Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20383334.roa
File: 37342e3131342e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KoyljvB+lO00XGltyJt5ettxWrXInccq89FkDZvouAo=
Subject key identifier: 1B:F4:E0:15:CD:FC:08:DC:09:60:8A:9F:AD:5C:7D:2B:D9:25:60:DF
Certificate issuer: /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial: 7EB1740C815ADAED0583BC9A38A37392F08AEB03
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Oct 2025 00:23:37 +0000
ROA not before: Fri 17 Oct 2025 00:18:37 +0000
ROA not after: Fri 16 Oct 2026 00:23:37 +0000
asID: 834
IP address blocks: 74.114.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 12:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b1:74:0c:81:5a:da:ed:05:83:bc:9a:38:a3:73:92:f0:8a:eb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Validity
Not Before: Oct 17 00:18:37 2025 GMT
Not After : Oct 16 00:23:37 2026 GMT
Subject: CN=1BF4E015CDFC08DC09608A9FAD5C7D2BD92560DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:a6:f8:7b:d0:14:78:c0:3e:1f:7c:a3:6d:
b2:5d:a5:e1:e3:6c:24:82:94:27:f3:1d:71:85:ec:
6e:01:33:5c:fb:ea:6e:bf:97:7c:53:62:77:7e:bd:
c2:3e:12:71:44:ab:d9:08:c9:27:b0:dd:87:51:d5:
e6:33:32:9c:8d:8b:7f:b3:b4:7f:0e:1d:95:7d:91:
a1:b2:74:51:60:92:b4:0a:5d:8f:f4:38:61:55:a1:
6b:ed:69:83:88:a9:52:8f:1a:35:cc:cf:31:40:7f:
36:dd:db:51:e6:58:d9:35:e7:12:2b:0b:a9:a2:19:
df:d1:e5:85:9f:bd:61:6f:8f:43:0b:bb:38:47:f8:
87:ca:65:8b:8f:5d:4d:07:b0:38:df:d2:b4:04:29:
1b:fc:19:f6:c8:dd:39:bd:62:11:29:02:e8:62:57:
8c:55:8f:d4:66:b8:ce:b7:ee:19:d1:90:f2:41:ac:
55:d3:d6:96:83:5a:a6:3b:fa:69:f9:7a:b1:c5:63:
82:a5:fe:21:a4:31:1c:9d:4e:d8:76:16:59:6b:99:
c3:07:68:61:63:65:6e:5f:aa:74:50:f7:e0:9f:bf:
de:fa:fc:c5:6f:f2:c7:f2:4c:70:76:ba:bf:29:f6:
66:5d:b5:e3:c4:5a:5a:c4:36:7b:5c:55:62:da:53:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:E0:15:CD:FC:08:DC:09:60:8A:9F:AD:5C:7D:2B:D9:25:60:DF
X509v3 Authority Key Identifier:
keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
26:70:4b:3d:ce:4a:1d:94:4b:4a:00:23:0b:8c:77:19:09:f1:
cb:8f:d4:f7:92:eb:35:31:1d:0c:87:f2:1f:3c:ad:60:9b:62:
ac:4f:4d:65:65:c3:ea:2f:d9:0a:dd:29:4c:a3:16:d7:9a:8a:
e2:a1:50:95:8c:f6:51:28:5e:a2:f4:7a:9a:2d:f8:05:d9:9d:
44:bd:8c:09:9e:44:f0:b7:d6:bb:d2:44:f1:17:61:12:7e:89:
a3:32:59:a5:21:50:e1:cd:fa:5d:dd:02:88:f1:d8:86:4e:14:
3e:2f:e2:e2:0e:af:13:b8:ca:81:ec:0e:5d:8f:7d:83:a1:59:
8c:09:6e:aa:0f:dc:ed:a9:37:31:22:5d:a0:84:d4:03:64:0d:
5c:35:62:c3:30:bb:f5:7c:47:18:87:5b:19:ad:f2:da:53:3c:
3c:d6:c0:47:88:1b:37:eb:b2:6a:5e:fa:7a:05:92:76:bb:ee:
fb:d4:f2:c6:33:7a:4a:dd:88:85:ed:c1:0a:9d:72:8f:b0:29:
d8:b8:bc:0f:8e:54:8c:2c:76:27:e8:c7:0f:0d:34:75:66:51:
0d:d8:91:0e:38:dd:19:28:a7:e8:94:1d:22:9d:92:1d:da:de:
c4:3f:30:36:18:dd:40:67:c1:09:c6:3f:57:c5:bc:11:6a:bd:
74:9f:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:19 2025 by rpki-client