Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8099d2e3-b002-36d8-bd3f-808eef4cb2d4.roa
File: 8099d2e3-b002-36d8-bd3f-808eef4cb2d4.roa (raw, json)
Hash identifier: KLt5BjxnA0pyDUP7u8sX+MoG6nudq7Dqj4r0DE9siDc=
Subject key identifier: 6F:38:8E:65:41:E2:E8:15:85:8B:67:E2:10:12:6F:85:17:3D:A5:CC
Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial: 010D0C9F4328583E1B8961DF4A5B0EFBEBF87A00
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8099d2e3-b002-36d8-bd3f-808eef4cb2d4.roa
Signing time: Wed 01 Jun 2022 18:54:08 +0000
ROA not before: Wed 01 Jun 2022 18:54:08 +0000
ROA not after: Tue 01 Jan 2030 05:00:00 +0000
asID: 61317
IP address blocks: 23.170.243.0/24 maxlen: 24
23.170.245.0/24 maxlen: 24
23.170.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Jul 2022 18:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:89:61:df:4a:5b:0e:fb:eb:f8:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
Validity
Not Before: Jun 1 18:54:08 2022 GMT
Not After : Jan 1 05:00:00 2030 GMT
Subject: CN=c176f6af-9e99-4c5d-8f35-0ddd26fd6dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:e8:3e:d8:7b:57:73:48:2e:a0:88:55:fb:
3d:c0:51:b5:89:30:a2:c6:64:00:df:b5:77:bb:9a:
e8:77:99:77:30:fa:52:ee:88:4b:09:70:f2:60:1e:
cb:14:d6:33:4b:fa:db:8d:f3:c0:69:b5:8d:7d:92:
97:63:d0:af:6a:39:0a:a7:72:45:71:02:83:4e:28:
a5:35:85:f0:2d:eb:54:78:57:b8:c7:d1:a1:59:cc:
3e:bb:01:69:5e:f8:d9:64:69:bf:e3:0d:f7:e6:26:
dc:16:e4:fa:7f:89:80:2e:e5:29:36:fa:f7:c7:32:
a1:aa:d9:20:2b:09:9a:d2:63:5d:3e:34:6a:d7:eb:
ee:e7:fd:83:d7:a6:51:fa:06:58:14:51:3d:af:7b:
96:e9:4f:0f:a9:d3:b1:e9:fd:d3:17:2e:6e:db:a1:
18:47:63:97:b5:eb:cc:3f:4b:6d:bb:ba:24:00:22:
28:f0:7e:bb:72:95:ce:cd:d0:48:d7:1a:a6:94:f9:
f4:c7:02:9a:ed:a6:a8:d9:34:ee:31:86:61:17:35:
46:8c:22:29:2d:ab:d9:5c:7f:4f:6c:97:73:bd:78:
2e:8e:f7:15:9e:d4:6b:49:44:52:dd:57:95:98:1b:
95:33:40:84:11:f2:1c:95:fc:8d:de:de:70:c5:d2:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:8E:65:41:E2:E8:15:85:8B:67:E2:10:12:6F:85:17:3D:A5:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8099d2e3-b002-36d8-bd3f-808eef4cb2d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
X509v3 Authority Key Identifier:
keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.243.0/24
23.170.245.0-23.170.246.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:74:f1:ed:6c:9a:98:94:9d:8f:26:b4:7c:3f:bb:e7:0e:84:
33:a4:ce:fb:14:23:16:db:f2:63:d4:e7:f9:61:7e:5a:07:ab:
6e:a2:b2:fb:e0:c0:0c:54:b1:6c:b8:99:dd:5a:2f:ad:30:4f:
9e:70:6a:1b:a9:3a:25:26:20:f4:a2:a5:f0:3a:de:00:57:40:
74:74:c5:6f:87:67:e1:b6:a2:89:e8:31:4f:aa:86:64:c8:a0:
9a:aa:eb:c7:b3:33:12:b8:6c:40:a1:72:78:35:8c:6a:13:cc:
8e:bb:ac:f5:38:fb:f9:ad:8c:12:dd:36:e9:93:7a:d3:a6:cc:
ea:8f:03:6d:0a:03:a6:b7:00:10:56:36:25:20:a5:f6:b8:1a:
6b:9e:b0:61:2c:91:ab:98:11:83:3a:5e:6c:09:d0:57:39:66:
39:36:09:1b:c3:c0:ae:8e:3e:a5:a9:8e:b8:d1:41:9e:29:69:
4e:7c:d7:9a:7d:b5:8f:2c:2c:9e:4d:be:c0:0f:72:e0:11:71:
f2:98:56:f8:c2:33:2b:c2:55:75:27:72:a3:b3:a8:2c:b2:45:
21:c5:0e:a7:f4:86:f9:5a:16:30:d5:d7:fb:83:90:8c:27:d2:
24:6d:21:39:5f:8d:5b:46:bf:d4:41:28:d3:41:05:b2:18:9e:
ab:33:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:05 2025 by rpki-client