Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c21b19b-6e13-3ef6-a3d0-991c7422942f.roa
File: 2c21b19b-6e13-3ef6-a3d0-991c7422942f.roa (raw, json)
Hash identifier: ClW9Dcz3lKgkRJ22YN6OYR42bmSzMVlOjQelI+KzeDo=
Subject key identifier: A2:3F:D6:6C:FA:55:CE:05:5C:48:D3:0E:54:68:2D:EB:47:78:14:9C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF825880D6CEA843FF0080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c21b19b-6e13-3ef6-a3d0-991c7422942f.roa
Signing time: Wed 05 Feb 2025 20:03:23 +0000
ROA not before: Wed 05 Feb 2025 20:03:23 +0000
ROA not after: Tue 06 May 2025 19:03:23 +0000
asID: 11798
IP address blocks: 23.26.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:82:58:80:d6:ce:a8:43:ff:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:23 2025 GMT
Not After : May 6 19:03:23 2025 GMT
Subject: CN=623a6d87-e649-4273-af48-33b1a2883817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:cc:d7:d8:a1:65:b0:28:43:4d:2f:82:12:
db:89:f2:1d:59:d6:4c:5e:1b:c1:83:b1:28:98:58:
e5:86:ae:77:61:01:50:51:5b:06:df:13:2c:df:21:
a4:3f:9c:cb:79:8d:da:fd:9e:b8:95:a6:e8:23:aa:
20:ff:b1:49:5d:18:d2:6d:93:b4:90:89:ef:c6:cb:
4d:87:95:8b:ad:c8:57:81:eb:e7:4a:5d:e2:f7:ac:
59:75:06:50:fb:aa:62:e3:51:b1:a1:6b:d1:77:87:
5b:c7:86:4e:c0:de:c7:72:4d:25:63:c4:d5:3d:ae:
5d:85:27:2b:17:8d:e4:92:fe:5a:06:c6:58:f3:f1:
ce:de:1b:e0:c6:09:f5:bd:f3:b9:b2:76:fd:6d:f9:
b0:ee:ac:eb:69:ab:fd:0d:dd:e4:c4:0c:e0:b9:cc:
e6:e0:10:88:00:25:9b:5f:af:13:fc:cf:41:75:2f:
35:d8:67:99:e2:ba:27:ae:a0:57:9e:8e:b0:0c:0c:
6d:4c:1a:47:65:b1:f3:27:97:e8:5d:2b:aa:c8:b3:
25:fc:e0:76:06:22:8a:17:3e:92:19:c0:55:08:51:
5a:f7:c8:c7:f3:81:75:ea:ed:f0:d6:4b:9a:b9:17:
5c:1c:68:dd:e0:01:b6:d9:07:d5:5c:6d:7d:c3:ba:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:D6:6C:FA:55:CE:05:5C:48:D3:0E:54:68:2D:EB:47:78:14:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c21b19b-6e13-3ef6-a3d0-991c7422942f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1c:0c:6a:30:fa:75:6e:d5:12:81:36:db:1d:da:38:90:30:
57:cf:07:9d:27:7f:e5:5d:52:bd:e6:5f:b9:40:38:19:c9:2d:
c0:4d:1e:bd:2f:6f:76:a9:1a:62:0d:dd:ec:6d:d2:59:c7:47:
9a:ff:54:47:30:d2:1d:94:50:84:50:9b:51:c8:f5:48:bc:d3:
6f:5b:e9:0f:c8:2b:b5:6d:6e:8b:d2:4f:85:e3:44:9d:d0:41:
fe:00:12:38:e1:65:20:35:b0:19:7d:5c:a8:f9:72:ce:93:70:
b9:b9:21:58:4f:97:02:b1:42:a1:c0:1f:43:51:6c:ae:99:7e:
ec:2f:da:a6:f3:35:db:7d:1c:5c:a3:80:dc:b4:97:0b:e9:51:
75:9d:58:c4:40:57:87:6f:86:6f:a6:77:d5:33:4a:d2:42:42:
08:0f:df:57:01:6e:16:aa:dd:d6:06:fe:81:d1:d5:4b:ab:7d:
0a:48:61:43:3a:ca:ad:9f:92:1e:32:37:44:36:11:44:fe:06:
95:08:fb:c6:fd:60:4c:77:2e:7d:ba:6f:2e:d6:c8:65:9b:6f:
0a:e5:33:86:6c:e9:a9:7d:9e:f4:ef:b7:9b:ac:c8:ad:1a:cc:
23:41:cc:67:c1:12:19:10:43:b3:2b:23:69:07:ee:d7:53:8f:
62:13:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 21 22:57:44 2025 by rpki-client