Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99203739-d77c-374b-9ab6-5b34873f57ab.roa
File: 99203739-d77c-374b-9ab6-5b34873f57ab.roa (raw, json)
Hash identifier: aAC7mq+RSjVFs0S6iSw2xevAjfyvVpkcSpyAvv6WSAg=
Subject key identifier: A2:1F:27:3A:19:1C:34:C7:9E:8B:15:9E:81:93:FB:61:33:B0:30:6E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584849E0913D7F80DF68416C3E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99203739-d77c-374b-9ab6-5b34873f57ab.roa
Signing time: Sun 22 Dec 2024 07:13:22 +0000
ROA not before: Sun 22 Dec 2024 07:13:22 +0000
ROA not after: Sat 22 Mar 2025 06:13:22 +0000
asID: 834
IP address blocks: 23.26.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:e0:91:3d:7f:80:df:68:41:6c:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 22 07:13:22 2024 GMT
Not After : Mar 22 06:13:22 2025 GMT
Subject: CN=bc1f9150-9711-4215-be34-f62a9dfb6065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:aa:3f:c1:40:c2:59:66:3a:0f:e9:3e:e7:
db:a6:44:e3:05:0a:df:52:06:a8:1b:9a:64:e9:21:
ae:0f:1f:e9:cc:cc:34:39:b8:61:07:19:34:80:fe:
bc:9c:67:b6:99:4f:d6:51:a4:6f:61:83:27:0e:61:
ce:e9:52:93:09:a7:eb:ed:69:e4:0d:cf:8c:97:41:
b5:ad:1a:79:2b:61:5b:5e:c0:a8:05:39:61:3c:37:
3f:0e:4f:ff:78:ce:e2:6d:41:74:be:97:97:8b:2d:
75:98:40:c3:57:e7:f7:f7:73:4f:ba:56:34:78:8e:
8f:d7:ff:d2:40:b7:18:8f:29:79:f3:55:a5:68:71:
79:e1:e0:df:71:af:6e:e4:e4:95:83:11:20:20:88:
9c:2e:6c:9b:52:13:7e:c9:ff:72:f1:02:df:d2:ae:
ff:26:64:97:56:22:62:d2:6c:2b:33:b9:e7:66:5c:
bd:50:bd:56:b8:68:d0:5a:1d:62:c5:58:29:75:46:
1f:bf:c7:e9:32:fd:c6:a4:26:0f:5c:66:89:43:09:
39:0d:b9:e5:af:c5:77:6a:29:e5:1c:29:98:59:fc:
7e:16:1f:2b:e6:81:f6:8c:5c:e9:05:9b:24:6d:0d:
24:0d:cf:72:98:76:c5:0d:ca:ad:94:5c:f5:78:ea:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:27:3A:19:1C:34:C7:9E:8B:15:9E:81:93:FB:61:33:B0:30:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99203739-d77c-374b-9ab6-5b34873f57ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:39:ec:46:75:17:01:c0:0e:f4:c3:a1:1a:56:1c:06:e5:b0:
17:9c:14:a3:e2:fe:a9:1e:91:91:ec:27:35:cc:e9:93:b3:a3:
d0:9c:6d:5e:c2:bb:3e:09:b1:81:cc:32:1a:ee:16:04:b0:47:
dd:e5:6f:81:c0:76:ef:25:a1:3a:f9:38:b1:09:14:d4:f6:91:
e2:b7:5b:9e:3b:d3:fe:61:b9:91:02:86:5c:37:14:ae:0a:bf:
8c:c1:c9:61:ff:9b:04:9f:63:4b:fc:79:8b:ce:cd:bc:76:30:
c8:00:e7:7f:3a:29:39:92:3c:06:39:1b:8d:ee:aa:20:84:36:
24:03:d6:fe:26:c3:88:63:2e:99:d1:81:52:68:0a:7a:92:f9:
0c:ba:60:d5:82:f0:80:19:8d:58:b0:fe:20:25:b8:32:ec:24:
a7:21:88:98:0e:83:e1:4e:25:d5:43:1e:71:0a:28:1d:6b:ba:
90:08:a2:3a:c2:fe:af:fd:2e:7b:ab:33:71:bf:e7:5d:c9:dc:
df:56:02:ef:5b:c7:fd:a4:02:2f:4a:d6:30:4a:33:5d:c0:61:
92:da:ae:de:15:92:24:a9:c9:c2:b2:c6:6a:28:ab:94:62:5b:
fa:37:66:b8:50:e3:bc:80:01:1b:c7:fc:b4:e1:17:47:c4:c7:
30:26:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:32 2025 by rpki-client