Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88ac477e-a096-3a53-92f3-1a12006d8eef.roa
File: 88ac477e-a096-3a53-92f3-1a12006d8eef.roa (raw, json)
Hash identifier: B366ZgBfkD3XbqHSRQ2GgqUOn0sEI4QgYdVIf1PRgPw=
Subject key identifier: 16:84:23:D5:B0:97:2F:67:03:1D:0C:91:8D:21:D1:50:C8:0D:1B:3D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584195D88F6B4D66DBC91F190780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88ac477e-a096-3a53-92f3-1a12006d8eef.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Sun 20 Jul 2025 04:00:00 +0000
asID: 834
IP address blocks: 23.26.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 17:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:95:d8:8f:6b:4d:66:db:c9:1f:19:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 20 04:00:00 2025 GMT
Subject: CN=21fdc30f-3784-4cb4-9bb3-cc56cc308d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:1f:5b:b7:5f:1d:dd:77:35:b0:98:5f:8f:
20:e0:c2:a6:d9:4b:a9:37:0d:9c:b7:42:6e:e9:fd:
64:bd:7f:87:08:a5:9e:39:fe:40:8f:39:38:ff:65:
98:aa:36:99:dc:7a:11:d2:6a:9e:f3:07:b0:22:55:
f6:0b:ef:16:41:16:00:05:24:0b:bd:88:fd:b7:78:
b5:51:2e:93:59:af:e0:3d:8f:fa:54:06:d7:75:d8:
ca:d3:42:5a:3f:7b:1f:9e:ec:95:8e:0e:df:1c:92:
c3:a3:e7:86:35:93:f2:27:81:1f:fe:9a:d2:69:45:
5b:ea:e2:1c:d1:55:7a:a9:1d:4f:dd:6b:5e:d2:86:
82:d4:f4:d9:97:0f:d0:87:88:0f:31:bc:a3:b6:04:
04:e3:77:2d:9c:dc:c9:ef:94:e1:5e:92:05:9f:0d:
b0:12:56:ee:b6:cb:c7:95:e4:df:df:2a:c9:00:b0:
88:d7:cf:cf:3b:36:63:fa:8d:d7:c6:54:ab:c4:61:
72:74:4d:77:ae:c3:28:6c:5b:c0:83:f9:7c:56:3c:
14:db:c2:a7:11:78:69:bd:fe:a7:ac:a2:57:95:f2:
b4:ad:97:6b:b5:67:db:47:29:f9:49:91:c4:b0:2f:
35:12:f8:9d:0b:16:88:af:84:c0:6d:02:cf:93:db:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:23:D5:B0:97:2F:67:03:1D:0C:91:8D:21:D1:50:C8:0D:1B:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88ac477e-a096-3a53-92f3-1a12006d8eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:eb:06:c7:4e:10:db:a1:2d:bc:40:ce:53:a5:10:a3:21:54:
45:8f:ef:fc:09:7a:47:b1:30:59:36:f2:b7:8b:8a:45:e0:73:
79:d3:d7:93:54:27:64:d4:02:ee:06:ea:fa:14:7e:04:6c:8e:
8b:cb:e4:87:e0:84:ee:3b:e9:14:5a:8c:19:94:75:ac:27:44:
a3:55:b7:bc:57:bb:c3:df:d2:2d:91:f0:63:c1:b7:d4:f3:d6:
57:e4:ae:69:bc:66:30:7b:a4:c4:bf:f2:bb:83:1a:ce:da:c1:
8d:e6:b4:e9:05:83:3f:dd:aa:af:27:18:d4:1a:68:ad:74:13:
84:b5:36:c8:fe:e1:30:0d:93:ae:e2:26:3d:cd:5b:98:dc:68:
48:ef:59:f5:ec:1c:02:94:cd:28:37:55:15:c1:0c:dd:19:92:
e7:bf:c4:77:ab:b6:d5:d9:a9:be:34:cc:4a:bd:41:30:f8:a8:
ec:a4:9a:98:c5:6c:99:07:a2:38:7d:29:39:33:ce:e4:20:8d:
df:4c:53:4e:de:70:1c:cc:fd:71:c9:18:70:51:b2:ed:ac:c0:
6b:03:7a:0b:62:ee:ba:35:2c:e2:53:ee:71:50:94:d8:1c:ac:
0e:ef:d2:11:89:fe:3a:c9:4a:cb:b4:67:89:a8:25:4b:fe:03:
31:3c:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:02 2025 by rpki-client