Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4802f4e-791e-3692-802e-f086d745ecb5.roa
File: b4802f4e-791e-3692-802e-f086d745ecb5.roa (raw, json)
Hash identifier: xnPDFr4KN6ebA1zxYQbi1pSk+B7CYn0pwTxynpcSylU=
Subject key identifier: 15:6D:8F:7B:28:3F:89:11:4E:D3:3B:34:EA:26:25:18:79:05:C8:47
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584A1D819F0C5F226E59F8C19180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4802f4e-791e-3692-802e-f086d745ecb5.roa
Signing time: Sat 07 Jun 2025 19:20:23 +0000
ROA not before: Sat 07 Jun 2025 19:20:23 +0000
ROA not after: Fri 05 Sep 2025 19:20:23 +0000
asID: 834
IP address blocks: 166.0.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 21:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:1d:81:9f:0c:5f:22:6e:59:f8:c1:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 7 19:20:23 2025 GMT
Not After : Sep 5 19:20:23 2025 GMT
Subject: CN=dd35cdf3-7c18-483a-812f-dbade5ec41b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:07:e3:f1:a8:aa:fc:f2:6f:69:56:5a:47:
ef:89:0e:10:48:44:14:5c:e5:16:f2:68:dc:d5:a6:
09:37:8f:c6:e3:91:f0:5d:71:fb:b7:e0:8e:99:60:
7a:aa:39:4a:00:22:29:67:44:b6:71:fd:ad:04:2b:
75:c7:0a:02:f8:7d:55:23:7d:0f:bd:04:1f:88:18:
95:d7:e5:bc:bd:dd:a5:52:25:59:d5:e0:a5:f9:97:
a1:6f:48:05:fc:18:02:af:09:62:33:22:1d:e7:c7:
f3:f4:b9:17:d8:22:c5:91:e2:a6:d7:3c:78:2f:b9:
42:81:f1:15:a2:ea:47:82:b1:cc:f2:d2:51:59:04:
34:1e:ae:30:51:bc:ee:1b:6d:02:bc:ae:74:2e:33:
af:bf:f5:fe:36:b5:64:f8:23:91:9f:96:0f:68:b1:
77:8a:22:29:42:53:42:30:9e:9c:cc:a8:30:5a:4c:
c8:d1:fc:51:2f:f4:a2:fe:54:cf:3b:0f:48:87:26:
ad:79:04:8c:77:84:90:7b:5c:12:e3:59:f6:99:c7:
ad:85:57:05:5f:28:bc:68:5c:87:50:af:b5:bc:e4:
cb:cf:b1:c7:8a:cd:1d:be:97:8b:fe:23:28:4f:94:
42:f3:22:a6:ce:72:bb:69:cb:a9:1f:1a:0c:73:76:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:8F:7B:28:3F:89:11:4E:D3:3B:34:EA:26:25:18:79:05:C8:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4802f4e-791e-3692-802e-f086d745ecb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e3:2f:80:04:cb:d6:f4:88:2f:cd:6c:3b:6c:0d:a8:cb:b6:
25:13:c6:25:bf:8f:95:04:cf:75:5a:b9:0e:d5:5e:c6:f5:f6:
c0:34:df:5b:a2:e7:bc:d6:f9:8e:f4:a0:70:23:d1:09:98:1f:
ff:df:f8:3c:1e:d5:02:01:40:7f:c1:61:ae:a4:c0:bb:8a:ff:
15:7c:da:7e:8e:4f:07:60:af:a7:d1:9c:a4:35:4a:aa:a2:2d:
65:66:ae:4d:4a:80:8d:dd:3a:a1:15:b4:02:1f:73:6d:bd:32:
b1:17:52:e5:af:36:5b:47:bf:29:06:3e:fc:a7:8b:55:d0:2d:
d1:24:bf:6b:c7:37:2b:8b:ef:2e:dd:4f:1f:49:60:be:61:ee:
1b:92:16:5b:19:ee:d2:c9:64:fb:49:3a:0f:b4:64:2a:d1:2b:
2f:23:c8:9e:7c:e8:1e:25:37:7b:94:13:ff:f7:95:16:df:10:
a2:48:1f:b7:05:3d:5f:90:7a:8c:4a:a4:72:7a:5f:a4:2f:c6:
b0:72:78:38:75:43:b6:b6:f2:63:55:89:4b:56:3c:93:cd:04:
94:66:c5:44:12:f9:5e:5b:40:e1:74:a9:53:3b:d5:6e:4a:bb:
50:d7:97:99:dd:e9:54:33:f1:97:85:b1:a2:c4:7c:b3:3c:dc:
46:5b:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:58 2025 by rpki-client