Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a88abce-d6a9-3577-8e58-703ca0f7405c.roa
File: 5a88abce-d6a9-3577-8e58-703ca0f7405c.roa (raw, json)
Hash identifier: Y6nLGeEeKeajsxcE0seXfK8GLDzDZ0n/8gWmZ2OOmIA=
Subject key identifier: CD:CC:EE:78:60:A0:DE:18:70:5B:C2:0C:46:8A:66:C4:20:E9:71:5E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842A89E72D4C0155639389B6380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a88abce-d6a9-3577-8e58-703ca0f7405c.roa
Signing time: Tue 25 Jul 2023 01:00:17 +0000
ROA not before: Tue 25 Jul 2023 01:00:17 +0000
ROA not after: Mon 23 Oct 2023 01:00:17 +0000
asID: 397423
IP address blocks: 23.26.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a8:9e:72:d4:c0:15:56:39:38:9b:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 25 01:00:17 2023 GMT
Not After : Oct 23 01:00:17 2023 GMT
Subject: CN=ff17baed-7e4a-49ba-9a68-99bcb0116932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:06:d8:30:10:fa:c3:77:65:b3:39:90:62:
0e:66:92:ac:c0:4b:fe:f9:15:b9:77:75:f7:1f:e4:
76:83:4a:26:fd:04:54:1e:27:37:4e:b0:8b:f6:41:
54:b1:d0:ae:c0:db:29:5e:c0:4a:f6:50:06:b7:ab:
73:f2:b4:03:ca:0f:b0:2c:d7:b6:15:4f:7a:f5:79:
97:ec:3a:3f:7a:c9:99:a6:57:38:f3:45:20:10:64:
89:10:e7:ee:e5:13:a8:6c:bc:93:3d:97:04:76:c5:
87:13:32:c4:7b:33:69:3e:2d:cc:fe:bd:ee:5b:7c:
14:3d:06:9d:3b:db:f1:83:72:84:90:45:24:a4:7e:
dd:db:8b:66:e6:d7:48:4c:f3:37:c8:bf:c4:5e:72:
dc:4f:0e:8b:7e:0e:80:2b:f1:c3:2e:f5:5a:af:76:
49:8a:e5:6e:df:5f:62:f8:84:73:2f:1b:6b:32:bd:
36:75:7d:86:4e:09:d3:4a:85:38:aa:28:7a:f2:9d:
53:df:3d:4c:d4:8a:e3:62:a6:b4:c4:26:76:1b:6d:
a5:c3:af:2f:10:dd:67:d3:68:6e:fc:2a:18:70:58:
ae:16:64:9e:90:b8:3d:ff:c4:6d:68:74:46:6e:71:
07:c4:e1:a1:fd:23:84:a3:39:f2:81:a0:a5:ac:f1:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:EE:78:60:A0:DE:18:70:5B:C2:0C:46:8A:66:C4:20:E9:71:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a88abce-d6a9-3577-8e58-703ca0f7405c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:e0:a9:c8:59:53:62:c9:ff:b2:b4:5a:76:5b:6a:8c:e0:22:
b0:c0:5a:cb:02:43:80:94:0d:f3:2e:98:c8:8a:65:96:ed:7a:
f9:ed:9a:2f:0d:99:f5:8f:69:d5:16:a2:24:cc:61:b7:53:fe:
0f:48:bb:e1:3a:3f:70:5c:75:ad:e0:ca:6e:1d:10:4b:a9:25:
1c:4e:c0:79:79:c4:67:ca:fe:ca:2a:7e:46:ea:78:74:b7:53:
29:b7:52:cf:c2:64:43:d8:29:cb:30:2f:d1:16:cb:6f:32:77:
36:52:7e:b8:02:37:1d:eb:c4:22:14:72:00:35:92:bd:4c:1f:
44:bf:6b:00:a0:ee:9e:fd:70:cb:f6:48:0d:64:9e:fc:9b:3e:
d1:b2:a0:d0:f5:88:ab:7e:95:9b:32:8e:3e:44:30:b3:90:5d:
8c:a8:51:a1:35:6e:3b:5c:0a:6d:83:dc:95:36:15:b4:26:fe:
8a:66:03:15:41:e1:a2:f4:bc:7e:2f:c6:05:b7:df:58:4e:6e:
83:f6:6d:8f:a2:fc:bd:eb:ef:fc:f4:35:d8:5f:50:80:8c:6e:
24:67:87:c0:00:aa:34:4f:06:77:76:8e:05:7d:51:75:29:0a:
58:95:f1:b0:65:f5:3b:13:5b:3a:51:f0:65:01:33:f1:5b:1e:
e1:72:c2:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKonnLUwBVWOTibY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcyNTAxMDAxN1oXDTIzMTAyMzAxMDAxN1owLzEtMCsGA1UEAxMk
ZmYxN2JhZWQtN2U0YS00OWJhLTlhNjgtOTliY2IwMTE2OTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+AG2DAQ+sN3ZbM5kGIOZpKswEv++RW5d3X3
H+R2g0om/QRUHic3TrCL9kFUsdCuwNspXsBK9lAGt6tz8rQDyg+wLNe2FU969XmX
7Do/esmZplc480UgEGSJEOfu5ROobLyTPZcEdsWHEzLEezNpPi3M/r3uW3wUPQad
O9vxg3KEkEUkpH7d24tm5tdITPM3yL/EXnLcTw6Lfg6AK/HDLvVar3ZJiuVu319i
+IRzLxtrMr02dX2GTgnTSoU4qih68p1T3z1M1IrjYqa0xCZ2G22lw68vEN1n02hu
/CoYcFiuFmSekLg9/8RtaHRGbnEHxOGh/SOEoznygaClrPETHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3M7nhgoN4YcFvCDEaKZsQg6XFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWE4OGFiY2UtZDZhOS0z
NTc3LThlNTgtNzAzY2EwZjc0MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPgqchZU2LJ/7K0WnZbaozgIrDAWssCQ4CUDfMumMiKZZbtevntmi8N
mfWPadUWoiTMYbdT/g9Iu+E6P3Bcda3gym4dEEupJRxOwHl5xGfK/soqfkbqeHS3
Uym3Us/CZEPYKcswL9EWy28ydzZSfrgCNx3rxCIUcgA1kr1MH0S/awCg7p79cMv2
SA1knvybPtGyoND1iKt+lZsyjj5EMLOQXYyoUaE1bjtcCm2D3JU2FbQm/opmAxVB
4aL0vH4vxgW331hOboP2bY+i/L3r7/z0NdhfUICMbiRnh8AAqjRPBnd2jgV9UXUp
CliV8bBl9TsTWzpR8GUBM/FbHuFywhU=
-----END CERTIFICATE-----
Generated at Fri Sep 1 14:06:02 2023 by rpki-client on console-fra.rpki-client.org