Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
File: 34352e34322e34362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NWXlrh6OS5Q5nbgupFm6xmflirBdPIv+AdDH/3Bj4mM=
Subject key identifier: CF:87:EB:EC:51:92:58:8C:4A:5B:44:41:02:E6:5F:DC:29:BC:C6:49
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 6EF187E1068D6F6858F5CBF6D7E208366526275C
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
Signing time: Sat 18 Oct 2025 00:10:41 +0000
ROA not before: Sat 18 Oct 2025 00:05:41 +0000
ROA not after: Sat 17 Oct 2026 00:10:41 +0000
asID: 834
IP address blocks: 45.42.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 12:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f1:87:e1:06:8d:6f:68:58:f5:cb:f6:d7:e2:08:36:65:26:27:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Oct 18 00:05:41 2025 GMT
Not After : Oct 17 00:10:41 2026 GMT
Subject: CN=CF87EBEC5192588C4A5B444102E65FDC29BCC649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:c8:f7:4e:ca:05:08:99:7d:6e:86:b6:22:
d3:91:a6:9a:ce:a0:9c:5a:e4:fd:da:c7:d3:9e:e1:
7a:3b:fd:03:62:7f:41:91:6e:f4:c2:1c:92:80:e4:
85:a0:99:bb:69:58:f0:11:fd:b4:f6:38:bc:9a:2f:
a3:3b:7a:45:f5:23:02:cb:51:e7:17:6a:13:c3:a6:
ae:7d:68:1e:69:1d:30:89:32:62:c1:ee:a5:67:e1:
85:27:9e:b2:88:bd:34:bf:31:2c:75:34:ec:a5:f8:
65:e7:99:fb:e4:9c:e3:61:85:3d:6a:e8:f9:f8:6c:
bc:82:76:d0:83:d2:c6:65:cd:87:42:c8:74:94:df:
08:c7:a2:a4:05:b5:85:e6:31:b4:f8:7f:48:9c:25:
e0:49:6b:19:2f:95:1b:23:38:e1:57:ed:3f:c0:13:
87:83:89:1a:e6:1b:b8:3b:a4:b3:53:d3:66:5f:ec:
de:2c:c0:d0:bc:fc:34:f1:09:26:c0:1e:f5:b1:ad:
16:75:9f:a2:49:de:98:7b:0c:d4:39:48:0d:67:27:
03:35:52:3e:6b:b8:ab:6f:47:de:96:93:07:c9:88:
6d:be:a3:a9:8d:90:84:c4:14:88:68:25:41:d2:7d:
58:fb:d7:87:1c:2c:f6:0e:79:ef:16:d3:b8:33:6d:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:EB:EC:51:92:58:8C:4A:5B:44:41:02:E6:5F:DC:29:BC:C6:49
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.46.0/24
Signature Algorithm: sha256WithRSAEncryption
80:05:58:2b:96:8c:7b:d1:03:cb:0a:f4:25:e5:3d:5e:bd:5c:
9f:ee:2c:c5:68:de:36:36:99:47:3c:44:37:5f:6f:10:3c:b5:
e4:fb:07:7f:fe:81:ab:3b:b0:cb:b0:21:27:9f:78:c6:19:64:
41:66:46:d0:af:8d:29:13:c9:80:54:17:e3:92:13:85:e9:ba:
89:22:fe:42:1d:3d:5d:11:2e:53:40:3f:d0:8f:b6:09:a5:e7:
2d:25:d6:38:31:80:bf:22:27:d9:8a:0b:ab:a9:9e:a5:74:df:
70:64:82:5c:1f:a3:3c:12:99:ee:3b:e3:bb:76:01:db:c5:fe:
11:a8:1f:63:96:28:f4:4b:83:a2:fa:c0:c3:11:96:be:14:a2:
7d:99:64:59:8d:67:fb:66:73:de:0e:95:c7:f2:ea:60:63:9b:
da:f4:07:39:1e:5c:3b:32:5d:42:e8:42:58:60:07:32:a3:89:
07:17:de:e2:1b:dd:8d:62:1e:b1:3d:0e:38:3e:58:75:e1:fb:
2c:48:75:b1:93:a1:3d:07:d5:df:5a:d1:4f:bc:6b:07:cd:11:
ea:2d:da:21:31:df:77:52:f0:6c:3a:25:6d:3e:e0:12:22:d2:
8e:6e:a2:2b:3b:a5:15:93:05:57:dd:cf:f8:5d:e0:18:f5:35:
07:13:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:27 2025 by rpki-client