Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2d98974-8813-3ead-afd6-2d68c6f1035b.roa
File: d2d98974-8813-3ead-afd6-2d68c6f1035b.roa (raw, json)
Hash identifier: XCvVQUDR/1fbSTQ928b7HhuU5qNNVv/N5dtM8o70uBs=
Subject key identifier: 0C:9C:D2:30:C7:41:0A:EE:F2:66:3E:73:8F:F3:79:20:35:D1:A8:BC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849A0CC5E5913A086EB9A32A700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2d98974-8813-3ead-afd6-2d68c6f1035b.roa
Signing time: Thu 24 Apr 2025 03:14:56 +0000
ROA not before: Thu 24 Apr 2025 03:14:56 +0000
ROA not after: Wed 23 Jul 2025 03:14:56 +0000
asID: 401152
IP address blocks: 23.26.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 17:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a0:cc:5e:59:13:a0:86:eb:9a:32:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 24 03:14:56 2025 GMT
Not After : Jul 23 03:14:56 2025 GMT
Subject: CN=3ec31138-5ee7-4785-95a7-82322a1e664e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:eb:d5:8d:5e:f5:25:ef:4f:51:80:0d:9c:
a9:1b:57:63:ed:df:80:c5:2c:fa:cc:6a:9d:90:ca:
94:14:c1:71:f4:ee:67:9c:43:45:42:6f:87:0d:07:
f5:0d:48:75:c5:49:6b:6c:4e:97:36:7c:f0:0b:7c:
dc:c2:d5:27:7f:9b:a5:07:66:dc:c3:34:f7:20:21:
f5:5b:02:b9:ff:77:fa:7b:07:15:29:45:75:88:15:
86:e1:b4:a7:92:a5:89:61:26:6a:4b:99:66:78:21:
0e:7e:d2:0a:94:07:1d:78:ec:42:17:59:24:6c:57:
a9:8c:ba:7d:a9:7c:89:37:37:03:48:58:64:a3:5d:
bc:34:3b:52:38:c6:57:88:ab:2a:57:98:2c:80:35:
0d:4d:e7:a7:e1:2c:84:12:c8:c7:69:a5:29:81:27:
bb:19:a9:54:43:45:22:3b:a9:de:7e:fa:4a:48:5d:
f4:66:e4:90:7b:3c:53:c6:c0:42:1e:e6:47:5d:8e:
81:92:27:a1:0e:8d:66:db:11:c7:15:1c:36:c2:26:
c8:19:e0:5c:fb:b8:f5:0d:77:60:61:e3:c6:4a:09:
ee:54:b7:33:39:1a:07:58:2e:66:2e:9e:3d:1f:04:
ac:be:19:80:05:33:85:6d:01:ff:31:f5:0f:73:00:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:D2:30:C7:41:0A:EE:F2:66:3E:73:8F:F3:79:20:35:D1:A8:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2d98974-8813-3ead-afd6-2d68c6f1035b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:37:ad:4a:f8:a4:9b:16:28:a9:f3:90:94:5d:57:ce:1b:e6:
ed:74:cd:cc:f7:2a:ee:60:64:37:02:4c:9d:be:92:d9:db:ee:
be:7e:20:c8:9c:7e:76:36:81:26:fc:6f:d4:8f:d4:3e:47:c2:
42:40:40:66:89:f0:9a:08:81:d1:f8:9f:1d:b1:96:bf:3d:35:
b5:8c:8c:f6:b0:02:e5:9c:77:a2:40:23:c1:64:41:e5:70:09:
d5:98:78:eb:ee:c4:63:96:fd:c2:93:63:cd:d8:57:c4:78:74:
8b:42:3b:24:f2:e6:46:05:4b:a4:07:98:d8:57:4e:a3:f3:3c:
c4:c3:86:51:cb:a8:dc:0b:4a:0f:87:e3:27:01:78:31:71:6b:
93:c3:a5:f3:a1:57:e4:7e:f7:40:99:f3:c4:79:9d:16:5b:18:
ed:d7:be:ec:1a:09:f6:b4:2b:aa:ee:ab:da:1a:3b:99:60:a1:
1e:42:26:d0:43:a7:3f:fd:1d:09:00:82:a5:00:3d:49:ea:69:
56:23:7d:55:01:da:69:e5:94:68:e2:f2:7f:c9:e0:6b:ca:cd:
51:e3:ca:b9:19:23:a9:d4:81:1f:92:e4:7a:ac:02:42:9a:d7:
2e:83:15:7b:59:2c:60:06:91:dd:6e:1b:20:98:9b:79:d9:c7:
7c:ae:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:13 2025 by rpki-client