Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e20383334.roa
File: 34352e34322e34332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tNjYfy8vRZJKixydLPOUCZU4ahn9bVWCVQpNagT8Uc8=
Subject key identifier: CF:7D:AC:A6:31:EC:CD:D5:9B:44:AD:88:8F:34:30:AC:D2:9C:A5:E4
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 70FE6808F72C16F2DB95FA5FE66E21163EDD1409
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e20383334.roa
Signing time: Sat 18 Oct 2025 00:10:32 +0000
ROA not before: Sat 18 Oct 2025 00:05:32 +0000
ROA not after: Sat 17 Oct 2026 00:10:32 +0000
asID: 834
IP address blocks: 45.42.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 12:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fe:68:08:f7:2c:16:f2:db:95:fa:5f:e6:6e:21:16:3e:dd:14:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Oct 18 00:05:32 2025 GMT
Not After : Oct 17 00:10:32 2026 GMT
Subject: CN=CF7DACA631ECCDD59B44AD888F3430ACD29CA5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:20:a7:61:db:6c:ec:c3:48:b6:24:74:03:
e5:f1:f3:ab:b0:e3:60:37:35:f1:3e:2a:e4:0f:e8:
f8:29:26:b5:ae:67:3d:cd:ae:28:90:59:74:f4:f4:
f4:b9:df:92:e0:f2:f6:13:32:a4:22:62:f9:66:97:
5a:75:6e:e6:2b:2c:59:ba:e9:1f:98:a2:89:b9:9c:
f9:ec:71:e6:65:eb:d4:2a:a0:e7:59:80:0b:4a:96:
01:19:75:ca:80:a4:33:82:21:a7:70:18:8f:44:1f:
c6:4f:40:7a:38:a5:41:f8:44:64:5c:e3:18:95:32:
71:ef:ff:82:3b:a0:76:ff:ad:40:cb:3c:89:4b:c1:
a6:ab:3b:27:88:37:22:21:b0:60:a3:a2:26:9f:fd:
3e:ae:92:32:0d:72:d1:a4:73:e3:e4:5b:57:a3:ca:
3e:35:af:8f:23:33:1d:b5:a2:47:9c:47:c0:bf:93:
db:fa:61:6f:25:2c:13:97:fe:bf:3e:dd:4c:21:7c:
ab:07:7e:e3:b6:9a:41:97:5a:e0:5c:32:c6:ff:c3:
d7:b6:72:53:70:8b:75:ce:d9:13:70:34:90:0e:66:
d3:f3:34:d9:c6:de:63:7e:dc:67:d3:d9:25:79:a4:
c3:9b:19:20:8b:15:23:7d:0f:a2:24:c5:b9:70:80:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:AC:A6:31:EC:CD:D5:9B:44:AD:88:8F:34:30:AC:D2:9C:A5:E4
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.43.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1f:6d:8b:f4:42:d4:a3:ba:11:99:08:8e:b9:31:6c:4c:9b:
cf:3c:c9:ba:85:5e:d9:48:e0:66:6e:fb:9d:d2:99:4a:45:53:
9d:bc:19:9f:84:d1:53:37:30:5f:20:32:73:ac:5a:f3:12:71:
0f:f1:ee:a7:ac:1c:80:b3:77:f0:d2:08:f1:c7:ea:82:ce:e9:
07:ab:4c:15:d7:5e:df:04:d1:7d:cc:f9:42:73:e2:66:5c:cf:
af:e6:a7:0c:45:4b:cb:70:df:0b:bf:5e:7a:f6:95:76:74:8b:
ee:05:b9:73:e5:a7:38:a5:03:c6:d9:67:c5:6b:03:67:15:d0:
af:54:e6:3a:71:45:c9:eb:13:11:d1:cc:84:7e:42:db:5b:76:
33:93:68:9c:0c:ed:eb:c4:e7:3f:d2:c9:16:81:c5:46:99:24:
f9:77:1f:0f:1f:d4:5c:41:70:27:11:f8:29:63:3c:a5:de:ef:
3c:b8:0d:9f:9b:60:09:cf:37:13:49:09:a4:e2:f7:0f:b4:63:
40:cf:9c:b4:11:5a:2d:c2:97:fd:52:d9:93:b2:5e:2e:a2:8e:
3a:d2:be:6f:fd:e7:de:97:5a:08:a4:9d:f3:db:b9:e9:a7:39:
02:9f:4d:1e:ec:24:45:39:1d:f5:b8:0e:01:4e:c0:6c:ab:9c:
c6:06:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:28 2025 by rpki-client