Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663734633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663734633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: EPQXL6R9RKjZWwvkWCKr93g4C+jNWEsG1vaa7CFWlJg=
Subject key identifier: ED:D3:84:24:AA:F7:23:D3:1C:0B:08:5D:C3:C6:30:C9:B8:58:ED:1A
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 360CDCCA426DE91686EA244DB89A917C99EC5737
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663734633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:37 +0000
ROA not before: Thu 26 Jun 2025 12:32:37 +0000
ROA not after: Thu 25 Jun 2026 12:37:37 +0000
asID: 396968
IP address blocks: 2a0f:6287:f74c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 03:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0c:dc:ca:42:6d:e9:16:86:ea:24:4d:b8:9a:91:7c:99:ec:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:37 2025 GMT
Not After : Jun 25 12:37:37 2026 GMT
Subject: CN=EDD38424AAF723D31C0B085DC3C630C9B858ED1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:7d:ec:fd:96:82:d2:95:98:a9:98:48:af:
85:81:c2:6d:e1:62:28:49:e3:8f:10:47:d0:75:ce:
4b:ce:6f:75:6b:ae:10:68:4c:d7:68:22:bb:37:58:
9c:77:32:a6:92:f7:70:82:cd:bc:04:9e:b0:0b:55:
04:ff:68:0c:66:78:bd:e3:41:09:3a:05:34:e4:cc:
53:be:05:83:84:b7:5e:5a:43:7c:3a:37:16:21:d8:
fe:b2:55:6f:00:15:67:31:86:e1:20:df:51:7e:3c:
d2:ab:bb:61:58:ef:3e:46:95:6b:5e:f1:e3:20:29:
e3:cf:ad:94:9f:8d:e6:ce:d1:e9:3c:b3:b7:eb:77:
17:15:19:b6:eb:2d:66:7d:fc:af:9e:94:69:f8:96:
e3:4f:bc:cf:29:e2:f7:3d:f6:89:5f:05:dc:b6:70:
3c:a7:ce:5d:3c:6a:97:f1:60:8e:bf:f5:31:16:12:
f9:78:99:41:fe:17:8c:63:29:ef:00:32:51:cb:3f:
01:25:3d:95:fc:67:4c:10:23:fb:ca:97:cc:52:69:
8b:a9:44:69:a5:da:d5:e2:3b:aa:ae:f5:19:9b:6f:
4e:2e:ef:10:6a:fe:2f:0d:10:ec:76:cb:bf:4f:c0:
d5:6f:4c:76:9f:2d:8f:bb:37:cd:2a:b2:ea:2f:97:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:84:24:AA:F7:23:D3:1C:0B:08:5D:C3:C6:30:C9:B8:58:ED:1A
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663734633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f74c::/48
Signature Algorithm: sha256WithRSAEncryption
71:84:00:00:4e:7b:46:63:09:0d:07:97:5e:c1:6b:05:47:a5:
a6:66:13:22:6a:9b:a1:c1:a1:9d:5d:71:56:65:fa:a8:95:d2:
76:5b:e1:9e:8e:40:c4:47:c7:aa:5b:4c:bd:10:d3:f1:6f:2c:
94:37:7a:75:68:5a:34:63:62:7c:6a:f7:7f:1d:fa:ba:64:43:
23:da:35:7a:9e:e5:3a:bc:1b:03:4f:c5:41:9b:46:e5:0c:fb:
c8:65:9a:26:09:7b:86:d2:52:96:5d:ff:ab:7f:9f:ae:06:1b:
e4:c9:3c:3f:7b:24:00:01:ff:a6:50:79:6b:4f:8a:d8:8a:35:
29:fe:b9:a1:1b:9c:b1:5d:44:19:66:21:48:31:ac:0c:45:ae:
4b:42:b9:63:9b:5c:95:26:50:81:e9:55:1f:ec:dc:6f:6c:a3:
92:d6:89:5d:14:79:60:5b:23:bb:d7:c9:5a:b7:13:b7:03:b3:
b8:f1:91:6a:ba:87:6b:26:ff:67:d1:ba:3d:08:0d:14:2d:9d:
ed:f5:c3:30:82:4c:04:98:c0:64:93:ba:7d:cc:67:ab:56:54:
00:30:fd:70:0b:16:37:2f:1e:6b:7c:ae:7a:95:b1:0b:1b:54:
fd:ad:2f:ad:7d:a1:b0:28:6e:cf:bd:d0:43:1f:9a:0e:3b:29:
92:d9:f4:b9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNgzcykJt6RaG6iRNuJqRfJnsVzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMyMzdaFw0yNjA2MjUxMjM3MzdaMDMxMTAvBgNV
BAMTKEVERDM4NDI0QUFGNzIzRDMxQzBCMDg1REMzQzYzMEM5Qjg1OEVEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdX3s/ZaC0pWYqZhIr4WBwm3h
YihJ448QR9B1zkvOb3VrrhBoTNdoIrs3WJx3MqaS93CCzbwEnrALVQT/aAxmeL3j
QQk6BTTkzFO+BYOEt15aQ3w6NxYh2P6yVW8AFWcxhuEg31F+PNKru2FY7z5GlWte
8eMgKePPrZSfjebO0ek8s7frdxcVGbbrLWZ9/K+elGn4luNPvM8p4vc99olfBdy2
cDynzl08apfxYI6/9TEWEvl4mUH+F4xjKe8AMlHLPwElPZX8Z0wQI/vKl8xSaYup
RGml2tXiO6qu9Rmbb04u7xBq/i8NEOx2y79PwNVvTHafLY+7N80qsuovl02jAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU7dOEJKr3I9McCwhdw8YwybhY7RowHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzczNDYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/dM
MA0GCSqGSIb3DQEBCwUAA4IBAQBxhAAATntGYwkNB5dewWsFR6WmZhMiapuhwaGd
XXFWZfqoldJ2W+GejkDER8eqW0y9ENPxbyyUN3p1aFo0Y2J8avd/Hfq6ZEMj2jV6
nuU6vBsDT8VBm0blDPvIZZomCXuG0lKWXf+rf5+uBhvkyTw/eyQAAf+mUHlrT4rY
ijUp/rmhG5yxXUQZZiFIMawMRa5LQrljm1yVJlCB6VUf7NxvbKOS1oldFHlgWyO7
18latxO3A7O48ZFquodrJv9n0bo9CA0ULZ3t9cMwgkwEmMBkk7p9zGerVlQAMP1w
CxY3Lx5rfK56lbELG1T9rS+tfaGwKG7PvdBDH5oOOymS2fS5
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:58:33 2025 by rpki-client