Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666430373a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666430373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: CEUxEQDiAB811WNx2Qetk4BpHq/9FaKZ0gtht97m5FA=
Subject key identifier: 04:8C:58:B6:96:69:BD:73:4D:88:FD:08:DD:B9:FD:F3:E1:62:7C:02
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 216C98266345253550C47474ABEADDEA5E6A6DA2
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666430373a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:22 +0000
ROA not before: Thu 26 Jun 2025 12:31:22 +0000
ROA not after: Thu 25 Jun 2026 12:36:22 +0000
asID: 396968
IP address blocks: 2a0f:6287:fd07::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 22:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6c:98:26:63:45:25:35:50:c4:74:74:ab:ea:dd:ea:5e:6a:6d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:22 2025 GMT
Not After : Jun 25 12:36:22 2026 GMT
Subject: CN=048C58B69669BD734D88FD08DDB9FDF3E1627C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:98:42:cc:01:b1:0b:42:18:9e:da:b3:a1:
93:ab:0e:eb:7b:a2:55:ce:d3:16:91:8b:be:e1:93:
d3:e8:85:40:33:bb:ce:cd:67:af:f3:ec:ff:d7:d8:
e1:9c:30:8f:b2:cd:00:c6:c4:52:b8:ba:2a:71:9a:
47:81:d1:36:a0:3b:9a:b3:39:17:6e:44:2b:a5:6d:
ee:76:86:a6:66:89:e0:7d:a2:df:59:2d:12:be:68:
ef:b1:82:12:53:9a:17:09:74:53:b9:5e:ca:e8:a7:
7a:bd:e7:b5:b1:7b:bb:5e:0f:8a:ca:92:24:a6:33:
ef:f4:1e:cb:e5:33:a7:80:17:ce:60:e1:f2:b9:4b:
e0:b2:67:f2:21:0f:7e:b6:6e:82:6b:ef:f3:29:b7:
20:d6:07:f1:53:34:5b:f7:f9:b3:2b:48:96:72:a7:
e0:e8:e6:df:86:8b:1a:1a:7c:4e:df:a8:8a:4e:84:
9e:b5:60:8f:40:ba:67:62:b7:23:d8:7f:c7:b7:8b:
98:0a:0a:a0:71:8a:88:b9:9a:ef:90:0a:a3:04:3d:
28:26:7e:4e:1c:0e:d7:ed:49:e9:97:ec:26:c3:4f:
87:55:6b:ca:b7:d9:b3:6d:30:6a:fe:6c:e2:c3:e0:
4c:d7:8b:13:62:f1:64:b0:ad:1b:28:d7:4a:14:cc:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:58:B6:96:69:BD:73:4D:88:FD:08:DD:B9:FD:F3:E1:62:7C:02
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666430373a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fd07::/48
Signature Algorithm: sha256WithRSAEncryption
98:eb:1f:db:ad:97:8a:01:c1:93:3b:16:ea:33:fc:6b:45:e2:
4b:79:2b:ba:32:02:de:9b:8c:5c:88:6e:55:22:f9:a1:00:56:
f4:28:f8:50:a6:c3:6a:1d:72:ed:a2:da:15:ae:58:1a:dd:80:
a3:fa:0b:72:97:07:b0:90:22:05:28:ec:f6:30:db:16:1d:10:
c6:52:7c:76:44:ca:c8:60:61:0c:98:bb:db:9c:04:52:b2:a7:
33:e8:5e:9b:03:04:6a:ab:25:f5:ff:be:e6:8a:6a:8f:b1:be:
ec:48:43:2f:43:13:01:49:2d:c6:5f:48:27:7f:e0:9f:c0:a3:
fe:2d:ad:01:d3:6b:3a:c3:5d:8d:1f:3f:5d:3d:23:d1:cb:b1:
60:29:2a:5b:55:8e:16:65:07:c6:66:23:96:80:49:c0:f1:d3:
b3:c2:f6:37:b7:45:53:f6:bf:a4:3f:ab:42:7b:38:f1:26:c7:
14:d4:2d:64:03:d1:a3:21:27:1b:c1:93:bb:80:27:d9:83:20:
f8:99:b9:f7:dd:14:93:6e:e1:88:cb:7c:20:9b:b9:be:f1:51:
ad:86:95:97:ee:9b:d4:2e:75:94:da:2e:ff:a4:aa:84:ff:cd:
ba:e8:b7:8c:2c:8a:1c:4f:6c:e0:70:1f:b4:8c:d2:4a:91:75:
f0:0b:7d:8c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIWyYJmNFJTVQxHR0q+rd6l5qbaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMxMjJaFw0yNjA2MjUxMjM2MjJaMDMxMTAvBgNV
BAMTKDA0OEM1OEI2OTY2OUJENzM0RDg4RkQwOEREQjlGREYzRTE2MjdDMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdh5hCzAGxC0IYntqzoZOrDut7
olXO0xaRi77hk9PohUAzu87NZ6/z7P/X2OGcMI+yzQDGxFK4uipxmkeB0TagO5qz
ORduRCulbe52hqZmieB9ot9ZLRK+aO+xghJTmhcJdFO5Xsrop3q957Wxe7teD4rK
kiSmM+/0HsvlM6eAF85g4fK5S+CyZ/IhD362boJr7/MptyDWB/FTNFv3+bMrSJZy
p+Do5t+GixoafE7fqIpOhJ61YI9AumdityPYf8e3i5gKCqBxioi5mu+QCqMEPSgm
fk4cDtftSemX7CbDT4dVa8q32bNtMGr+bOLD4EzXixNi8WSwrRso10oUzG5xAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUBIxYtpZpvXNNiP0I3bn98+FifAIwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjQzMDM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/0H
MA0GCSqGSIb3DQEBCwUAA4IBAQCY6x/brZeKAcGTOxbqM/xrReJLeSu6MgLem4xc
iG5VIvmhAFb0KPhQpsNqHXLtotoVrlga3YCj+gtylwewkCIFKOz2MNsWHRDGUnx2
RMrIYGEMmLvbnARSsqcz6F6bAwRqqyX1/77mimqPsb7sSEMvQxMBSS3GX0gnf+Cf
wKP+La0B02s6w12NHz9dPSPRy7FgKSpbVY4WZQfGZiOWgEnA8dOzwvY3t0VT9r+k
P6tCezjxJscU1C1kA9GjIScbwZO7gCfZgyD4mbn33RSTbuGIy3wgm7m+8VGthpWX
7pvULnWU2i7/pKqE/8266LeMLIocT2zgcB+0jNJKkXXwC32M
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:17:53 2025 by rpki-client