Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e07025-aa2b-3cd1-84c8-2a56837b4e5d.roa
File: 28e07025-aa2b-3cd1-84c8-2a56837b4e5d.roa (raw, json)
Hash identifier: So2djc0YRxxWKKwJFm5HPUhpaWFIg6qBswbSX/lHRKg=
Subject key identifier: AC:18:FF:21:DE:81:4F:F4:31:4A:31:03:74:E7:D9:03:42:93:EC:64
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849115E19479D40B6058246CB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e07025-aa2b-3cd1-84c8-2a56837b4e5d.roa
Signing time: Mon 03 Mar 2025 18:12:10 +0000
ROA not before: Mon 03 Mar 2025 18:12:10 +0000
ROA not after: Sun 01 Jun 2025 17:12:10 +0000
asID: 401152
IP address blocks: 23.26.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 18:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:5e:19:47:9d:40:b6:05:82:46:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:12:10 2025 GMT
Not After : Jun 1 17:12:10 2025 GMT
Subject: CN=629aca83-302d-46df-9018-620559e42a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:68:49:11:19:a2:a7:2c:f7:f5:27:b3:81:
56:a0:e4:19:c6:fd:cc:07:e9:ed:2a:cd:b8:7f:9c:
56:4b:06:a8:37:09:c6:65:9c:7f:81:f1:12:c3:52:
bb:45:21:d9:fb:3c:04:93:6e:db:e0:36:79:c6:8b:
f6:a3:5e:fc:71:d8:c1:c0:b3:e1:51:19:5f:6b:5b:
90:3c:35:b5:a3:d5:57:ce:62:11:d8:52:e1:84:fa:
85:59:86:dd:77:12:9e:a2:08:1d:82:27:8f:9b:f1:
4e:92:42:fc:fe:b6:ca:8e:2b:ff:44:0b:b1:b8:ac:
49:66:bc:ba:58:41:87:1c:17:69:1d:d1:40:1d:a7:
82:8b:02:24:d8:18:a5:fb:31:11:d6:74:42:83:f9:
b5:d1:8f:d5:98:71:7d:0f:c5:95:4f:00:62:5e:e9:
79:38:70:ed:b3:50:31:80:62:f3:e0:3c:c0:2c:7c:
bd:ac:be:c0:16:ac:f5:8a:57:d1:83:e3:c4:69:8d:
2a:56:2c:2e:2f:90:64:c7:4a:a7:fc:9a:9e:ef:9c:
e8:4a:7e:07:74:0d:1f:ef:76:ab:eb:95:5e:39:33:
d3:33:63:3b:58:c9:3f:3b:a6:c2:8b:8d:e3:29:52:
02:e1:7c:84:ef:00:fd:c5:bb:1f:35:78:ea:d9:ff:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:FF:21:DE:81:4F:F4:31:4A:31:03:74:E7:D9:03:42:93:EC:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e07025-aa2b-3cd1-84c8-2a56837b4e5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2a:08:2b:f3:6e:66:64:ff:bb:bd:9b:4e:50:31:e0:01:f2:
3a:af:18:37:3f:6f:e3:39:bd:31:af:60:8e:4f:ba:4c:01:cb:
d7:87:be:df:0e:d1:33:c3:67:e4:22:3a:57:b2:d7:f1:08:18:
a3:a5:a2:d1:6d:81:04:77:d9:d1:68:bc:6f:62:58:77:87:98:
71:33:4f:b7:bb:e7:10:ac:b7:b0:85:23:8c:bb:ce:05:7c:98:
65:9b:c7:2f:f1:2f:c4:69:b4:0e:00:3a:21:b2:b5:de:d3:5d:
83:55:58:9e:94:00:6d:4b:ae:a9:91:17:16:f0:2b:30:86:6b:
f4:54:8c:2a:ff:9b:9b:c2:02:b2:86:97:b7:de:6f:d4:8a:17:
99:d3:74:c0:e0:1a:71:02:93:6f:78:8c:c2:24:fb:7b:ab:b2:
67:1e:f7:94:9f:c8:af:4d:df:89:01:0d:f8:8d:e3:f3:58:eb:
22:f5:c5:cc:ec:88:98:65:81:71:23:22:f6:5d:29:15:ea:7c:
72:c5:d1:71:be:47:40:da:14:ee:76:d1:18:a1:d5:c9:0f:eb:
4d:c3:99:35:cc:f1:fe:68:15:23:a4:df:80:b6:c3:2b:1b:dd:
7e:4e:4b:9c:fe:d7:33:e5:52:9b:74:3d:05:ad:07:b1:b5:ac:
d3:71:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:29:34 2025 by rpki-client