Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78d7479d-e42d-3385-8ac0-85e35ba4814c.roa
File: 78d7479d-e42d-3385-8ac0-85e35ba4814c.roa (raw, json)
Hash identifier: MjARKXZ3lpeywFqIhAGIngtVkn/ccpTyXAomF1/ABns=
Subject key identifier: D6:58:1C:D5:C5:90:8A:D9:D4:65:2C:F0:16:62:7F:09:9A:30:2E:08
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858498EC07DCEDC219F0DF783AF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78d7479d-e42d-3385-8ac0-85e35ba4814c.roa
Signing time: Thu 17 Apr 2025 16:06:27 +0000
ROA not before: Thu 17 Apr 2025 16:06:27 +0000
ROA not after: Wed 16 Jul 2025 16:06:27 +0000
asID: 11798
IP address blocks: 23.26.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8e:c0:7d:ce:dc:21:9f:0d:f7:83:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 17 16:06:27 2025 GMT
Not After : Jul 16 16:06:27 2025 GMT
Subject: CN=abfc9ba5-49c6-489a-a3c5-09193b85c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:eb:da:4e:c1:f3:18:1f:e3:34:fd:d0:68:
ed:ed:ec:4a:3a:2b:31:f0:0c:d1:6d:12:34:8f:ab:
02:dc:6f:b8:b3:ce:e5:80:14:26:4b:7d:91:71:f5:
1a:01:bd:ec:6a:24:a4:9d:7a:43:eb:c1:12:af:9d:
8d:8b:9d:bf:af:51:aa:c3:16:24:f2:55:49:8b:a1:
52:77:77:83:71:e5:7c:7e:f2:85:04:9b:ef:1c:4d:
b8:96:98:3c:04:59:9a:b6:20:ef:a9:f8:ba:9d:84:
f8:7f:1b:d1:3e:b4:96:2d:33:19:86:2f:43:c9:80:
5c:a1:78:e6:b4:e0:08:b5:b5:d7:00:a0:98:a6:12:
dc:11:6b:b2:3a:73:3e:33:05:52:36:ce:b5:f1:9d:
17:19:7e:c6:6e:0c:c4:88:17:e2:4d:5a:e6:8e:c7:
2f:d9:6f:d1:70:be:fe:af:c5:4a:1c:c5:ac:bf:3a:
fd:42:d1:04:cb:4a:d5:c3:35:ea:84:99:03:fa:a4:
f6:d7:ee:0f:19:7c:0c:d8:87:3b:10:d5:93:66:cb:
f6:8d:e2:22:f3:3d:8d:8d:de:91:07:e1:4e:69:78:
eb:22:2f:96:6b:a9:d0:82:ac:c8:f2:20:94:4e:83:
0e:77:9b:fa:a2:08:cf:be:18:4d:9e:35:c4:0a:cd:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:1C:D5:C5:90:8A:D9:D4:65:2C:F0:16:62:7F:09:9A:30:2E:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78d7479d-e42d-3385-8ac0-85e35ba4814c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:d8:27:e6:fc:88:48:f9:2f:dd:a9:bf:38:f6:05:8a:f2:a5:
5f:57:55:a2:b2:56:fc:ba:d6:ae:30:24:e5:b4:d0:23:19:3e:
a3:48:e4:16:a0:73:95:81:3f:f7:f1:02:15:fa:54:c0:e7:7f:
d2:0e:e1:56:a7:1b:b3:1c:80:c1:dd:46:96:24:84:a1:9d:ce:
e0:47:d7:b7:8a:06:b1:a9:c8:6a:15:fe:2d:b3:71:cc:6c:37:
46:a8:ca:88:52:31:47:4b:20:0b:74:88:0f:5a:5a:00:98:26:
da:97:a4:f5:e0:08:e2:73:0e:5a:ec:20:54:f7:ed:99:93:42:
f5:bc:f9:2e:de:f6:ed:3c:10:bf:70:e9:7d:cd:2a:0e:19:10:
f1:2d:50:2c:26:25:98:ea:32:7a:5d:21:99:b4:81:17:8e:09:
7e:f0:94:cb:04:12:88:b6:4a:ec:7a:5f:cf:b8:26:6b:4d:d1:
f2:8e:3a:f4:38:37:ec:4b:44:30:3a:97:9a:1b:a2:c8:1c:8c:
ee:a0:c0:d0:24:db:5f:38:0f:6b:f0:12:f7:05:6e:27:7e:7a:
f9:fb:ea:10:8c:bf:ac:c1:17:99:a5:b4:69:9c:70:28:1f:46:
c2:47:a6:6b:d0:7f:24:d2:b1:77:51:d9:8b:2d:83:3b:79:c2:
15:d5:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:47:36 2025 by rpki-client