Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130322e302f32332d3234203d3e20383334.roa
File: 3231362e3234372e3130322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: q4ONaAeytc+RlL0VJX1f0Qtlc2GEQA0AnlnxStKGHbA=
Subject key identifier: CE:B1:7F:A3:08:F7:3C:DA:A0:69:E7:0A:4E:CA:66:87:16:C5:C4:9B
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 5294E78D322871872C77889ABFEE04557CC8F224
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130322e302f32332d3234203d3e20383334.roa
Signing time: Mon 02 Jun 2025 07:53:45 +0000
ROA not before: Mon 02 Jun 2025 07:48:45 +0000
ROA not after: Mon 01 Jun 2026 07:53:45 +0000
asID: 834
IP address blocks: 216.247.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:94:e7:8d:32:28:71:87:2c:77:88:9a:bf:ee:04:55:7c:c8:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Jun 2 07:48:45 2025 GMT
Not After : Jun 1 07:53:45 2026 GMT
Subject: CN=CEB17FA308F73CDAA069E70A4ECA668716C5C49B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:33:9a:09:4b:dd:f4:f5:2c:77:78:13:7a:
fc:3c:e9:b9:35:8b:2a:1c:84:e3:59:d4:68:08:18:
56:8f:f3:5a:76:b0:51:e8:22:d8:1f:08:8b:df:41:
be:d8:76:5f:cc:4a:9e:ed:05:9a:7c:c2:2e:53:58:
95:2e:6a:dc:61:83:3f:85:0e:18:7c:a3:a6:34:e3:
6a:0b:1d:5b:d0:f9:40:cc:47:eb:c7:02:68:68:10:
1f:20:4c:fb:b8:c5:62:49:88:7b:0f:7a:97:fb:49:
0e:6b:34:eb:41:26:86:cb:21:00:18:0b:2f:5a:c6:
4e:21:f5:bf:97:87:19:0f:67:8e:0a:d7:ad:5c:af:
6e:58:d8:46:e7:f9:eb:b2:6c:95:6d:e7:58:c5:1a:
75:48:5d:9c:ea:45:a4:79:38:a1:80:55:9d:11:2e:
92:e8:6c:7c:89:65:5b:b7:73:2e:fe:89:07:10:1c:
eb:1e:ad:60:cb:8d:20:31:8f:62:b7:d5:ab:81:18:
ca:46:27:6a:c9:69:2e:ab:97:c8:ee:00:4b:25:4e:
4e:26:63:4f:07:9d:73:6d:e9:5c:f3:0b:6d:e4:b6:
bf:5b:fd:ae:3e:50:64:20:cc:ea:6a:51:5a:ed:d5:
2c:10:0e:f3:1f:9b:af:5b:33:14:a4:dd:7d:54:67:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B1:7F:A3:08:F7:3C:DA:A0:69:E7:0A:4E:CA:66:87:16:C5:C4:9B
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.102.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:8d:44:9a:33:13:c9:a7:0e:e3:ac:f4:ad:36:21:d1:cb:c6:
69:4a:00:5c:f0:61:a4:d6:fb:8f:ce:a2:6e:7a:d2:12:7f:8b:
c0:f1:31:b1:57:cc:2a:fb:e5:d0:9a:2e:c1:7e:af:44:91:61:
d3:5a:08:18:d6:91:b3:50:50:9c:90:e6:1c:06:13:cb:3f:e1:
76:24:fd:5e:b0:63:05:22:0a:bb:9b:30:a4:b5:17:ca:de:ed:
20:81:e4:88:07:d6:b5:61:67:09:5e:1c:8e:69:7c:df:19:a2:
f7:7b:96:f9:40:ce:00:5d:f0:2e:4a:d4:80:72:58:96:46:9f:
71:ab:a5:82:b8:57:e8:a8:fe:3c:b2:e7:58:b7:db:44:db:ed:
73:2a:16:ac:ba:dd:37:6e:01:47:18:1a:3b:bb:a2:16:32:90:
6f:6a:81:17:28:05:f7:2d:93:c4:1c:46:b2:21:2f:34:80:e3:
fb:e8:ef:73:60:69:9f:30:1a:1d:39:e9:77:e5:24:23:a6:11:
c2:66:6a:15:da:e3:ae:61:08:d0:7f:00:6f:60:85:e9:9a:b5:
a0:28:8e:4f:f2:fd:f4:e8:16:7c:88:70:3b:01:5d:76:32:b4:
d2:1f:a2:b5:c1:53:22:d1:a3:dc:56:2d:95:23:24:c2:73:6f:
7a:7f:5f:b4
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUUpTnjTIocYcsd4iav+4EVXzI8iQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjUwNjAyMDc0ODQ1WhcNMjYwNjAxMDc1MzQ1
WjAzMTEwLwYDVQQDEyhDRUIxN0ZBMzA4RjczQ0RBQTA2OUU3MEE0RUNBNjY4NzE2
QzVDNDlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ugzmglL3fT1
LHd4E3r8POm5NYsqHITjWdRoCBhWj/NadrBR6CLYHwiL30G+2HZfzEqe7QWafMIu
U1iVLmrcYYM/hQ4YfKOmNONqCx1b0PlAzEfrxwJoaBAfIEz7uMViSYh7D3qX+0kO
azTrQSaGyyEAGAsvWsZOIfW/l4cZD2eOCtetXK9uWNhG5/nrsmyVbedYxRp1SF2c
6kWkeTihgFWdES6S6Gx8iWVbt3Mu/okHEBzrHq1gy40gMY9it9WrgRjKRidqyWku
q5fI7gBLJU5OJmNPB51zbelc8wtt5La/W/2uPlBkIMzqalFa7dUsEA7zH5uvWzMU
pN19VGe1ZQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFM6xf6MI9zzaoGnnCk7KZocW
xcSbMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzIyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHY92YwDQYJKoZIhvcNAQELBQAD
ggEBAHqNRJozE8mnDuOs9K02IdHLxmlKAFzwYaTW+4/Oom560hJ/i8DxMbFXzCr7
5dCaLsF+r0SRYdNaCBjWkbNQUJyQ5hwGE8s/4XYk/V6wYwUiCrubMKS1F8re7SCB
5IgH1rVhZwleHI5pfN8Zovd7lvlAzgBd8C5K1IByWJZGn3GrpYK4V+io/jyy51i3
20Tb7XMqFqy63TduAUcYGju7ohYykG9qgRcoBfctk8QcRrIhLzSA4/vo73NgaZ8w
Gh056XflJCOmEcJmahXa465hCNB/AG9ghemataAojk/y/fToFnyIcDsBXXYytNIf
orXBUyLRo9xWLZUjJMJzb3p/X7Q=
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:11:59 2025 by rpki-client