Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3b4ccb4-119a-3eee-b51d-ebd2a386a37a.roa
File: b3b4ccb4-119a-3eee-b51d-ebd2a386a37a.roa (raw, json)
Hash identifier: znqzTDntrvs6taG95oiTvU6Ih8livPsDpR+GQxKEUIU=
Subject key identifier: 43:7A:9A:66:5C:B4:1D:0B:32:AC:DA:95:4A:86:4E:DF:67:D3:B3:9B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849006E8F07E1854B9511FB6280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3b4ccb4-119a-3eee-b51d-ebd2a386a37a.roa
Signing time: Tue 25 Feb 2025 16:36:35 +0000
ROA not before: Tue 25 Feb 2025 16:36:35 +0000
ROA not after: Mon 26 May 2025 15:36:35 +0000
asID: 834
IP address blocks: 23.26.228.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 22:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:6e:8f:07:e1:85:4b:95:11:fb:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 25 16:36:35 2025 GMT
Not After : May 26 15:36:35 2025 GMT
Subject: CN=907cee05-432e-4fcb-a449-263b83d88eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:39:86:9b:f5:fd:8a:fa:9a:12:bb:36:ff:
4a:d2:71:22:83:e7:64:0f:1e:fb:04:08:8f:c1:a1:
1c:cd:74:33:df:22:b4:81:c1:3c:14:0f:e4:aa:d6:
84:9f:84:1f:6b:92:47:7c:74:cc:3d:28:eb:00:1d:
c0:e6:89:bb:79:04:0c:11:33:f5:a7:19:ea:fd:57:
81:eb:8a:8b:6a:20:87:85:24:85:6d:2b:cd:c4:59:
dc:67:df:39:a0:34:ed:69:1b:9c:67:0e:a6:9f:12:
76:9f:5a:fa:f4:2e:bf:05:2c:f1:17:d2:4b:cd:36:
74:ee:38:f0:87:b9:d2:53:cf:39:71:13:70:ff:9d:
5e:b7:79:f4:d8:e1:58:1d:da:b8:ab:56:1c:d9:40:
ca:41:77:9c:01:02:80:85:c8:3f:e7:18:cc:25:04:
5b:84:de:95:20:0e:e6:2f:dc:96:02:dd:15:30:95:
7c:bc:cc:d6:84:7f:37:cb:b1:22:49:2d:3c:77:6c:
a0:50:58:54:16:82:df:d2:39:49:a4:af:16:08:8d:
a7:7b:85:f0:cc:fd:92:05:32:00:47:28:e6:46:31:
92:be:e3:1a:3a:1c:15:ed:94:74:4d:ae:ec:55:4f:
d8:20:ea:a7:1e:9a:55:da:8a:c7:99:90:a0:6c:52:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7A:9A:66:5C:B4:1D:0B:32:AC:DA:95:4A:86:4E:DF:67:D3:B3:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3b4ccb4-119a-3eee-b51d-ebd2a386a37a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e3:5a:86:d1:b9:b7:40:56:e7:2b:ec:1d:6c:dc:56:d0:ad:
df:a3:03:75:b4:4d:71:2c:ec:c2:32:bc:df:a5:ff:98:14:bd:
5b:e7:37:ae:d7:6f:b7:2b:f6:d6:2a:2b:8a:81:71:0c:b9:48:
b8:b6:cc:55:97:52:b9:5d:49:f0:5e:1d:f2:e5:68:33:28:a5:
d6:34:fa:26:fd:e5:67:f2:61:25:2f:d1:86:de:6b:a8:b8:52:
03:24:7d:0e:85:85:80:3a:c2:4f:81:23:24:9d:b0:a6:89:a2:
1d:fe:5d:80:ff:05:f1:21:31:a4:4f:6c:8a:b5:2c:c3:b7:23:
c5:fd:01:45:1e:4b:66:8c:2c:30:b5:e2:11:b2:44:da:82:74:
70:e6:6b:94:3f:08:cc:fa:aa:21:ab:10:e9:83:17:48:20:c8:
45:63:7a:b4:59:71:2d:b4:0e:e6:b1:eb:e8:67:c6:09:ae:41:
d3:80:c7:2a:fb:f2:06:4e:17:91:5e:a4:1f:e6:97:80:8c:fe:
5a:91:d9:df:25:b1:a5:d1:a3:f8:cc:b8:68:01:ce:bc:c3:48:
3a:a7:d2:9f:76:4c:11:4f:ff:d6:b3:be:bb:bd:4f:bd:a6:e3:
d5:7f:a0:be:6f:3a:2b:dc:91:17:73:16:a3:86:31:99:e0:1c:
0b:06:26:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:23 2025 by rpki-client