Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663362633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663362633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: vDIZrt3GqJB8qOz4jDe1GLJEScgnrqen0JNjU+eyu58=
Subject key identifier: D8:5E:0F:39:3D:8A:1A:60:C5:72:EA:18:0C:2D:F2:3C:AC:F9:9F:44
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 0A0CED23BAD8DB27FA55272278E046EFE572A77A
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663362633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:22 +0000
ROA not before: Thu 26 Jun 2025 12:31:22 +0000
ROA not after: Thu 25 Jun 2026 12:36:22 +0000
asID: 396968
IP address blocks: 2a0f:6287:f3bc::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0c:ed:23:ba:d8:db:27:fa:55:27:22:78:e0:46:ef:e5:72:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:22 2025 GMT
Not After : Jun 25 12:36:22 2026 GMT
Subject: CN=D85E0F393D8A1A60C572EA180C2DF23CACF99F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:d7:a2:b1:f7:b3:69:71:e5:34:79:2a:54:
b9:cf:a0:0c:27:54:32:7b:de:79:93:03:53:cb:71:
a6:70:96:52:ee:9a:60:91:f5:ee:dc:c7:24:9c:ee:
a9:91:9c:04:68:3c:08:5d:a6:80:cf:67:99:4a:86:
23:70:99:c8:b3:42:0c:d0:fa:97:69:e8:4f:e4:8e:
7a:7f:5a:6f:2f:86:50:49:33:d4:78:c5:73:50:5e:
60:fc:d0:ae:f9:bb:de:f4:3e:a6:55:60:2a:06:3f:
d8:41:1a:31:41:1b:3c:09:1f:28:8e:86:be:d8:fa:
04:25:63:35:65:76:44:d2:82:0e:6e:51:0c:60:76:
c6:75:fd:6d:e9:b5:f9:12:77:2d:bf:68:42:47:1c:
ed:bb:ab:b6:d7:ab:47:a3:e7:64:9a:01:4b:70:2e:
e1:47:f3:52:23:4b:53:15:d3:72:36:22:82:6e:a0:
fa:6f:82:24:8c:ce:38:83:b5:50:3d:0f:90:95:9e:
b0:fc:0b:60:95:16:af:7f:e8:a1:99:88:8d:43:56:
97:ed:dc:dd:e2:22:27:81:d5:8a:8f:f9:09:e2:bf:
cc:92:93:e7:79:11:f9:e2:7f:72:ba:6f:13:2b:17:
e8:e5:7d:bb:31:cb:06:0d:c3:52:96:ec:df:94:a9:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5E:0F:39:3D:8A:1A:60:C5:72:EA:18:0C:2D:F2:3C:AC:F9:9F:44
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663362633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f3bc::/48
Signature Algorithm: sha256WithRSAEncryption
24:fa:79:a6:55:dd:09:2a:f4:f7:09:8f:93:cd:93:c1:13:23:
87:2a:24:cc:f5:e9:da:da:3e:90:4d:73:8f:5b:cd:7f:f9:93:
de:23:a0:64:9f:fb:ca:7e:83:f3:b7:37:e3:72:57:0b:df:fd:
d3:1b:f3:92:26:2c:07:8f:c5:f8:10:ad:db:b7:79:e7:88:4c:
3a:d5:94:42:22:fb:59:56:a9:50:09:74:5c:37:a2:e4:96:1c:
5c:9e:d8:52:df:81:43:14:81:a0:f1:a3:69:39:15:9a:91:3e:
f9:88:bc:e5:84:c6:d9:47:97:c4:89:e5:79:a7:d1:e3:6f:4f:
2e:ed:5a:1d:30:16:83:79:89:3a:99:44:7e:29:66:7b:87:46:
93:7a:3f:97:e1:2e:43:3c:e0:d3:eb:bb:e0:2d:8e:3d:7f:ad:
2e:11:f7:39:49:ff:e4:55:f4:12:b0:ba:1c:cf:4a:4a:22:5e:
a8:a1:8a:2e:d7:85:87:08:bb:14:56:d7:a1:1f:d5:57:87:e3:
b7:21:41:1e:f0:71:c3:e7:d4:8f:92:99:d2:0c:ad:27:9f:a9:
6d:fd:95:49:7b:24:d6:4e:2c:9f:bf:15:10:4a:b4:70:4c:9c:
50:ff:a7:6b:bf:1c:94:5b:ac:41:7c:31:23:79:c8:7d:87:7c:
b0:51:f8:32
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCgztI7rY2yf6VScieOBG7+Vyp3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMxMjJaFw0yNjA2MjUxMjM2MjJaMDMxMTAvBgNV
BAMTKEQ4NUUwRjM5M0Q4QTFBNjBDNTcyRUExODBDMkRGMjNDQUNGOTlGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDjNeisfezaXHlNHkqVLnPoAwn
VDJ73nmTA1PLcaZwllLummCR9e7cxySc7qmRnARoPAhdpoDPZ5lKhiNwmcizQgzQ
+pdp6E/kjnp/Wm8vhlBJM9R4xXNQXmD80K75u970PqZVYCoGP9hBGjFBGzwJHyiO
hr7Y+gQlYzVldkTSgg5uUQxgdsZ1/W3ptfkSdy2/aEJHHO27q7bXq0ej52SaAUtw
LuFH81IjS1MV03I2IoJuoPpvgiSMzjiDtVA9D5CVnrD8C2CVFq9/6KGZiI1DVpft
3N3iIieB1YqP+Qniv8ySk+d5Efnif3K6bxMrF+jlfbsxywYNw1KW7N+UqcWDAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU2F4POT2KGmDFcuoYDC3yPKz5n0QwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzM2MjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/O8
MA0GCSqGSIb3DQEBCwUAA4IBAQAk+nmmVd0JKvT3CY+TzZPBEyOHKiTM9ena2j6Q
TXOPW81/+ZPeI6Bkn/vKfoPztzfjclcL3/3TG/OSJiwHj8X4EK3bt3nniEw61ZRC
IvtZVqlQCXRcN6LklhxcnthS34FDFIGg8aNpORWakT75iLzlhMbZR5fEieV5p9Hj
b08u7VodMBaDeYk6mUR+KWZ7h0aTej+X4S5DPODT67vgLY49f60uEfc5Sf/kVfQS
sLocz0pKIl6ooYou14WHCLsUVtehH9VXh+O3IUEe8HHD59SPkpnSDK0nn6lt/ZVJ
eyTWTiyfvxUQSrRwTJxQ/6drvxyUW6xBfDEjech9h3ywUfgy
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:05:25 2025 by rpki-client