Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b5fd93c-5b38-32a8-bfc9-bb9bd6a4b002.roa
File: 2b5fd93c-5b38-32a8-bfc9-bb9bd6a4b002.roa (raw, json)
Hash identifier: rxZX7rwzXdHawsTQoCXjC9QS4KC01GyLwEKhIHEmXv4=
Subject key identifier: 72:2D:EF:D5:07:75:B8:54:9D:64:D8:BD:AE:5C:E9:6C:C8:34:59:69
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858490A4D9704DE5CD2DE0516BDE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b5fd93c-5b38-32a8-bfc9-bb9bd6a4b002.roa
Signing time: Sat 01 Mar 2025 05:28:15 +0000
ROA not before: Sat 01 Mar 2025 05:28:15 +0000
ROA not after: Fri 30 May 2025 04:28:15 +0000
asID: 834
IP address blocks: 23.26.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:4d:97:04:de:5c:d2:de:05:16:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 05:28:15 2025 GMT
Not After : May 30 04:28:15 2025 GMT
Subject: CN=7dc419bb-8b30-48db-8933-f5becb2f8114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:b1:d5:45:46:3e:23:f0:0f:0b:aa:2c:7c:
8e:0c:15:1f:d1:95:8f:06:8e:05:c5:f1:fe:e5:80:
57:02:de:7c:36:91:7e:ea:8f:db:16:0e:ce:17:d4:
f8:8d:3c:66:44:c3:57:a7:37:99:af:1a:5c:3b:42:
83:fd:ea:50:14:cd:af:4e:8b:89:f6:00:7d:a3:cf:
dc:94:8e:18:e7:af:31:4e:32:d4:ef:eb:f4:3d:bc:
dc:cf:12:7d:21:7c:32:2a:83:07:1a:3f:a7:3d:7f:
08:d9:a1:2b:83:d2:c7:1a:e3:e8:db:b5:2c:30:6b:
9b:af:83:62:03:b5:5f:db:40:76:9b:0a:bd:b4:d5:
16:b1:17:33:aa:21:f1:b4:c6:01:89:0d:d6:7a:40:
92:09:cf:ee:30:9f:13:8f:01:ec:96:87:e7:17:02:
9d:28:10:dc:ad:5c:8d:66:e4:05:78:2d:18:21:c7:
2f:6b:1e:26:33:2b:e4:1f:3f:58:27:87:22:a0:29:
2c:9b:1b:24:d1:79:25:45:7d:cf:01:02:3c:b9:6d:
fb:50:0c:37:e6:23:86:62:2b:df:59:b3:d5:a5:e2:
4e:81:2f:58:51:fa:f7:b5:d5:65:e3:13:f5:64:23:
2d:74:2e:24:d5:2d:26:23:b9:6e:cd:41:6a:d8:4b:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:EF:D5:07:75:B8:54:9D:64:D8:BD:AE:5C:E9:6C:C8:34:59:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b5fd93c-5b38-32a8-bfc9-bb9bd6a4b002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d0:fc:ea:af:74:60:78:f4:1b:25:3a:58:ef:6a:1d:34:a0:
c3:a2:22:7c:45:ea:22:99:02:9c:d2:7f:87:e1:b2:51:74:39:
aa:9f:d5:ef:18:dc:bf:11:f4:cc:21:a0:dd:86:23:b5:b1:56:
b8:d5:67:27:7d:19:0c:be:24:87:85:e7:60:fe:78:0b:0e:27:
56:be:1a:9f:46:2a:02:8c:cb:71:61:80:9e:9b:88:74:e8:b7:
e8:73:68:52:b9:de:b3:99:e6:3b:13:ec:a3:53:b0:ff:43:25:
ce:e2:0f:88:e4:ff:d3:b4:fb:d7:08:ad:72:5e:f0:3c:aa:4d:
a0:31:7f:84:dc:10:2d:0f:3d:49:2d:cd:46:d3:08:04:b3:c3:
a5:92:85:43:f4:c9:7d:f1:a6:45:c1:02:26:75:fd:20:90:c8:
0a:06:ac:1a:1e:be:1a:ce:b6:38:b7:92:07:1f:42:77:b2:0e:
f9:bb:60:c5:61:e9:4c:37:e6:cc:57:20:9d:a9:15:1f:6e:ae:
ed:30:63:17:88:f7:70:89:8a:11:2f:6b:ea:98:98:c6:f3:82:
99:e7:d6:4d:b8:c6:ab:f8:6b:b3:1b:8c:e4:e9:32:f4:78:5e:
80:99:cf:d6:76:4c:35:1d:93:48:a7:fa:2b:b0:a4:b4:59:bf:
04:d6:68:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkKTZcE3lzS3gUWveAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwMTA1MjgxNVoXDTI1MDUzMDA0MjgxNVowLzEtMCsGA1UEAxMk
N2RjNDE5YmItOGIzMC00OGRiLTg5MzMtZjViZWNiMmY4MTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7+x1UVGPiPwDwuqLHyODBUf0ZWPBo4FxfH+
5YBXAt58NpF+6o/bFg7OF9T4jTxmRMNXpzeZrxpcO0KD/epQFM2vTouJ9gB9o8/c
lI4Y568xTjLU7+v0PbzczxJ9IXwyKoMHGj+nPX8I2aErg9LHGuPo27UsMGubr4Ni
A7Vf20B2mwq9tNUWsRczqiHxtMYBiQ3WekCSCc/uMJ8TjwHslofnFwKdKBDcrVyN
ZuQFeC0YIccvax4mMyvkHz9YJ4cioCksmxsk0XklRX3PAQI8uW37UAw35iOGYivf
WbPVpeJOgS9YUfr3tdVl4xP1ZCMtdC4k1S0mI7luzUFq2Ev06wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHIt79UHdbhUnWTYva5c6WzINFlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmI1ZmQ5M2MtNWIzOC0z
MmE4LWJmYzktYmI5YmQ2YTRiMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfQ/OqvdGB49BslOljvah00oMOiInxF6iKZApzSf4fhslF0Oaqf1e8Y
3L8R9MwhoN2GI7WxVrjVZyd9GQy+JIeF52D+eAsOJ1a+Gp9GKgKMy3FhgJ6biHTo
t+hzaFK53rOZ5jsT7KNTsP9DJc7iD4jk/9O0+9cIrXJe8DyqTaAxf4TcEC0PPUkt
zUbTCASzw6WShUP0yX3xpkXBAiZ1/SCQyAoGrBoevhrOtji3kgcfQneyDvm7YMVh
6Uw35sxXIJ2pFR9uru0wYxeI93CJihEva+qYmMbzgpnn1k24xqv4a7MbjOTpMvR4
XoCZz9Z2TDUdk0in+iuwpLRZvwTWaKI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:58 2025 by rpki-client