Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f7e94a9-3ffd-38c9-aacd-78021eeaf942.roa
File: 0f7e94a9-3ffd-38c9-aacd-78021eeaf942.roa (raw, json)
Hash identifier: VD7XSd5FESiFqeT1ibeLyo9Yfxt2Lh7VaW7AH2SL2As=
Subject key identifier: CC:33:B1:FA:3B:BF:5E:CA:C0:28:87:02:57:75:FC:C4:55:68:F1:BA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848EA7DCA8CAB2B62B822FF7D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f7e94a9-3ffd-38c9-aacd-78021eeaf942.roa
Signing time: Mon 17 Feb 2025 19:59:30 +0000
ROA not before: Mon 17 Feb 2025 19:59:30 +0000
ROA not after: Sun 18 May 2025 18:59:30 +0000
asID: 834
IP address blocks: 23.26.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 16:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ea:7d:ca:8c:ab:2b:62:b8:22:ff:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 17 19:59:30 2025 GMT
Not After : May 18 18:59:30 2025 GMT
Subject: CN=7180a466-33a1-410e-94c5-35a0cd1d538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:ca:78:c7:e5:b5:ed:6d:e4:b9:f0:5e:99:
0f:48:cd:17:80:ac:77:38:f2:b7:bd:54:05:64:b1:
7d:10:d1:6d:bd:95:28:1f:46:a3:ae:34:7e:36:9a:
e2:6d:a8:14:f9:62:66:a2:bd:1a:f5:4a:2a:7f:47:
16:e8:c4:18:22:b2:59:9d:a0:18:2b:b2:76:98:dd:
33:73:27:52:c6:82:78:7f:a0:67:cb:01:2c:60:5a:
d9:66:3f:4d:f0:70:f6:22:d8:d5:cd:e0:e4:a1:12:
59:92:f8:92:98:c3:1b:86:14:78:7d:bc:6d:50:48:
0d:2a:bd:15:a1:36:19:15:f3:82:35:de:dd:16:59:
4f:7a:62:01:a9:86:88:26:d9:c1:71:1b:81:4a:48:
05:b9:e9:89:fb:07:51:a1:d0:4c:c3:e5:ae:60:b4:
1a:26:39:07:d3:cb:ed:f3:21:34:68:26:aa:e5:12:
e6:13:84:78:01:af:a9:4d:75:5d:4d:1e:3b:c8:6c:
d5:4b:fb:7e:8c:a6:05:fa:28:54:85:8b:f9:de:5b:
8e:8b:d3:3f:ff:1a:8d:03:b1:3c:59:df:97:92:de:
03:df:48:4f:8d:87:f7:fe:91:ac:f7:b8:07:49:54:
96:dd:df:ea:78:ae:96:a5:62:78:24:02:8e:61:e0:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:B1:FA:3B:BF:5E:CA:C0:28:87:02:57:75:FC:C4:55:68:F1:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f7e94a9-3ffd-38c9-aacd-78021eeaf942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:40:1b:86:ad:ee:36:50:d6:43:af:66:ac:c5:52:a9:b2:ee:
7f:f6:5b:b8:be:4c:fe:60:73:62:de:36:32:ff:a6:76:d0:0b:
85:9f:30:26:14:7d:e0:55:68:ab:67:0f:f4:6d:49:df:68:1e:
22:1b:7a:f5:0b:b1:b2:64:c4:08:ea:c5:c3:dd:37:c9:8c:c3:
3d:41:42:0d:be:5c:aa:8e:11:c2:91:6e:d7:ff:f1:02:1e:e8:
fb:d0:e0:7c:1f:60:74:65:df:d7:64:11:04:ce:74:a1:2a:11:
99:ed:e4:5f:a2:5c:4c:6c:ff:f2:81:b9:b9:2c:75:04:b1:75:
80:a7:35:64:93:a0:de:03:2a:12:07:5d:8b:e4:a5:f5:9c:b9:
c1:7f:ff:6e:58:64:c3:44:52:78:c6:95:ae:a3:a0:b5:79:4d:
30:28:f7:37:e7:4b:1a:59:2d:33:0b:4b:05:2a:31:f5:ea:c7:
c6:c0:c6:b5:da:cc:c5:95:d5:94:32:0e:d1:21:c9:bb:2a:ef:
da:a0:e7:a7:d1:f8:ce:1d:e3:21:47:da:31:5b:a7:e5:01:4e:
8f:d2:6d:06:25:88:93:c6:e5:3d:77:e3:59:62:ff:52:0e:1a:
00:78:0d:9d:5f:59:40:ad:f9:90:38:5b:59:a3:60:b3:f1:72:
fa:04:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:05 2025 by rpki-client