Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/220924cf-be9a-3c5a-8483-835bab9111a6.roa
File: 220924cf-be9a-3c5a-8483-835bab9111a6.roa (raw, json)
Hash identifier: cgSHzfNzoE7SVIhby266HCZDS7NExYlFOLudZxb28IM=
Subject key identifier: 66:F6:C5:31:98:BD:A5:92:8E:9F:10:CA:56:56:30:EC:57:9F:47:A5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584870407BFF031B5375A8088BE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/220924cf-be9a-3c5a-8483-835bab9111a6.roa
Signing time: Sun 05 Jan 2025 01:07:21 +0000
ROA not before: Sun 05 Jan 2025 01:07:21 +0000
ROA not after: Sat 05 Apr 2025 00:07:21 +0000
asID: 398781
IP address blocks: 23.26.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:40:7b:ff:03:1b:53:75:a8:08:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 5 01:07:21 2025 GMT
Not After : Apr 5 00:07:21 2025 GMT
Subject: CN=e600206c-2df2-4b12-9772-a21a40e76e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:07:bf:81:e9:47:de:40:43:bd:26:04:eb:
24:4f:96:c7:7b:b4:d5:85:de:11:10:b5:f7:81:fb:
48:b9:b8:01:4b:5f:72:7e:5d:8f:64:ad:a4:70:27:
2e:ae:ff:93:80:8d:7b:94:b4:55:85:10:4f:b0:66:
ff:42:88:69:65:02:51:16:77:a3:27:ed:cf:39:80:
b8:f1:b9:14:39:99:a8:16:83:80:1b:6b:40:87:32:
c6:a2:87:c4:fe:dc:39:4c:be:45:26:98:23:4f:14:
0a:92:b4:86:2a:d0:a5:ed:de:1d:78:15:43:4b:25:
32:46:89:d6:f0:18:4c:74:29:dd:4d:26:99:d9:23:
80:0b:ce:b4:a7:2f:8c:39:9e:0d:8f:fb:38:ab:06:
0d:46:d3:1d:80:3c:39:28:87:00:cc:1f:d1:54:d0:
41:5a:82:b5:a4:79:b5:e1:b1:8a:90:1c:2b:d5:5f:
0d:25:71:a6:cf:19:76:de:70:8f:5f:79:8e:84:95:
58:a0:9e:8a:a7:c0:04:ef:13:db:8a:14:49:e2:1c:
b6:dd:57:98:40:84:a6:79:e5:5a:76:46:9b:89:d6:
0b:ba:20:14:6e:08:81:1d:37:79:f3:90:ca:c8:30:
41:a8:be:7e:0d:88:75:6b:06:f8:ef:95:a1:dc:96:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:C5:31:98:BD:A5:92:8E:9F:10:CA:56:56:30:EC:57:9F:47:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/220924cf-be9a-3c5a-8483-835bab9111a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ac:b0:4a:f8:bc:2e:02:75:5e:8a:22:09:d7:78:3c:bb:aa:
bb:18:77:26:d9:d2:fe:68:77:71:ab:e9:4c:d5:71:c8:ca:ed:
7b:78:6c:f3:c0:0b:ed:b4:bd:c3:da:f2:39:1f:61:02:21:16:
df:bd:db:b7:63:ba:c3:1e:99:e6:2d:37:84:28:e5:09:78:a5:
8e:87:ca:7f:05:3a:0f:b9:7f:50:79:d3:9a:21:19:c9:60:51:
b8:de:55:38:83:ed:4b:3f:b8:32:b1:84:b8:7c:9f:df:aa:b4:
fd:53:e3:15:f7:95:7c:09:fa:9b:66:3d:39:6a:46:c2:26:8a:
52:83:2e:66:61:5e:1b:30:af:80:00:31:2b:48:cc:34:0e:45:
48:fc:d0:18:78:64:46:68:31:cc:a4:7a:fc:5d:98:7c:d7:65:
fc:da:80:83:97:3c:91:40:07:f5:a0:18:8b:13:7e:98:eb:c3:
42:2d:8b:6e:ac:63:6b:2c:3c:c9:b1:d9:5b:55:be:35:04:24:
cd:cc:9e:42:1a:af:b9:c0:cd:2b:a4:0f:96:39:61:3f:c4:d3:
c5:f3:3d:59:5a:72:a1:84:b7:a8:0c:26:90:96:ec:9b:39:67:
58:c3:92:b1:87:16:04:9a:e8:e2:ea:b0:02:78:87:de:88:a9:
b9:a5:ff:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwQHv/AxtTdagIi+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEwNTAxMDcyMVoXDTI1MDQwNTAwMDcyMVowLzEtMCsGA1UEAxMk
ZTYwMDIwNmMtMmRmMi00YjEyLTk3NzItYTIxYTQwZTc2ZTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLoHv4HpR95AQ70mBOskT5bHe7TVhd4RELX3
gftIubgBS19yfl2PZK2kcCcurv+TgI17lLRVhRBPsGb/QohpZQJRFnejJ+3POYC4
8bkUOZmoFoOAG2tAhzLGoofE/tw5TL5FJpgjTxQKkrSGKtCl7d4deBVDSyUyRonW
8BhMdCndTSaZ2SOAC860py+MOZ4Nj/s4qwYNRtMdgDw5KIcAzB/RVNBBWoK1pHm1
4bGKkBwr1V8NJXGmzxl23nCPX3mOhJVYoJ6Kp8AE7xPbihRJ4hy23VeYQISmeeVa
dkabidYLuiAUbgiBHTd585DKyDBBqL5+DYh1awb475Wh3JbRSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGb2xTGYvaWSjp8QylZWMOxXn0elMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjIwOTI0Y2YtYmU5YS0z
YzVhLTg0ODMtODM1YmFiOTExMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6ssEr4vC4CdV6KIgnXeDy7qrsYdybZ0v5od3Gr6UzVccjK7Xt4bPPA
C+20vcPa8jkfYQIhFt+927djusMemeYtN4Qo5Ql4pY6Hyn8FOg+5f1B505ohGclg
UbjeVTiD7Us/uDKxhLh8n9+qtP1T4xX3lXwJ+ptmPTlqRsImilKDLmZhXhswr4AA
MStIzDQORUj80Bh4ZEZoMcykevxdmHzXZfzagIOXPJFAB/WgGIsTfpjrw0Iti26s
Y2ssPMmx2VtVvjUEJM3MnkIar7nAzSukD5Y5YT/E08XzPVlacqGEt6gMJpCW7Js5
Z1jDkrGHFgSa6OLqsAJ4h96Iqbml/+8=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:34 2025 by rpki-client