Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/266eebb4-69f9-3c49-8708-dfa9c55d6c55.roa
File: 266eebb4-69f9-3c49-8708-dfa9c55d6c55.roa (raw, json)
Hash identifier: NtJTS0/j3ZmZrsJ3z+rxemTd/G1m9TYdhzmQ3MwCk5U=
Subject key identifier: 06:DD:BB:8E:33:11:06:68:02:0A:92:3C:61:50:C3:59:FC:EC:86:40
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858488B53818259E2ECCB3BCD59C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/266eebb4-69f9-3c49-8708-dfa9c55d6c55.roa
Signing time: Tue 14 Jan 2025 17:52:30 +0000
ROA not before: Tue 14 Jan 2025 17:52:30 +0000
ROA not after: Mon 14 Apr 2025 16:52:30 +0000
asID: 834
IP address blocks: 23.26.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:53:81:82:59:e2:ec:cb:3b:cd:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 14 17:52:30 2025 GMT
Not After : Apr 14 16:52:30 2025 GMT
Subject: CN=0aef61db-61b3-4a0d-9686-3b012b74851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:af:49:8f:7f:c5:1e:6d:52:aa:a0:7f:f8:
be:fc:fa:8a:fb:4c:c1:44:03:7f:cf:e5:bf:8a:f7:
d5:81:17:eb:93:5b:ee:6f:ab:57:a8:f6:32:71:16:
c3:ab:7e:ab:80:af:90:9e:4d:93:d7:fd:6b:4c:55:
11:98:74:24:41:45:71:69:9f:10:04:f0:d0:81:fe:
0e:4c:50:d2:f0:75:03:05:61:80:e2:e1:73:92:d3:
2b:1b:45:ee:f4:44:d1:4c:36:ed:e5:d1:75:28:ec:
3f:59:57:73:f7:55:3b:17:fa:42:da:37:e2:4f:fd:
8b:92:32:5c:f9:02:98:65:46:7b:05:f5:d0:08:d2:
86:2f:01:db:7e:f4:61:20:05:14:98:50:49:05:e1:
0a:c3:64:0f:44:a8:84:39:95:c3:49:e7:10:50:c5:
21:26:71:42:e1:a5:9c:50:f2:77:01:28:0f:02:fc:
4e:4e:75:ee:59:3c:db:71:6e:44:06:60:ad:c3:47:
78:89:2b:f2:ab:f8:df:e5:40:cf:ad:64:df:7a:81:
cf:9e:5b:04:d3:12:e6:4c:8a:5a:96:f9:de:11:73:
1b:24:7e:bb:a3:43:a5:6b:da:80:ae:6a:a7:f0:e8:
92:69:5d:5c:05:73:6f:80:22:42:71:1b:bc:9d:6e:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:BB:8E:33:11:06:68:02:0A:92:3C:61:50:C3:59:FC:EC:86:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/266eebb4-69f9-3c49-8708-dfa9c55d6c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:bc:fa:9a:1f:4c:c4:82:cc:63:7c:5f:56:0b:93:db:25:c0:
5e:8f:d8:9d:27:56:95:de:c2:70:66:7e:29:96:0d:a4:1c:45:
32:49:2e:f5:5e:bc:43:56:2a:01:6d:25:36:a1:5e:26:40:6f:
c5:d7:06:98:c7:61:b7:70:88:52:61:83:e0:12:b3:36:a2:52:
32:34:eb:f3:36:0c:b1:79:97:55:5a:80:be:90:4c:f5:98:8e:
31:85:8d:74:d0:3e:37:82:4c:0a:59:d1:40:f4:50:71:88:19:
89:b7:bd:69:a0:f8:15:c0:22:ed:e7:71:dc:c4:51:62:af:bd:
11:ab:74:93:f6:36:b2:5d:c0:cf:52:98:7b:31:37:df:72:04:
3c:07:3a:ad:ad:55:67:3b:ce:40:24:b0:bd:43:1b:64:c6:12:
48:dc:4d:65:a7:98:82:cf:77:72:d2:81:91:44:9f:d8:93:36:
c7:ca:d0:e0:db:bf:26:31:a8:2e:5d:d0:d5:25:aa:12:33:ed:
67:c4:dd:0e:57:b7:9c:8f:55:e3:3a:40:1b:0b:9e:ca:e4:38:
d9:c1:fc:b9:fd:c8:2f:16:8b:89:a7:4e:be:9f:59:01:c2:99:
11:b0:46:d9:a3:67:d9:ee:da:23:ec:8d:1b:65:27:b0:68:ea:
2d:df:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:25 2025 by rpki-client