Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663933633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663933633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: LI148myK1fMvthg/NkF4tK+BkECwMl+6TU7t3vjcU+o=
Subject key identifier: 9F:56:74:44:C6:4D:AB:B9:5C:80:F2:CD:77:D7:EF:EA:91:95:2C:53
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 3C2B961B5AA903DAE47548F48F664ED199870273
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663933633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:17 +0000
ROA not before: Thu 26 Jun 2025 12:31:17 +0000
ROA not after: Thu 25 Jun 2026 12:36:17 +0000
asID: 396968
IP address blocks: 2a0f:6287:f93c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 22:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2b:96:1b:5a:a9:03:da:e4:75:48:f4:8f:66:4e:d1:99:87:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:17 2025 GMT
Not After : Jun 25 12:36:17 2026 GMT
Subject: CN=9F567444C64DABB95C80F2CD77D7EFEA91952C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:c1:91:3f:c9:fe:55:f8:fd:00:2d:8f:29:
5b:87:66:e1:8d:b4:d7:49:d9:63:5b:79:bf:fb:c4:
d7:7e:a5:d2:07:28:e2:1f:d2:02:2a:db:eb:42:7e:
bd:6f:fe:2e:a5:12:20:37:bd:b5:10:82:fa:7f:13:
31:56:5a:14:d5:40:98:b8:2c:7e:09:a5:b5:9e:0e:
9b:9d:aa:e9:a7:b8:15:5d:4d:b2:db:34:a7:24:8e:
78:c0:83:9a:59:df:a0:2c:58:67:ae:c9:51:5d:ef:
ac:f9:ed:99:54:87:2c:4d:fc:d5:d3:a0:6e:aa:a4:
38:a9:d0:d9:a4:8a:40:af:a5:14:d8:7d:e0:ae:b6:
40:fc:e9:87:0d:f2:cd:28:07:83:81:69:32:9c:0d:
b4:31:4f:84:9b:03:b0:ad:4b:d2:81:a4:00:f4:e2:
6f:9d:03:0f:f9:3d:64:c1:50:59:fe:0f:14:f7:33:
0c:80:33:be:db:0f:97:a1:e2:91:be:da:9f:d9:7a:
db:44:32:75:2f:c6:34:01:ca:4d:ac:69:49:fa:1d:
33:6e:62:99:c6:18:c5:0b:49:ab:63:3a:ea:7a:47:
35:bd:b2:a1:c6:7c:1f:d4:9e:fb:59:d8:e2:84:83:
00:ad:d0:09:65:3c:d7:5e:28:c6:ae:bb:20:30:b9:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:74:44:C6:4D:AB:B9:5C:80:F2:CD:77:D7:EF:EA:91:95:2C:53
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663933633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f93c::/48
Signature Algorithm: sha256WithRSAEncryption
22:38:03:fb:6f:34:d5:ee:44:8d:b3:4e:32:4e:d1:7d:b9:77:
df:38:a3:05:5e:26:f4:c4:e8:2f:5c:99:9f:41:34:5e:b2:6e:
f1:98:65:78:1f:4a:ae:99:42:16:bb:e9:08:be:95:33:74:e5:
99:21:9a:9b:d3:4f:ca:8d:ea:84:e6:cf:1e:f6:85:60:44:ed:
c9:78:6f:ef:08:61:53:a2:ed:3d:e9:d6:b7:4e:02:0c:46:8f:
4b:36:22:19:85:f8:83:06:31:67:72:cc:85:f1:21:8a:99:f4:
31:f1:ca:42:f3:2d:e1:ff:66:93:b1:b0:d2:0e:b8:57:c5:9a:
17:ef:5f:c0:e4:bd:85:84:d8:fe:e3:4c:7b:7d:f5:15:04:33:
1b:97:c2:1e:00:cd:48:04:ac:ec:7a:94:29:e8:49:48:ba:a4:
8e:40:41:a8:ac:ce:d1:0f:ff:76:40:85:c8:8f:d6:48:b9:59:
a5:b2:ae:46:53:16:13:c8:5d:d1:d6:5e:c5:ff:36:fa:22:c6:
d0:ce:f1:99:b9:c7:b5:07:b1:a6:b8:cb:56:82:b0:b8:cb:76:
a1:5a:84:2f:fe:25:e6:b8:6c:b3:4f:84:70:fe:a5:df:d7:43:
f1:b0:1b:57:d0:61:85:ae:ea:a1:46:f7:2a:2e:2c:ee:0a:8a:
3e:8f:5f:ac
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPCuWG1qpA9rkdUj0j2ZO0ZmHAnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMxMTdaFw0yNjA2MjUxMjM2MTdaMDMxMTAvBgNV
BAMTKDlGNTY3NDQ0QzY0REFCQjk1QzgwRjJDRDc3RDdFRkVBOTE5NTJDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL+8GRP8n+Vfj9AC2PKVuHZuGN
tNdJ2WNbeb/7xNd+pdIHKOIf0gIq2+tCfr1v/i6lEiA3vbUQgvp/EzFWWhTVQJi4
LH4JpbWeDpudqumnuBVdTbLbNKckjnjAg5pZ36AsWGeuyVFd76z57ZlUhyxN/NXT
oG6qpDip0NmkikCvpRTYfeCutkD86YcN8s0oB4OBaTKcDbQxT4SbA7CtS9KBpAD0
4m+dAw/5PWTBUFn+DxT3MwyAM77bD5eh4pG+2p/ZettEMnUvxjQByk2saUn6HTNu
YpnGGMULSatjOup6RzW9sqHGfB/UnvtZ2OKEgwCt0AllPNdeKMauuyAwuUlVAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUn1Z0RMZNq7lcgPLNd9fv6pGVLFMwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzkzMzYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/k8
MA0GCSqGSIb3DQEBCwUAA4IBAQAiOAP7bzTV7kSNs04yTtF9uXffOKMFXib0xOgv
XJmfQTResm7xmGV4H0qumUIWu+kIvpUzdOWZIZqb00/KjeqE5s8e9oVgRO3JeG/v
CGFTou096da3TgIMRo9LNiIZhfiDBjFncsyF8SGKmfQx8cpC8y3h/2aTsbDSDrhX
xZoX71/A5L2FhNj+40x7ffUVBDMbl8IeAM1IBKzsepQp6ElIuqSOQEGorM7RD/92
QIXIj9ZIuVmlsq5GUxYTyF3R1l7F/zb6IsbQzvGZuce1B7GmuMtWgrC4y3ahWoQv
/iXmuGyzT4Rw/qXf10PxsBtX0GGFruqhRvcqLizuCoo+j1+s
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:16:23 2025 by rpki-client