Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/585b582d-2c6a-3f2c-9e30-d693a089cb53.roa
File: 585b582d-2c6a-3f2c-9e30-d693a089cb53.roa (raw, json)
Hash identifier: EwA0kcNseDleQaj/g5kcx0QsD8wr1lwfYnz1o9XZK5w=
Subject key identifier: EB:F1:75:7D:4B:4C:7A:91:B7:CC:35:B8:02:51:86:72:43:09:6E:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D6BB59AD57E28A2E2A6B9900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/585b582d-2c6a-3f2c-9e30-d693a089cb53.roa
Signing time: Mon 10 Feb 2025 18:07:22 +0000
ROA not before: Mon 10 Feb 2025 18:07:22 +0000
ROA not after: Sun 11 May 2025 17:07:22 +0000
asID: 834
IP address blocks: 23.26.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:bb:59:ad:57:e2:8a:2e:2a:6b:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 18:07:22 2025 GMT
Not After : May 11 17:07:22 2025 GMT
Subject: CN=3f4b7b3c-672e-43ab-85d9-27f7916a9cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:b7:a9:30:3e:81:f9:2d:8f:8e:fc:f5:c3:
1f:09:bf:ba:3a:fe:a8:9b:8c:61:92:90:dd:ef:71:
d2:f4:25:80:86:a9:0a:29:b8:66:2d:f1:64:34:59:
a9:0e:b1:0b:c4:9d:d8:19:c0:ee:f5:13:87:a5:e8:
86:43:a2:ef:a5:fd:51:73:ca:c5:46:02:92:12:0f:
6f:22:3e:e6:23:88:e5:7a:f6:e9:64:c0:bb:77:72:
83:a6:c8:8f:66:22:44:34:77:a8:24:87:f4:f1:04:
0a:71:f8:c6:af:49:b7:8a:f7:d2:c6:76:e3:b2:29:
f0:f7:d6:7c:d0:55:e2:fa:33:7c:b8:4b:a2:b9:3a:
35:4d:c9:db:2e:51:67:0a:e1:63:85:83:bc:e8:98:
49:24:f9:d4:ae:4b:54:b3:da:cc:30:06:1f:b1:f1:
78:2e:06:b6:0f:34:6c:3d:3e:12:03:37:cc:ae:e4:
47:ae:2f:c0:a3:a4:c6:54:db:ac:00:1d:32:c4:1c:
eb:88:17:ff:2b:e3:d8:79:31:3c:e5:b4:a7:46:e5:
07:7d:09:03:37:19:70:ca:a7:d4:f5:0b:d1:b3:ab:
10:67:ca:89:84:7b:51:b0:b3:c6:14:f2:16:02:74:
ec:05:07:81:b7:c7:96:c2:05:80:09:0b:3f:c9:4f:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:75:7D:4B:4C:7A:91:B7:CC:35:B8:02:51:86:72:43:09:6E:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/585b582d-2c6a-3f2c-9e30-d693a089cb53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:fa:41:50:02:e9:3b:b8:f9:34:eb:be:64:48:f2:da:bd:cf:
09:d7:78:aa:64:25:eb:6a:c1:38:25:d2:a3:48:b5:62:9f:22:
ee:6f:8b:b5:1b:e5:ea:e8:81:cb:81:ec:8e:3f:f7:b8:8a:8a:
49:82:9a:88:95:95:da:2b:51:6a:74:1b:57:f0:0e:91:95:46:
6c:b3:1a:0a:f1:c2:6f:f0:33:bd:29:d0:c8:c9:f4:a0:a2:8b:
1d:d6:1d:d4:8e:dd:5b:c9:94:64:bc:25:cb:98:0e:e6:5d:58:
82:4f:19:8b:ba:c0:5e:9e:b0:91:07:fc:00:76:66:b4:55:f5:
9b:39:db:9e:f8:09:4c:df:b8:32:49:bf:5f:27:c7:65:09:c9:
08:ba:77:fe:ce:1e:e0:3e:51:cf:d6:a7:ae:65:a1:4d:e8:3c:
6f:30:dd:43:7e:a0:db:7f:2d:df:01:60:02:76:e8:aa:96:67:
84:bc:ae:ba:d8:eb:68:eb:db:6d:63:ca:c2:79:e1:df:20:92:
0b:ff:2f:b8:a5:0c:f5:02:48:67:be:81:2c:dc:d3:01:c9:b4:
1c:ab:6a:36:31:50:5b:2e:39:89:3d:80:78:48:93:c7:15:fc:
64:4d:90:54:e6:18:8f:88:84:e7:ac:19:ad:7a:2f:6a:83:60:
a9:ce:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:23:03 2025 by rpki-client