Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b4d1eae-3a27-30d7-b0de-1d2c96d86e10.roa
File: 8b4d1eae-3a27-30d7-b0de-1d2c96d86e10.roa (raw, json)
Hash identifier: otCWL/+2GwdyANvC04fzH8SqNAhqsRszAJnKaH/7hfo=
Subject key identifier: CA:E2:9C:9B:5A:8B:5A:78:47:51:2F:D4:E5:15:61:F4:3F:7F:F7:BE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AFA42256FE42C07C6FD54000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b4d1eae-3a27-30d7-b0de-1d2c96d86e10.roa
Signing time: Mon 27 Jan 2025 18:04:03 +0000
ROA not before: Mon 27 Jan 2025 18:04:03 +0000
ROA not after: Sun 27 Apr 2025 17:04:03 +0000
asID: 11798
IP address blocks: 23.26.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 21:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:a4:22:56:fe:42:c0:7c:6f:d5:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 18:04:03 2025 GMT
Not After : Apr 27 17:04:03 2025 GMT
Subject: CN=b133d12b-51f1-407e-b34f-281ee5269be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:fa:99:61:2e:d4:2c:14:d0:c5:d2:41:1a:
cb:bf:dd:03:1b:fa:9b:96:5a:dc:fe:d8:96:c3:21:
a7:b5:37:1d:af:2b:77:a6:48:fe:fc:6f:21:33:cb:
8b:72:4d:1f:73:33:81:cb:52:19:c6:54:a7:0b:7b:
8b:ad:ba:58:ff:1a:7b:42:30:bf:d1:ec:1a:50:ca:
f4:7a:08:56:0e:f4:da:ac:e5:c7:18:6c:a9:b2:ab:
67:31:af:0f:e3:55:5f:6d:86:a7:51:2c:ad:2d:33:
44:13:42:6f:af:36:7b:5f:51:d4:64:91:9f:11:c6:
56:45:ca:ad:71:a6:6d:b2:e0:92:20:96:b7:ee:f9:
8f:b9:d1:51:31:38:14:cc:19:6c:62:47:28:ff:40:
3e:c4:a4:d9:34:3f:37:11:2d:ce:ba:e4:76:d2:e7:
41:d3:ea:6b:8b:58:6e:be:39:e3:e4:41:3d:a1:1e:
dd:69:92:ab:32:f7:67:99:2f:a4:4b:a5:23:d8:4f:
38:b3:af:5d:9f:12:6a:59:d8:d7:04:c3:93:ee:ab:
d3:63:63:d6:b0:8d:b5:1a:0f:07:78:7a:60:2c:42:
f1:a6:11:ba:59:af:82:96:f5:7b:b7:7f:da:db:c9:
0e:eb:0b:9b:5a:7b:cc:f9:1d:fe:27:7a:61:db:0d:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:9C:9B:5A:8B:5A:78:47:51:2F:D4:E5:15:61:F4:3F:7F:F7:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b4d1eae-3a27-30d7-b0de-1d2c96d86e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:83:5e:3e:75:f5:41:0b:62:34:41:55:ce:25:6c:9e:0e:54:
a1:78:b2:9f:f7:42:66:52:10:2c:0d:89:0f:9d:13:80:84:83:
46:30:86:7b:53:dc:4a:58:c9:f6:e5:99:30:49:d8:0b:23:7a:
e9:0f:73:0e:90:f9:61:cf:ec:a9:c3:d4:94:41:39:52:37:cc:
fe:01:e1:26:51:8a:54:9f:f7:e2:6e:49:b3:30:61:67:cb:95:
ad:55:53:a3:24:55:be:cb:ea:9c:7f:e3:1e:c9:dd:ca:fa:4f:
32:38:46:62:75:22:ee:a4:49:fe:d2:9d:5e:7c:33:4e:4b:28:
5a:91:4b:da:21:df:fe:e4:14:56:92:a4:04:49:68:ba:3a:44:
60:5d:b1:40:97:c9:03:c3:cb:64:c1:1a:84:44:44:ac:ab:e0:
89:e2:0a:2d:59:ab:b8:a0:6b:da:09:35:b1:40:ba:1c:ff:31:
96:9e:46:ea:c5:e0:e4:b6:8a:a6:fd:96:24:be:b1:fe:14:2f:
02:93:9a:3a:d9:e6:97:2d:cc:a3:bb:fb:35:8b:60:82:e0:8a:
ba:55:fb:ab:58:0e:4b:cf:75:b5:05:66:2e:29:0d:9e:7f:14:
05:ff:0f:dc:47:15:90:1b:af:a1:d5:5f:b9:85:87:1d:54:a7:
83:fa:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 16:29:19 2025 by rpki-client