Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ccf7e4-5a0a-3145-a2a7-52a33a6ffe4d.roa
File: 26ccf7e4-5a0a-3145-a2a7-52a33a6ffe4d.roa (raw, json)
Hash identifier: 5bWc7ToAErF5Bq39acbiUjuRTHPaAjCQ15T/Bv+rx44=
Subject key identifier: 22:31:6D:4A:AD:0F:DA:3D:C0:DB:6E:40:44:20:7E:3A:49:FE:73:86
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584945B7834095EF06F6D2F8F280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ccf7e4-5a0a-3145-a2a7-52a33a6ffe4d.roa
Signing time: Sat 22 Mar 2025 12:14:21 +0000
ROA not before: Sat 22 Mar 2025 12:14:21 +0000
ROA not after: Fri 20 Jun 2025 12:14:21 +0000
asID: 30036
IP address blocks: 173.23.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Mar 2025 14:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:45:b7:83:40:95:ef:06:f6:d2:f8:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 22 12:14:21 2025 GMT
Not After : Jun 20 12:14:21 2025 GMT
Subject: CN=fa74abd0-c768-4320-ac7d-ae519b585a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:dd:55:5f:13:90:14:8d:2d:f9:21:b6:3e:
5b:0b:d3:40:5f:07:c1:a4:d2:70:e0:c9:d3:21:cb:
5e:ea:2c:3b:57:3a:20:1f:5c:6f:05:af:00:fe:b6:
67:50:62:ac:df:26:10:c4:22:81:71:85:38:7e:30:
8f:84:66:d1:a7:0c:af:f0:f6:5a:0c:06:e3:9a:99:
6c:59:84:4a:14:ac:e0:10:6d:33:42:b6:42:62:66:
bd:1b:9f:1e:c1:4d:34:e9:48:27:e9:1a:5d:b4:bd:
6d:a2:12:20:69:43:02:8c:b2:8f:a5:9a:3d:0b:32:
4a:ea:b9:58:92:e8:fa:b8:dc:b6:12:49:02:77:cf:
a6:75:26:25:a9:49:51:78:3d:0e:c0:c5:0d:18:0a:
8b:18:c1:3b:29:8d:90:8d:36:39:21:0f:d2:aa:9c:
64:ab:0d:2b:28:54:8b:73:88:8a:f1:89:18:68:68:
2a:d1:bf:0c:59:7e:a1:85:db:7b:fd:ef:52:f0:f6:
f8:68:04:70:92:b8:e1:a1:5c:69:1c:a4:af:9f:8a:
c2:ee:ac:d1:02:a3:3f:5f:18:ef:71:34:ec:3b:4c:
cf:38:ce:51:c1:d3:a6:15:3e:fd:32:1c:af:68:ae:
08:7e:c4:81:17:47:8b:52:db:9d:d0:63:f7:6a:7b:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:31:6D:4A:AD:0F:DA:3D:C0:DB:6E:40:44:20:7E:3A:49:FE:73:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ccf7e4-5a0a-3145-a2a7-52a33a6ffe4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b9:4c:dd:e2:af:73:15:43:c3:fa:42:35:95:ca:f7:41:bb:
ad:26:19:2b:5c:09:e6:65:af:e2:75:0b:09:43:9a:c0:ff:a7:
91:5a:d0:b6:3b:17:cb:26:a5:af:ff:2c:16:14:c5:7e:c8:f5:
a9:74:55:9f:0c:ab:c1:fb:71:e3:61:42:7f:77:2d:86:21:04:
81:3d:0f:ee:75:cf:d1:70:c5:c5:07:2b:9d:c9:14:bc:40:30:
14:09:64:83:5e:68:36:30:84:24:e8:bd:a0:47:cd:70:c8:b9:
6e:cd:16:3f:b7:5e:dd:05:75:c9:70:e4:3e:5b:91:1c:ee:d1:
39:58:fa:a5:ff:78:0b:13:61:90:6d:06:2a:fc:4d:27:89:a2:
11:50:0a:7c:0e:d9:ec:c7:06:e1:c0:40:fe:ce:e1:73:c2:70:
4f:6d:9b:af:bc:86:e4:13:d8:47:4a:b3:aa:9d:db:3e:d7:c3:
a9:da:78:09:02:80:46:e2:70:b5:12:ba:a7:54:17:15:67:e8:
1f:37:ab:0e:ea:47:da:7a:ff:d1:a1:5d:0e:76:34:eb:5c:ca:
d1:1a:d5:c8:8e:8a:8a:66:cf:a8:8b:ee:2e:94:2b:b7:35:b5:
55:76:7e:20:28:d4:3a:53:8e:53:81:15:cc:9d:cb:47:08:c6:
dd:df:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:18:16 2025 by rpki-client