Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb8ac9e-d161-33cf-b6f9-897fa1f961b3.roa
File: 2cb8ac9e-d161-33cf-b6f9-897fa1f961b3.roa (raw, json)
Hash identifier: m/jRBK/CyaPKWquqNZ1GuNzcxg+KPIkaiRGPWf7a2M4=
Subject key identifier: 88:05:EA:92:C9:15:0E:BC:2B:3B:41:13:59:03:53:F9:ED:66:F3:7B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858486D905F2BA5DFAC1FC12B2480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb8ac9e-d161-33cf-b6f9-897fa1f961b3.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 29802
IP address blocks: 23.26.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5f:2b:a5:df:ac:1f:c1:2b:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=a0428e68-5caa-462a-81fe-7e1a1be7710b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:89:9d:b6:15:2a:e3:21:97:f4:88:23:8f:
5f:f2:22:15:4d:4d:ee:ed:d1:bf:17:76:c3:24:14:
68:a3:77:08:4f:21:e9:54:68:c5:61:23:1f:51:38:
fb:eb:7e:46:b7:34:d9:86:89:cd:95:a4:0f:f1:88:
8f:7c:2e:30:1c:f5:98:67:8c:7c:d4:62:46:a7:55:
03:26:34:55:c9:9d:1a:25:31:6a:41:ab:dc:99:53:
37:a2:d0:c2:23:f2:23:61:54:92:fd:a3:51:bb:77:
cb:78:dc:d9:ca:7a:0e:70:d0:34:13:d2:97:28:78:
16:d4:0c:1f:69:e9:4d:bb:5a:76:5f:3e:30:26:7d:
b2:df:15:39:34:cc:78:03:cc:73:2d:c4:19:62:bc:
6e:1f:ec:19:ef:96:fd:18:1f:92:54:ef:ec:00:a5:
95:45:2e:89:03:ae:99:b9:bf:6a:ca:55:92:4c:67:
55:f0:13:20:b7:a4:92:6f:03:d9:97:73:96:2b:cb:
80:f5:7f:be:36:2d:ac:67:4c:d7:1c:5e:2b:72:af:
a8:18:e0:8e:27:de:11:86:dc:4e:1c:03:46:bc:fb:
9e:63:ab:94:14:71:cb:11:0d:ac:54:c1:62:a0:a7:
f7:98:ff:0a:84:61:4a:2a:c7:20:f1:42:26:f4:40:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:EA:92:C9:15:0E:BC:2B:3B:41:13:59:03:53:F9:ED:66:F3:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb8ac9e-d161-33cf-b6f9-897fa1f961b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1a:e2:c8:33:88:86:f6:ed:0e:0b:3e:3b:e4:4f:76:8c:ab:
93:e6:84:bb:9a:1a:36:24:17:9f:29:af:95:02:2a:dd:0d:43:
0c:61:49:14:e8:e4:eb:bd:4d:a6:87:eb:b6:c0:e3:e0:ce:3b:
4a:c1:9c:74:65:5e:9e:d2:0e:39:dc:c0:6f:76:51:5d:3c:95:
00:2c:b6:c9:0f:b9:ec:ac:95:f2:dd:26:d2:e7:d5:9a:71:50:
8d:c4:9d:3a:31:8f:f4:cb:43:19:f9:4d:49:95:01:00:ae:81:
ae:f4:69:a0:12:22:8b:db:6b:58:a1:4c:c4:06:72:4e:57:94:
80:65:b2:e2:d5:36:9a:f6:d6:50:19:4e:97:65:e6:8e:e0:15:
6f:92:20:06:51:65:6a:bf:03:9c:e8:f5:df:0f:28:62:b1:b5:
41:dc:76:94:7f:ae:54:b1:f9:6b:0d:e8:9a:ab:aa:93:3a:9b:
5f:82:4d:27:74:28:cb:30:b3:3c:b8:7a:62:e0:08:3b:db:99:
79:0a:54:b0:49:cc:2f:04:5a:2f:86:7e:d8:97:fa:9e:65:d9:
d9:4f:dd:d6:b5:01:79:4d:23:0f:0b:6c:4c:7b:af:d8:a6:53:
3b:24:44:c8:5b:57:4a:18:f6:83:d1:be:71:5b:c2:bb:69:11:
bb:36:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:07 2025 by rpki-client