Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663538633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663538633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: QiynPpLkmF0quxsxFedf0bsH3e3bws8O2TcbC663SM8=
Subject key identifier: BD:48:32:85:C9:A4:BD:5D:17:1C:12:EC:75:42:87:AA:1B:27:73:EA
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 5CB9DCA2C811C58A6287D28C0D11811C01E01367
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663538633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:21 +0000
ROA not before: Thu 26 Jun 2025 12:31:21 +0000
ROA not after: Thu 25 Jun 2026 12:36:21 +0000
asID: 396968
IP address blocks: 2a0f:6287:f58c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b9:dc:a2:c8:11:c5:8a:62:87:d2:8c:0d:11:81:1c:01:e0:13:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:21 2025 GMT
Not After : Jun 25 12:36:21 2026 GMT
Subject: CN=BD483285C9A4BD5D171C12EC754287AA1B2773EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:31:5f:79:dc:65:9b:40:83:38:90:8d:1a:
03:94:85:f3:60:53:56:75:00:2e:d2:e4:48:ce:49:
8a:23:87:bb:82:63:65:3c:14:9d:69:82:17:2a:1c:
50:1d:d0:89:a5:2f:5b:ce:a0:f5:a5:21:c5:2e:df:
02:9f:4d:1c:6c:29:7c:fa:4d:7e:50:50:ca:cf:f3:
75:84:31:ba:77:25:03:92:f4:a6:7e:61:c5:23:cf:
e2:7a:55:1f:c8:3d:98:5d:02:bf:35:73:82:c5:2e:
b3:12:e9:93:dc:03:f0:23:17:9f:04:79:10:06:16:
a7:0c:66:9c:c5:d8:e9:7f:61:34:8d:82:ba:fd:92:
19:df:93:e3:1e:ca:94:75:bd:04:e7:79:a4:20:1c:
1d:cf:cc:aa:af:02:e4:b7:92:ac:c9:c1:f9:45:e0:
ba:08:0f:24:b8:26:b1:61:9f:29:db:d4:64:63:f7:
6f:79:d1:bf:d8:bc:89:86:ed:bc:c5:66:f8:fd:41:
ec:3f:17:a2:7f:05:33:b4:72:4e:61:9d:01:8b:45:
ae:e9:4c:b9:b8:1d:84:1e:b0:c3:13:e6:ae:87:57:
3c:3b:59:17:2e:d6:22:27:e9:19:c3:df:44:50:07:
27:08:f0:ca:c4:49:c4:8e:d6:f4:7a:ad:c8:c0:d3:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:32:85:C9:A4:BD:5D:17:1C:12:EC:75:42:87:AA:1B:27:73:EA
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663538633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f58c::/48
Signature Algorithm: sha256WithRSAEncryption
9e:d2:91:af:e8:d2:1d:d0:05:96:d4:1b:06:6e:6a:80:27:d3:
14:91:8b:cb:d6:91:12:0e:bc:7c:03:23:14:18:f3:ae:cb:5a:
de:ef:0f:c6:e9:ae:37:62:4e:c6:60:6d:c7:3c:bb:ad:5d:b1:
f0:71:1f:aa:a8:0c:73:c6:5a:0d:5b:8d:92:25:38:ff:28:d0:
3e:c1:ec:45:ba:ad:24:c5:22:31:cb:35:5a:67:d1:42:ff:47:
49:f6:94:85:c4:b3:e5:ec:26:8e:c2:a9:08:4d:2c:bf:49:6e:
2a:52:35:55:95:74:0a:46:5a:c5:28:4c:88:d9:53:e7:9c:35:
60:78:4a:39:66:53:5a:0d:86:be:eb:2c:35:d7:98:77:f6:a3:
47:e1:94:bc:80:a0:ca:43:c5:1a:11:27:0f:77:30:0c:24:90:
aa:b5:42:b4:bd:6e:e3:5c:44:69:9c:62:b1:9d:e6:4b:16:51:
02:0b:84:d2:85:22:41:ae:ca:64:fa:50:d9:ab:2c:c2:ab:6d:
f8:f4:f0:ad:33:cc:8e:07:a4:bf:87:fb:50:91:ed:87:9a:5d:
ef:b3:5d:e4:62:1e:b8:ef:b5:ec:c9:0e:d5:d4:43:ea:6a:b3:
fe:8f:06:a8:fd:72:5c:bb:d1:d4:99:65:12:ec:16:ea:54:5d:
b6:f6:b2:2b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXLncosgRxYpih9KMDRGBHAHgE2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMxMjFaFw0yNjA2MjUxMjM2MjFaMDMxMTAvBgNV
BAMTKEJENDgzMjg1QzlBNEJENUQxNzFDMTJFQzc1NDI4N0FBMUIyNzczRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNfDFfedxlm0CDOJCNGgOUhfNg
U1Z1AC7S5EjOSYojh7uCY2U8FJ1pghcqHFAd0ImlL1vOoPWlIcUu3wKfTRxsKXz6
TX5QUMrP83WEMbp3JQOS9KZ+YcUjz+J6VR/IPZhdAr81c4LFLrMS6ZPcA/AjF58E
eRAGFqcMZpzF2Ol/YTSNgrr9khnfk+MeypR1vQTneaQgHB3PzKqvAuS3kqzJwflF
4LoIDyS4JrFhnynb1GRj92950b/YvImG7bzFZvj9Qew/F6J/BTO0ck5hnQGLRa7p
TLm4HYQesMMT5q6HVzw7WRcu1iIn6RnD30RQBycI8MrEScSO1vR6rcjA0+StAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUvUgyhcmkvV0XHBLsdUKHqhsnc+owHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzUzODYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/WM
MA0GCSqGSIb3DQEBCwUAA4IBAQCe0pGv6NId0AWW1BsGbmqAJ9MUkYvL1pESDrx8
AyMUGPOuy1re7w/G6a43Yk7GYG3HPLutXbHwcR+qqAxzxloNW42SJTj/KNA+wexF
uq0kxSIxyzVaZ9FC/0dJ9pSFxLPl7CaOwqkITSy/SW4qUjVVlXQKRlrFKEyI2VPn
nDVgeEo5ZlNaDYa+6yw115h39qNH4ZS8gKDKQ8UaEScPdzAMJJCqtUK0vW7jXERp
nGKxneZLFlECC4TShSJBrspk+lDZqyzCq2349PCtM8yOB6S/h/tQke2Hml3vs13k
Yh6477XsyQ7V1EPqarP+jwao/XJcu9HUmWUS7BbqVF229rIr
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:07:17 2025 by rpki-client