Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3b8710e-0ca5-349e-849c-315aa08d04a0.roa
File: d3b8710e-0ca5-349e-849c-315aa08d04a0.roa (raw, json)
Hash identifier: v470m3wB01m0DP13TdkFl83R6ddHh2enIMrVK51+kHQ=
Subject key identifier: C6:39:08:3A:A5:F8:44:33:67:77:63:3C:62:37:9E:37:B1:07:B1:08
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AF89578EECA3C5FB5DA97080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3b8710e-0ca5-349e-849c-315aa08d04a0.roa
Signing time: Mon 27 Jan 2025 17:10:05 +0000
ROA not before: Mon 27 Jan 2025 17:10:05 +0000
ROA not after: Sun 27 Apr 2025 16:10:05 +0000
asID: 48925
IP address blocks: 23.26.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 17:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:89:57:8e:ec:a3:c5:fb:5d:a9:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 17:10:05 2025 GMT
Not After : Apr 27 16:10:05 2025 GMT
Subject: CN=3fd40735-4d85-481d-959e-4ae7b388cb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:88:30:5e:ef:84:0e:10:f6:69:31:a3:31:
fb:9d:f8:96:bc:8e:c2:6c:98:d8:24:e9:85:48:f2:
88:62:6e:2f:57:d2:de:9d:c5:44:75:91:ab:8b:6d:
08:ca:95:54:67:68:ee:e6:cb:79:24:54:2b:53:c3:
f4:62:b3:18:30:cc:d4:b7:87:2e:97:a1:4b:1c:65:
2e:fd:aa:80:d6:77:7e:9a:a3:f4:44:a5:2f:d3:0d:
c8:0d:80:cf:80:86:fc:15:59:70:49:bb:ee:06:ce:
9c:49:ce:1c:e2:ce:85:75:64:4c:b7:ee:87:fd:4f:
69:1e:ff:03:61:f0:65:7b:a3:73:70:98:28:25:78:
2d:1a:46:be:d4:9a:4d:e6:75:fe:21:f4:92:3c:cd:
3c:53:78:5c:ad:68:75:50:91:c0:8d:4a:7d:93:21:
53:ab:95:45:6e:0d:ea:40:fc:10:b2:4f:a0:1a:a4:
0e:ea:f3:a9:aa:b3:f6:92:32:07:d1:0e:ad:67:42:
63:a7:0d:2b:f2:25:49:0d:69:f9:45:39:7f:7d:6a:
03:86:8a:fc:e0:ac:ec:32:7b:ec:5e:c4:3c:9d:e8:
ad:e8:26:69:f9:78:dd:ca:93:a1:f0:de:01:53:97:
60:4d:0c:3f:43:bf:ba:e9:f1:4b:2d:15:eb:8f:62:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:08:3A:A5:F8:44:33:67:77:63:3C:62:37:9E:37:B1:07:B1:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3b8710e-0ca5-349e-849c-315aa08d04a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:f3:83:10:18:f6:16:92:d5:6e:dd:88:ca:91:e3:5c:f1:11:
2c:f8:d6:73:45:41:18:8b:97:f4:ea:20:b5:14:9c:cf:29:19:
39:4a:ef:91:c6:52:3b:19:15:86:7e:94:6f:f1:70:ec:cb:98:
a0:91:a4:09:a5:31:67:bc:ce:29:36:ad:a3:9a:d9:3e:52:2d:
3d:2f:5a:ee:d2:9d:89:fe:cd:f4:96:f5:43:0f:a7:9e:f5:2f:
13:9b:38:eb:ad:52:72:31:74:72:d3:bb:cf:c0:b5:b9:59:90:
22:50:a9:5f:93:e1:a7:f9:2f:9c:7f:c7:8c:45:59:4c:b6:96:
f5:8b:a6:ac:e9:f9:b2:25:e1:eb:b6:08:95:55:90:e2:fa:d9:
9d:2e:d5:28:14:1c:97:67:7d:a9:bb:4d:dd:08:c9:27:bf:14:
b1:a8:94:d5:90:e2:4f:2f:ad:8d:be:3d:07:cd:cb:32:85:1d:
e0:50:45:ce:98:f6:32:24:eb:cd:8f:96:6e:a0:b9:29:43:86:
16:8d:5f:89:c2:cd:1a:4c:a4:14:b4:cd:a7:6e:3c:bb:13:72:
ab:1a:cf:cd:e9:98:19:a2:72:23:36:16:30:09:fa:84:b5:c7:
f6:e0:9d:9f:9e:30:5a:df:8a:41:56:b4:25:41:c8:9f:b6:5e:
c1:52:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:05 2025 by rpki-client