Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2691783-f512-3770-ba26-7691d0218079.roa
File: d2691783-f512-3770-ba26-7691d0218079.roa (raw, json)
Hash identifier: oncpK309XgSlfjIs9P13tdLs1HvdOoYT3apN3V19PN8=
Subject key identifier: D5:43:FB:8F:BB:09:AE:27:27:09:19:88:4D:3D:DD:F4:2C:92:8D:B8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849115E19D0C50C3DDAF41EF200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2691783-f512-3770-ba26-7691d0218079.roa
Signing time: Mon 03 Mar 2025 18:12:10 +0000
ROA not before: Mon 03 Mar 2025 18:12:10 +0000
ROA not after: Sun 01 Jun 2025 17:12:10 +0000
asID: 401152
IP address blocks: 23.26.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 18:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:5e:19:d0:c5:0c:3d:da:f4:1e:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:12:10 2025 GMT
Not After : Jun 1 17:12:10 2025 GMT
Subject: CN=3579ff68-abbc-48c5-a802-29c9ef4a4262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:09:7c:0d:85:3a:45:40:53:be:26:79:76:
55:78:a1:c8:25:14:63:a8:f0:47:3a:83:db:ca:ab:
88:69:86:bc:28:1f:d4:8b:96:ac:b5:42:53:d3:2e:
25:b0:c4:6f:85:0b:56:34:d7:ae:21:dd:44:21:6e:
4b:3e:40:10:29:2d:c7:1b:64:31:a0:29:6d:ea:fd:
15:df:d5:66:ae:d0:60:c3:97:4f:ba:6a:4a:24:32:
ca:aa:7b:4d:82:a4:9d:9c:7c:16:3b:68:53:c3:54:
8b:1d:b0:af:d2:48:bd:ea:10:ec:16:af:9c:0e:4f:
83:a8:11:d9:32:e6:08:03:3e:c1:f7:5b:3c:c8:96:
c1:4e:46:00:4b:e3:14:a9:e6:9c:4c:3a:05:12:74:
4e:a1:21:dd:34:21:13:27:7e:2e:99:ef:a1:5f:22:
db:92:d5:62:b3:11:69:ae:a7:53:c1:16:b4:96:04:
ca:4d:b4:db:d6:a8:3e:b7:02:52:00:aa:c4:0c:cd:
1b:2e:a3:ad:e3:37:5f:26:86:50:ea:c5:14:33:62:
39:9c:0a:c4:ae:13:b0:7f:cf:9d:67:88:b3:43:c8:
2c:1a:4c:6f:7c:1d:d2:3a:93:0a:19:50:c6:58:7b:
74:88:16:94:29:6f:73:3e:bb:0b:55:f8:93:55:4c:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:FB:8F:BB:09:AE:27:27:09:19:88:4D:3D:DD:F4:2C:92:8D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2691783-f512-3770-ba26-7691d0218079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:46:0d:31:bc:c7:56:d2:01:06:f6:c1:f7:11:3e:3d:79:50:
cb:b8:4a:3c:94:8d:e2:3c:e9:61:d4:0e:9f:6a:74:22:fc:d7:
82:1b:7c:c1:6f:8e:bf:3a:10:8c:87:fe:43:15:e9:26:5b:75:
b2:04:f9:5b:a2:1a:fd:51:a8:77:07:21:d1:2d:4a:13:b9:c5:
e9:7c:8f:65:ca:09:28:ca:84:27:d9:8f:fa:a4:e3:61:6c:ad:
62:11:69:b5:f7:65:d1:bf:40:53:92:4d:ff:a6:55:01:d8:73:
d0:c6:d9:d9:a6:72:49:75:e9:7e:68:55:5c:2f:92:81:fd:70:
6c:fa:44:43:61:65:9f:d8:70:49:e8:62:ce:08:1f:78:a0:dc:
70:dc:f7:4d:90:ba:04:78:7e:8d:98:70:ac:79:ab:f1:39:de:
8b:ff:16:77:ec:62:8f:5f:be:12:e2:9f:d1:36:5f:a3:87:60:
8f:04:8e:1d:d3:58:56:f5:b6:22:cf:c0:b8:aa:95:f0:21:7c:
04:c1:a8:05:75:5d:8a:66:63:94:de:2a:4d:63:3b:be:b1:ee:
de:20:f5:cd:d3:c3:2e:dd:5a:91:08:31:1a:34:87:69:79:22:
fc:6e:7e:ed:f3:b3:f7:75:a5:79:93:56:81:53:95:35:bf:c0:
e1:28:5f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXhnQxQw92vQe8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwMzE4MTIxMFoXDTI1MDYwMTE3MTIxMFowLzEtMCsGA1UEAxMk
MzU3OWZmNjgtYWJiYy00OGM1LWE4MDItMjljOWVmNGE0MjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2gJfA2FOkVAU74meXZVeKHIJRRjqPBHOoPb
yquIaYa8KB/Ui5astUJT0y4lsMRvhQtWNNeuId1EIW5LPkAQKS3HG2QxoClt6v0V
39VmrtBgw5dPumpKJDLKqntNgqSdnHwWO2hTw1SLHbCv0ki96hDsFq+cDk+DqBHZ
MuYIAz7B91s8yJbBTkYAS+MUqeacTDoFEnROoSHdNCETJ34ume+hXyLbktVisxFp
rqdTwRa0lgTKTbTb1qg+twJSAKrEDM0bLqOt4zdfJoZQ6sUUM2I5nArErhOwf8+d
Z4izQ8gsGkxvfB3SOpMKGVDGWHt0iBaUKW9zPrsLVfiTVUz1EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVD+4+7Ca4nJwkZiE093fQsko24MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDI2OTE3ODMtZjUxMi0z
NzcwLWJhMjYtNzY5MWQwMjE4MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFxoqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRGDTG8x1bSAQb2wfcRPj15UMu4SjyUjeI86WHUDp9qdCL814IbfMFv
jr86EIyH/kMV6SZbdbIE+VuiGv1RqHcHIdEtShO5xel8j2XKCSjKhCfZj/qk42Fs
rWIRabX3ZdG/QFOSTf+mVQHYc9DG2dmmckl16X5oVVwvkoH9cGz6RENhZZ/YcEno
Ys4IH3ig3HDc902QugR4fo2YcKx5q/E53ov/FnfsYo9fvhLin9E2X6OHYI8Ejh3T
WFb1tiLPwLiqlfAhfATBqAV1XYpmY5TeKk1jO76x7t4g9c3Twy7dWpEIMRo0h2l5
Ivxufu3zs/d1pXmTVoFTlTW/wOEoX2U=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:42:06 2025 by rpki-client