Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6ec1a81-7fa8-3889-9ffb-07a1f72b0977.roa
File: c6ec1a81-7fa8-3889-9ffb-07a1f72b0977.roa (raw, json)
Hash identifier: In1W5zONJ/bKxNTkz1DEaZ099l+tNhEy/4/TGmtXV4Y=
Subject key identifier: 0F:EF:52:6F:A3:E6:25:10:34:2E:24:B8:C4:08:2D:A5:AC:3F:98:8D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841536B501A95975246751ABE60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6ec1a81-7fa8-3889-9ffb-07a1f72b0977.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Thu 26 Jun 2025 04:00:00 +0000
asID: 60707
IP address blocks: 166.0.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 22:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:53:6b:50:1a:95:97:52:46:75:1a:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jun 26 04:00:00 2025 GMT
Subject: CN=806b283f-7ce0-4cd1-b984-9a1fd208ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:d2:ec:91:2b:2b:09:ca:26:20:59:89:40:
ec:eb:d0:41:e7:66:5c:6c:c7:83:0f:62:0f:8a:01:
ea:3f:57:74:9d:6c:a3:d5:2d:43:0c:12:d7:14:e6:
ce:93:90:79:c5:16:bf:1e:21:91:9c:a4:cc:1a:eb:
de:f7:68:60:de:55:39:99:34:34:0f:76:66:53:08:
ea:6a:35:44:46:92:a5:5f:0e:a8:38:44:69:0c:69:
f9:d2:5e:a6:a1:cc:51:ae:5d:5d:54:79:c2:52:63:
bd:b5:dc:2f:a4:fb:dd:69:7d:6f:e6:23:95:34:27:
a2:23:50:a5:50:41:b9:60:7c:f1:a2:c9:ee:ad:20:
c1:0a:a9:ef:80:d1:d8:39:b6:fa:41:ca:79:d8:f4:
3c:76:ca:1e:33:0d:25:25:95:68:d1:fc:43:cc:57:
70:2e:f0:71:47:c3:f6:32:18:49:d8:7f:f7:f1:11:
d5:1f:8b:c3:f6:ed:4d:1f:e2:be:cc:55:a5:c7:db:
95:e5:e8:7a:c4:84:62:84:56:a1:c8:85:bf:b9:e2:
5a:9a:83:ad:8a:71:0e:65:09:c9:d4:f0:cd:c6:db:
0a:6f:f3:10:f3:f3:05:fd:87:4a:5e:3d:53:29:59:
5a:49:31:36:7d:4a:19:b3:a5:44:65:61:6e:5d:7b:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:52:6F:A3:E6:25:10:34:2E:24:B8:C4:08:2D:A5:AC:3F:98:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6ec1a81-7fa8-3889-9ffb-07a1f72b0977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:73:95:e9:b5:c1:7b:79:97:41:21:50:b9:aa:d8:ed:60:99:
5c:5f:04:9b:50:34:15:8c:ca:90:65:fc:38:3a:9e:f5:86:68:
1a:ca:e5:d1:b4:d5:93:9c:7c:0e:b1:ad:69:2c:19:c3:af:67:
15:a2:9c:e9:f4:86:18:eb:a6:38:81:ff:64:ae:f1:13:03:ab:
70:e3:cb:86:e6:5a:f8:6e:6c:bc:ec:00:6d:38:ea:97:cd:fa:
d5:19:60:97:4e:12:f1:e6:9b:82:a7:50:4f:98:42:00:c8:b1:
14:d7:97:80:29:23:8e:3b:8a:57:ef:01:2d:3e:55:33:dd:83:
2d:ce:86:f5:1b:9b:f5:8e:0c:b3:c0:09:01:a9:30:2b:01:07:
c0:8b:2f:c7:25:aa:75:ac:9f:c1:e7:9e:4d:ab:f4:5b:50:da:
2d:7f:4c:0f:7e:7a:6d:a4:8e:46:5d:10:72:b6:17:d0:6d:19:
ea:38:0e:f4:be:32:09:21:7d:45:d9:cc:a7:7d:77:c6:00:c7:
0f:c8:bf:f0:c1:98:c0:9e:99:a8:dd:91:86:08:90:df:bf:aa:
16:19:37:d0:c7:6c:8b:08:7c:cb:61:0a:4e:7f:e1:f1:05:d7:
db:69:66:44:82:c5:3b:ef:5a:5a:4e:1e:f4:df:b4:13:dd:bf:
d7:84:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:06 2025 by rpki-client