Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7969bb2-2835-3a53-900d-d85b40d71421.roa
File: c7969bb2-2835-3a53-900d-d85b40d71421.roa (raw, json)
Hash identifier: A72AO5ZeP/kN+IdOR7DibWuc6/cuTwCZ9jZAtQE4xyI=
Subject key identifier: 76:99:BD:5A:8E:2C:9E:AA:20:F1:BE:38:BF:A3:F5:18:7D:56:A1:42
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858485F9AE1D3C403B9FD65AE70C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7969bb2-2835-3a53-900d-d85b40d71421.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 174
IP address blocks: 23.26.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e1:d3:c4:03:b9:fd:65:ae:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=9008c8dd-f13c-481f-b8d6-d41c033a6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:25:44:37:62:44:07:c5:e0:f0:ab:02:7d:
0e:72:81:d8:ab:ac:7e:f3:94:0f:06:45:f7:d0:df:
04:a5:10:c0:cb:4e:12:07:ce:90:98:79:96:0a:75:
d8:e7:72:05:4f:27:9c:2e:1d:a4:6e:73:ea:76:d3:
8f:c1:cf:76:29:57:2e:9b:7a:77:49:ac:54:81:86:
64:35:96:81:46:4c:02:b0:65:5a:93:f5:8e:3b:20:
38:b1:51:8b:dd:73:e5:30:3d:92:95:fb:9f:6b:f1:
5e:d1:11:0c:9f:e0:1c:68:57:7d:7f:35:97:df:25:
ef:e0:36:fb:9c:db:ac:4c:70:06:c6:45:c7:ce:d1:
b7:0a:08:f7:9a:12:3a:83:7f:d5:b3:c1:17:ae:c1:
60:dd:d5:bc:5e:e9:6c:27:b4:89:9c:89:bd:b9:c5:
7c:8c:22:a0:92:25:54:c9:b1:e4:63:49:e1:0b:d3:
06:5c:36:65:14:b5:07:a3:06:a4:ca:7c:b0:a9:c3:
55:c0:4c:5d:61:69:11:87:be:35:9c:a6:e3:a4:45:
43:84:c4:2b:98:bb:5f:0c:25:91:b1:4d:e2:10:9a:
de:5c:d2:68:c4:45:7c:2b:23:ad:b1:0f:cd:c6:3d:
36:29:4b:bf:db:59:03:40:36:f4:2b:69:7f:b4:3d:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:BD:5A:8E:2C:9E:AA:20:F1:BE:38:BF:A3:F5:18:7D:56:A1:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7969bb2-2835-3a53-900d-d85b40d71421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:0b:83:4d:54:72:a9:33:88:71:59:78:d2:a9:87:50:e4:7c:
69:31:52:cc:ed:c2:e5:ff:48:fa:4a:34:c0:cc:9e:13:41:ad:
8e:e1:14:28:9b:85:97:3b:c7:9d:55:04:9a:ab:2c:b1:1a:d7:
be:84:ad:c6:df:9b:87:fa:27:ea:8f:73:d6:8b:c9:0a:2e:f4:
14:ad:53:52:c7:30:ad:68:95:9e:72:4d:64:58:a8:b1:de:a4:
06:51:3c:f4:69:85:85:c4:27:66:b6:28:fc:2e:9a:f9:08:ff:
e2:ef:30:84:06:d0:7a:b9:8e:34:f8:f5:1a:08:9e:0d:5f:0e:
f3:40:50:fc:4f:e9:c9:c3:4a:a4:0c:9f:a2:b5:05:c3:2c:97:
28:af:bf:4c:20:06:03:95:0e:16:3d:f0:d9:20:a6:ee:2f:c3:
f3:70:75:20:86:b8:ba:c9:45:06:50:ba:fa:fd:a9:a6:59:dd:
06:88:e5:90:e7:44:9c:56:7d:67:62:37:a3:a7:a8:d3:de:71:
de:d1:15:6c:2e:0b:96:90:48:73:c6:a9:99:b0:73:48:8d:84:
07:01:1d:d9:12:01:f0:3d:7d:2b:8f:bc:f5:37:0e:28:26:43:
f2:ac:9f:42:ce:f6:54:5c:81:bb:65:63:58:68:99:86:0e:69:
3b:bd:2a:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuHTxAO5/WWucMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
OTAwOGM4ZGQtZjEzYy00ODFmLWI4ZDYtZDQxYzAzM2E2Nzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8UlRDdiRAfF4PCrAn0OcoHYq6x+85QPBkX3
0N8EpRDAy04SB86QmHmWCnXY53IFTyecLh2kbnPqdtOPwc92KVcum3p3SaxUgYZk
NZaBRkwCsGVak/WOOyA4sVGL3XPlMD2Slfufa/Fe0REMn+AcaFd9fzWX3yXv4Db7
nNusTHAGxkXHztG3Cgj3mhI6g3/Vs8EXrsFg3dW8XulsJ7SJnIm9ucV8jCKgkiVU
ybHkY0nhC9MGXDZlFLUHowakynywqcNVwExdYWkRh741nKbjpEVDhMQrmLtfDCWR
sU3iEJreXNJoxEV8KyOtsQ/Nxj02KUu/21kDQDb0K2l/tD2J4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaZvVqOLJ6qIPG+OL+j9Rh9VqFCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzc5NjliYjItMjgzNS0z
YTUzLTkwMGQtZDg1YjQwZDcxNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACILg01UcqkziHFZeNKph1DkfGkxUsztwuX/SPpKNMDMnhNBrY7hFCib
hZc7x51VBJqrLLEa176Ercbfm4f6J+qPc9aLyQou9BStU1LHMK1olZ5yTWRYqLHe
pAZRPPRphYXEJ2a2KPwumvkI/+LvMIQG0Hq5jjT49RoIng1fDvNAUPxP6cnDSqQM
n6K1BcMslyivv0wgBgOVDhY98Nkgpu4vw/NwdSCGuLrJRQZQuvr9qaZZ3QaI5ZDn
RJxWfWdiN6OnqNPecd7RFWwuC5aQSHPGqZmwc0iNhAcBHdkSAfA9fSuPvPU3Digm
Q/Ksn0LO9lRcgbtlY1homYYOaTu9KtA=
-----END CERTIFICATE-----
Generated at Fri Feb 7 11:27:19 2025 by rpki-client