Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e20383334.roa
File: 3139322e302e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3O78Z2q4hf9/zeDNkmIrz8jA6mKewuljUCAkie9GmLQ=
Subject key identifier: 74:E7:01:18:A1:AB:8A:6F:93:BB:B9:9F:25:E7:C5:5E:DF:03:8C:D6
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 6CA2E05351249FFBDB62B2A36EE2891355B0ABBB
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e20383334.roa
Signing time: Sun 28 Sep 2025 00:04:52 +0000
ROA not before: Sat 27 Sep 2025 23:59:52 +0000
ROA not after: Sun 27 Sep 2026 00:04:52 +0000
asID: 834
IP address blocks: 192.0.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 12:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a2:e0:53:51:24:9f:fb:db:62:b2:a3:6e:e2:89:13:55:b0:ab:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Sep 27 23:59:52 2025 GMT
Not After : Sep 27 00:04:52 2026 GMT
Subject: CN=74E70118A1AB8A6F93BBB99F25E7C55EDF038CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:c1:a2:cf:63:d1:21:ec:e0:1e:7f:02:3d:
c6:31:55:53:46:c3:ae:95:5b:d6:75:b8:55:57:5b:
fd:2a:ed:8e:e1:2f:3a:ab:c5:18:26:bf:cd:95:ee:
53:6f:f4:ac:42:15:13:ea:b1:dd:b7:43:ea:c8:08:
88:3f:cd:f8:7a:8a:2b:64:f2:73:c7:6b:06:8a:56:
cd:79:bf:b7:b9:22:b0:28:0d:ec:98:9a:a1:ca:f7:
6a:c9:fe:10:97:6b:e4:03:13:c2:f9:38:bc:63:bd:
4b:5e:48:3b:b4:7a:0f:a7:dd:07:76:3a:5e:6e:f9:
d5:d5:3e:1a:57:a9:e9:11:88:fa:a6:be:e5:57:f7:
63:84:ab:ab:f9:04:7f:35:03:87:fa:38:e2:35:92:
21:e6:96:70:d9:f5:67:80:38:85:02:77:73:b1:de:
ae:71:7e:8d:4c:a9:c2:c4:85:4a:bf:28:4e:22:cd:
11:71:dc:af:61:76:c1:ea:91:26:a0:24:de:f8:dd:
71:4a:ef:8e:4c:37:0f:87:1d:b2:8f:47:97:85:a9:
07:51:ba:2f:06:80:d9:6a:6e:64:89:e6:06:05:cf:
45:95:29:b4:93:e3:70:46:e3:ad:54:3e:fe:29:85:
76:4c:d6:6c:7e:95:e7:4d:ec:1f:1b:b1:13:78:f0:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:01:18:A1:AB:8A:6F:93:BB:B9:9F:25:E7:C5:5E:DF:03:8C:D6
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.17.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7f:fd:c7:5a:87:5e:f1:5c:32:dd:6c:dd:bf:1c:00:58:af:
1f:1a:2a:3a:36:e8:00:12:3e:ca:8a:27:b9:b0:3c:db:df:83:
9a:be:9a:73:a2:05:a7:fc:31:d6:88:e5:26:c1:11:9b:81:26:
6b:f2:c8:b0:d8:5d:80:44:eb:25:ee:4d:1a:f0:c7:c1:d5:1a:
3c:31:67:b5:5f:12:42:f5:81:85:a4:48:c3:88:ff:a7:d9:eb:
02:e4:23:cf:f0:66:6c:88:97:22:43:ad:81:59:7c:44:62:a0:
e0:62:da:5c:03:46:11:ec:18:42:8d:87:e6:ea:46:f3:85:68:
22:c9:34:8f:1a:eb:29:b8:33:c1:b2:e5:24:57:74:19:62:c2:
4c:f4:b7:c4:ce:a0:72:8f:7f:4c:dc:a7:06:4b:e7:5f:00:53:
83:bb:4c:a3:d2:fa:69:cb:a1:49:c3:91:77:e5:2a:99:c8:de:
0f:88:29:e1:fc:0a:22:7d:66:36:2d:b0:e0:00:0e:11:a2:4b:
a6:0a:85:4f:79:64:b2:79:be:58:06:17:72:d1:51:dc:f2:6c:
3e:55:ed:73:e5:be:22:a9:7c:83:53:99:93:5b:ce:50:03:e6:
fb:66:8c:30:99:e7:58:90:d3:53:c9:89:72:cc:55:a0:bd:5a:
be:c7:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:26 2025 by rpki-client