Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d8fa7bc-3ac7-3e4c-bb53-9e84d0031eb3.roa
File: 7d8fa7bc-3ac7-3e4c-bb53-9e84d0031eb3.roa (raw, json)
Hash identifier: gDM7GTipOPbopeyMd3H336ozVDlivhkJ94WFqtd5jR8=
Subject key identifier: 3F:F4:43:09:AC:3A:BD:53:5C:57:BB:6F:17:E8:70:CF:C5:84:F9:93
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584906B1D9575D38E7DFC46F7500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d8fa7bc-3ac7-3e4c-bb53-9e84d0031eb3.roa
Signing time: Thu 27 Feb 2025 22:27:01 +0000
ROA not before: Thu 27 Feb 2025 22:27:01 +0000
ROA not after: Wed 28 May 2025 21:27:01 +0000
asID: 401152
IP address blocks: 23.26.228.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 18:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:06:b1:d9:57:5d:38:e7:df:c4:6f:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 27 22:27:01 2025 GMT
Not After : May 28 21:27:01 2025 GMT
Subject: CN=49ac9fd4-1f3e-42a4-b5dd-116e63898715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:1b:12:27:4e:5d:70:e7:70:a7:28:ce:05:
3d:06:78:10:d3:aa:70:a6:9c:8c:bf:10:0e:ab:76:
55:41:1e:d7:a3:ca:0a:7b:5e:f9:b8:8b:01:9e:a7:
e9:af:59:4a:6d:42:ff:d8:4f:a3:14:c6:e9:73:b6:
d9:14:87:13:55:83:ad:1c:77:38:93:25:47:47:eb:
c7:12:7b:d5:7d:4c:eb:16:f9:2f:89:8a:13:a7:24:
e9:ba:70:c7:35:67:cf:5f:a8:d6:69:57:21:d8:6d:
a6:a9:6a:71:b8:af:fb:17:9e:24:5d:32:e1:19:1f:
68:30:d9:aa:ce:9d:da:f0:da:cf:fd:d0:03:10:37:
2f:da:03:c3:01:2f:b1:b8:40:8d:ef:54:9d:d4:7c:
1a:02:68:ec:63:c1:81:10:f6:3f:d6:9e:b4:81:9f:
c1:31:b4:74:3f:dd:ee:e8:ec:67:98:e5:bf:c7:f6:
be:98:8d:70:bf:dd:48:0e:40:fd:18:cd:77:8c:e1:
cf:34:f7:99:dd:af:a3:c1:e2:da:90:1b:c7:f1:85:
00:b2:38:9a:d0:bb:15:c7:a7:81:7e:c4:e4:f9:6a:
94:66:6a:4e:09:60:cd:da:f2:e1:ad:6b:bb:32:cd:
34:b9:5b:33:b4:a3:77:a9:1d:10:df:16:fd:61:f9:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F4:43:09:AC:3A:BD:53:5C:57:BB:6F:17:E8:70:CF:C5:84:F9:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d8fa7bc-3ac7-3e4c-bb53-9e84d0031eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f1:5c:21:30:34:f1:7f:c5:9e:3b:43:d2:e8:a8:01:b8:17:
6c:78:ad:ca:bd:ef:fa:2e:73:b8:d9:14:be:4b:6d:e9:3e:c7:
0c:ce:25:2c:f2:86:2f:a4:72:db:d0:cd:a0:93:24:51:1f:9b:
b3:19:ca:aa:75:f3:b9:bb:a1:e2:03:7d:67:9c:f9:8d:f3:7e:
52:6b:5e:cd:78:58:9e:ab:a0:ab:99:40:7f:36:ca:5d:22:35:
81:1b:52:18:d2:42:75:fd:72:70:47:ef:bd:ac:86:7d:ba:ed:
2d:22:28:1e:2f:42:86:66:59:94:c1:14:21:de:2d:03:13:ac:
54:2b:7d:21:63:79:3b:f9:9b:03:6f:a6:fe:4e:06:f3:79:d5:
37:e8:d9:13:81:39:b0:bc:44:2d:09:1a:eb:36:71:4a:72:a7:
a9:1c:3d:76:a7:fb:81:35:e0:67:bf:5a:04:bd:5d:0c:6e:6e:
fd:7b:f4:58:22:d7:17:c7:ad:85:22:bd:9a:11:d5:9a:1f:1e:
1a:7a:52:16:36:2f:dd:4f:5b:10:90:d4:ad:27:ef:ff:b1:dd:
69:db:5e:fb:89:27:12:71:24:a9:1a:61:b1:b6:59:9e:bc:6e:
b3:75:95:78:6f:bd:45:2d:14:ab:fa:f2:95:8e:75:03:0a:cd:
9c:9b:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:18:51 2025 by rpki-client