Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
File: 3230392e38372e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: d2twpYy6MlChciW0u12QOiJt1lh9ridgiASahCzuTEU=
Subject key identifier: A2:A5:A5:65:46:6B:1B:05:3A:C1:CC:5F:B6:58:26:70:61:03:CE:03
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 187A19C5B863444BA5C5AB4BD9C759859986508C
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Oct 2025 00:23:32 +0000
ROA not before: Fri 17 Oct 2025 00:18:32 +0000
ROA not after: Fri 16 Oct 2026 00:23:32 +0000
asID: 834
IP address blocks: 209.87.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 12:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7a:19:c5:b8:63:44:4b:a5:c5:ab:4b:d9:c7:59:85:99:86:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Oct 17 00:18:32 2025 GMT
Not After : Oct 16 00:23:32 2026 GMT
Subject: CN=A2A5A565466B1B053AC1CC5FB65826706103CE03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:21:b1:54:fc:11:2b:7f:70:c3:0c:d4:3c:
53:c6:b8:91:87:05:58:45:a2:86:e0:c7:a8:42:37:
bf:7e:0d:af:0d:78:cb:49:28:0e:c0:28:39:7a:7e:
0d:58:46:34:1b:34:18:55:b5:34:66:fb:81:f0:71:
17:ec:2e:84:03:43:17:aa:b5:e0:93:d0:be:30:b4:
c3:10:40:9b:9f:48:d3:af:06:7f:47:46:2a:d4:d4:
cd:fe:65:31:20:17:13:c3:c2:10:32:b3:0f:b9:3f:
46:61:54:b7:28:08:7e:dc:48:ae:85:46:cf:ee:38:
d0:78:10:34:35:b3:56:a8:01:04:73:74:6c:e1:30:
f3:dd:12:39:35:c7:f8:d1:9f:c6:0c:68:e0:e0:c8:
04:cc:86:58:84:3f:47:c4:d1:06:46:08:bc:18:e5:
7f:7e:72:d8:02:70:04:9b:cb:b0:c5:03:9b:c8:4f:
61:3e:8c:5e:cb:2d:66:bb:bb:da:e1:49:63:93:62:
cc:4d:54:98:79:b5:0f:09:de:7e:73:96:32:7a:91:
f8:08:ed:e4:73:cb:a1:5b:66:49:70:03:31:e7:c6:
4f:48:fd:05:18:5a:5f:fc:ab:cf:a5:d0:66:d2:37:
e0:d2:20:49:0d:0f:cf:68:a1:73:72:f1:03:3e:e0:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:A5:65:46:6B:1B:05:3A:C1:CC:5F:B6:58:26:70:61:03:CE:03
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d6:56:6b:f8:f4:b3:52:51:97:17:b0:ed:20:c3:71:70:46:
74:8f:ac:3d:9b:0a:65:17:f3:f5:9e:4c:11:9e:17:2a:a5:b1:
15:0c:50:47:63:3e:6f:52:7e:23:94:42:61:f7:93:0f:13:3c:
7b:5f:19:bf:42:bd:b6:df:5a:87:32:eb:10:48:b3:84:79:38:
4d:ed:e8:73:5e:bc:4e:79:67:32:63:98:a6:e0:92:41:5f:e5:
00:61:c2:30:c2:b1:d9:01:70:90:b7:aa:2d:14:8c:3a:6b:8a:
f6:75:71:d5:50:af:0b:8a:bc:d3:2e:bc:c4:1d:6c:ba:60:64:
16:57:37:af:2f:07:af:d8:52:43:e7:ff:36:6a:75:d3:b4:75:
42:30:38:f9:b3:b4:c6:e1:2d:d3:ce:28:d2:b0:a5:aa:02:5c:
b7:ea:5f:b3:99:41:05:90:9f:e7:75:71:d4:26:cc:8a:eb:58:
18:db:93:33:49:41:89:5a:db:ba:55:12:93:2e:4d:2c:b4:d7:
b3:98:a4:3f:7c:58:2b:19:55:f0:b7:a0:d9:07:90:35:e0:7a:
c5:87:ad:a1:c6:6a:db:45:58:ba:4c:12:73:bd:0c:54:93:2e:
e4:0b:ea:3d:5b:57:60:67:47:ac:b4:06:23:07:ed:c1:07:1b:
a5:32:e2:fe
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUGHoZxbhjREulxatL2cdZhZmGUIwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUxMDE3MDAxODMyWhcNMjYxMDE2MDAyMzMy
WjAzMTEwLwYDVQQDEyhBMkE1QTU2NTQ2NkIxQjA1M0FDMUNDNUZCNjU4MjY3MDYx
MDNDRTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquohsVT8ESt/
cMMM1DxTxriRhwVYRaKG4MeoQje/fg2vDXjLSSgOwCg5en4NWEY0GzQYVbU0ZvuB
8HEX7C6EA0MXqrXgk9C+MLTDEECbn0jTrwZ/R0Yq1NTN/mUxIBcTw8IQMrMPuT9G
YVS3KAh+3EiuhUbP7jjQeBA0NbNWqAEEc3Rs4TDz3RI5Ncf40Z/GDGjg4MgEzIZY
hD9HxNEGRgi8GOV/fnLYAnAEm8uwxQObyE9hPoxeyy1mu7va4Uljk2LMTVSYebUP
Cd5+c5YyepH4CO3kc8uhW2ZJcAMx58ZPSP0FGFpf/KvPpdBm0jfg0iBJDQ/PaKFz
cvEDPuCHAwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKKlpWVGaxsFOsHMX7ZYJnBh
A84DMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5
Mzg4NGQyYTMwLzAvMzIzMDM5MmUzODM3MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRV6wwDQYJKoZIhvcNAQELBQADggEB
AJXWVmv49LNSUZcXsO0gw3FwRnSPrD2bCmUX8/WeTBGeFyqlsRUMUEdjPm9SfiOU
QmH3kw8TPHtfGb9CvbbfWocy6xBIs4R5OE3t6HNevE55ZzJjmKbgkkFf5QBhwjDC
sdkBcJC3qi0UjDprivZ1cdVQrwuKvNMuvMQdbLpgZBZXN68vB6/YUkPn/zZqddO0
dUIwOPmztMbhLdPOKNKwpaoCXLfqX7OZQQWQn+d1cdQmzIrrWBjbkzNJQYla27pV
EpMuTSy017OYpD98WCsZVfC3oNkHkDXgesWHraHGattFWLpMEnO9DFSTLuQL6j1b
V2BnR6y0BiMH7cEHG6Uy4v4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:30 2025 by rpki-client