Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663765343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663765343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 6RZpzd3CKM8pG3v04yMqq/OB+Q90ArMEEZJCFSqoT7k=
Subject key identifier: 4F:9C:D5:87:8F:5B:43:19:7B:C2:DC:78:32:F4:E4:CA:C6:60:30:D2
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 545A0F2D2E146B8F6B23B23272D31D6C80BD4463
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663765343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:22:08 +0000
ROA not before: Thu 26 Jun 2025 13:17:08 +0000
ROA not after: Thu 25 Jun 2026 13:22:08 +0000
asID: 396968
IP address blocks: 2a0f:6287:f7e4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5a:0f:2d:2e:14:6b:8f:6b:23:b2:32:72:d3:1d:6c:80:bd:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:17:08 2025 GMT
Not After : Jun 25 13:22:08 2026 GMT
Subject: CN=4F9CD5878F5B43197BC2DC7832F4E4CAC66030D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:c0:a2:6d:7c:f7:91:54:24:8c:bf:79:e4:
90:ea:5d:34:1a:dd:34:30:67:3a:82:46:90:5e:df:
72:95:a6:6e:36:d4:af:40:b6:ad:23:44:aa:3f:e7:
63:8c:64:e7:d3:11:54:1d:f9:1f:0b:94:da:f3:50:
bb:7c:a8:b0:23:e3:d4:05:f8:95:a1:15:eb:0c:fb:
51:b1:cc:02:32:a4:3c:01:12:1f:f2:9a:2e:d5:b4:
ee:2c:df:4b:64:52:1d:b5:c9:76:a4:00:10:b2:d5:
5a:ba:fc:ab:a9:50:81:ec:f3:16:b3:57:70:5c:15:
b6:32:73:ca:f3:fb:05:b8:e8:f1:9d:59:dc:bf:06:
36:ef:2d:7c:22:6e:d2:c0:c3:81:33:c5:08:6d:da:
3c:fd:57:c6:37:99:e9:ff:79:a9:28:db:33:b3:4d:
1c:fb:11:13:41:d9:7f:4f:3c:e0:81:f4:2d:c6:90:
64:99:5c:ac:d1:10:db:68:f3:5e:69:ae:d5:c7:db:
a2:6e:43:4c:52:aa:0f:85:91:f8:53:38:57:94:53:
38:d9:64:39:c3:b3:60:b4:3c:2f:eb:8b:10:3c:12:
c3:28:2a:d8:82:2f:0e:a2:b4:58:c6:94:5a:9f:5d:
cf:d0:2b:0c:22:e0:37:5e:20:e7:4d:37:7e:4b:d8:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:D5:87:8F:5B:43:19:7B:C2:DC:78:32:F4:E4:CA:C6:60:30:D2
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663765343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f7e4::/48
Signature Algorithm: sha256WithRSAEncryption
b6:9f:4b:93:f2:05:bb:33:ba:d7:9d:27:04:2a:c7:9f:4c:d8:
65:9c:f9:93:50:7e:c1:31:c8:02:1e:02:4c:e4:4e:61:28:c9:
f9:21:95:d4:e6:2b:6b:a5:a3:77:fd:81:50:db:2c:e5:23:c6:
8c:f3:1f:d9:45:3b:b4:60:c4:e1:a9:6e:99:d4:ad:01:bb:b6:
55:3b:e0:c5:87:42:53:d0:36:43:d0:c3:ad:32:28:2a:9b:f3:
13:cf:6d:97:80:3e:d4:59:a0:98:cb:ce:85:8d:76:ff:69:80:
45:f0:3d:b2:90:15:25:23:43:c0:a1:a5:45:b3:56:9f:c7:ba:
e6:9a:87:b5:4b:62:26:e0:53:00:37:44:8d:63:4d:77:2c:cc:
d0:43:d1:39:7d:7b:39:a5:0d:d6:f2:c4:60:d1:d6:8c:cc:da:
fe:04:56:58:82:e2:1f:3d:f6:f9:72:0d:e2:1f:d2:d3:53:39:
13:70:bb:86:15:f8:2d:1f:0e:c8:af:44:c6:64:e9:cc:d2:18:
5e:02:5b:f8:55:03:46:3d:ac:72:c2:24:07:a0:43:ea:31:a8:
73:17:19:f6:a9:12:28:6d:34:7a:4b:82:b7:6b:93:6f:09:46:
ae:28:9b:1b:8b:70:0c:6e:ed:3a:be:c9:4a:db:8b:2b:15:77:
3f:19:39:ed
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVFoPLS4Ua49rI7IyctMdbIC9RGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMzE3MDhaFw0yNjA2MjUxMzIyMDhaMDMxMTAvBgNV
BAMTKDRGOUNENTg3OEY1QjQzMTk3QkMyREM3ODMyRjRFNENBQzY2MDMwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82sCibXz3kVQkjL955JDqXTQa
3TQwZzqCRpBe33KVpm421K9Atq0jRKo/52OMZOfTEVQd+R8LlNrzULt8qLAj49QF
+JWhFesM+1GxzAIypDwBEh/ymi7VtO4s30tkUh21yXakABCy1Vq6/KupUIHs8xaz
V3BcFbYyc8rz+wW46PGdWdy/BjbvLXwibtLAw4EzxQht2jz9V8Y3men/eako2zOz
TRz7ERNB2X9PPOCB9C3GkGSZXKzRENto815prtXH26JuQ0xSqg+FkfhTOFeUUzjZ
ZDnDs2C0PC/rixA8EsMoKtiCLw6itFjGlFqfXc/QKwwi4DdeIOdNN35L2Bf3AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUT5zVh49bQxl7wtx4MvTkysZgMNIwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2Mzc2NTM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/fk
MA0GCSqGSIb3DQEBCwUAA4IBAQC2n0uT8gW7M7rXnScEKsefTNhlnPmTUH7BMcgC
HgJM5E5hKMn5IZXU5itrpaN3/YFQ2yzlI8aM8x/ZRTu0YMThqW6Z1K0Bu7ZVO+DF
h0JT0DZD0MOtMigqm/MTz22XgD7UWaCYy86FjXb/aYBF8D2ykBUlI0PAoaVFs1af
x7rmmoe1S2Im4FMAN0SNY013LMzQQ9E5fXs5pQ3W8sRg0daMzNr+BFZYguIfPfb5
cg3iH9LTUzkTcLuGFfgtHw7Ir0TGZOnM0hheAlv4VQNGPaxywiQHoEPqMahzFxn2
qRIobTR6S4K3a5NvCUauKJsbi3AMbu06vslK24srFXc/GTnt
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:22:10 2025 by rpki-client