Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333537613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pxzyN5C5rHBp2zDoUJEQ7PBuDtTMTOrrc3KhDKcHgRs=
Subject key identifier: AC:5A:A4:C1:45:F1:3F:59:E0:EE:B0:0F:54:B3:10:D0:A3:57:90:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 33219C27AD0DF3385F8E2693D73F75B3538ACEEE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:10 +0000
ROA not before: Fri 20 Jun 2025 06:21:10 +0000
ROA not after: Fri 19 Jun 2026 06:26:10 +0000
asID: 16909
IP address blocks: 2a14:7581:357a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:21:9c:27:ad:0d:f3:38:5f:8e:26:93:d7:3f:75:b3:53:8a:ce:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:10 2025 GMT
Not After : Jun 19 06:26:10 2026 GMT
Subject: CN=AC5AA4C145F13F59E0EEB00F54B310D0A357909F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:28:e6:5e:0d:f1:00:cf:5d:da:c3:a2:06:
8a:a1:e1:bc:58:71:83:fd:3a:4d:67:97:bf:fa:43:
36:52:5f:d0:db:83:a6:09:e8:d0:ad:17:e8:ab:a2:
e9:1b:77:cd:69:9d:05:10:d4:14:28:9d:e6:56:36:
14:6f:6b:85:6c:36:71:0a:37:ce:17:5d:85:55:8b:
14:aa:fc:5b:6b:27:9d:92:76:62:9c:d2:03:bf:54:
3b:8c:f6:73:67:80:4e:2e:fd:f1:be:03:d2:9d:46:
38:30:49:44:d4:0f:69:ca:ff:a3:03:64:4d:fc:5f:
35:ce:8e:fd:79:34:30:e3:7a:91:10:86:db:3c:c3:
38:ae:d1:79:d4:5c:b9:ae:73:8f:b6:ad:a2:33:0d:
0a:bf:5a:35:3f:02:14:df:4b:df:5e:60:1d:e2:bd:
b6:6f:32:8f:eb:14:a3:6d:6b:3e:42:4c:21:36:20:
e3:5f:55:3d:0b:d5:a6:a3:2b:f9:1a:98:aa:7b:63:
65:26:35:43:4e:a2:16:c3:a4:04:29:d4:db:1b:d0:
9a:8f:02:80:a3:fa:0d:ac:2c:97:c1:91:90:3c:f4:
33:63:1b:36:45:ea:1c:cb:09:44:80:94:6a:03:cd:
76:c8:a4:4f:12:d9:bc:b2:50:c0:ec:94:69:06:51:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:A4:C1:45:F1:3F:59:E0:EE:B0:0F:54:B3:10:D0:A3:57:90:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:357a::/48
Signature Algorithm: sha256WithRSAEncryption
91:2a:95:4e:91:72:b5:6c:0f:11:87:21:e4:04:95:33:a7:e2:
0c:34:26:a7:99:ee:36:c0:f3:89:30:08:16:de:a4:db:ce:cf:
07:d8:30:54:ec:69:a9:95:2b:60:09:72:5e:ad:96:55:a5:59:
71:f1:c0:20:b8:b7:54:ad:4f:3f:69:a3:0a:13:76:92:a7:e9:
2e:85:b5:ae:8e:ab:47:5d:b5:ee:d4:92:be:5d:6c:00:0d:42:
43:de:b8:f2:e2:fe:91:87:36:99:04:5e:82:7d:9b:cf:3f:3a:
c5:88:c8:8f:81:6d:5f:13:35:9f:8c:21:99:9a:9a:8c:06:03:
81:37:41:2b:6f:33:99:20:6e:62:c4:1e:f5:f4:67:d3:6c:30:
f4:d7:e5:f4:67:82:00:e0:f2:3a:c9:b0:80:fd:9a:a7:06:13:
9f:d1:15:46:cb:7e:21:e4:d2:a4:0b:ee:72:d0:48:f7:e8:46:
ef:6f:3b:0d:14:35:0c:67:58:51:14:75:dc:4c:45:6c:42:40:
19:5c:44:7e:96:81:71:d7:ef:c1:5f:63:a9:c5:e7:a6:4b:8b:
38:ca:7b:f2:41:8b:4e:6d:af:fe:b7:63:9f:dc:c0:7a:05:a8:
e6:83:12:46:35:d6:77:99:dc:1f:2c:85:89:82:b6:c6:7b:df:
aa:d3:f6:5e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMyGcJ60N8zhfjiaT1z91s1OKzu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjIxMTBaFw0yNjA2MTkwNjI2MTBaMDMxMTAvBgNV
BAMTKEFDNUFBNEMxNDVGMTNGNTlFMEVFQjAwRjU0QjMxMEQwQTM1NzkwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CijmXg3xAM9d2sOiBoqh4bxY
cYP9Ok1nl7/6QzZSX9Dbg6YJ6NCtF+iroukbd81pnQUQ1BQoneZWNhRva4VsNnEK
N84XXYVVixSq/FtrJ52SdmKc0gO/VDuM9nNngE4u/fG+A9KdRjgwSUTUD2nK/6MD
ZE38XzXOjv15NDDjepEQhts8wziu0XnUXLmuc4+2raIzDQq/WjU/AhTfS99eYB3i
vbZvMo/rFKNtaz5CTCE2IONfVT0L1aajK/kamKp7Y2UmNUNOohbDpAQp1Nsb0JqP
AoCj+g2sLJfBkZA89DNjGzZF6hzLCUSAlGoDzXbIpE8S2byyUMDslGkGUSnnAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUrFqkwUXxP1ng7rAPVLMQ0KNXkJ8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzNzYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1ejAN
BgkqhkiG9w0BAQsFAAOCAQEAkSqVTpFytWwPEYch5ASVM6fiDDQmp5nuNsDziTAI
Ft6k287PB9gwVOxpqZUrYAlyXq2WVaVZcfHAILi3VK1PP2mjChN2kqfpLoW1ro6r
R1217tSSvl1sAA1CQ9648uL+kYc2mQRegn2bzz86xYjIj4FtXxM1n4whmZqajAYD
gTdBK28zmSBuYsQe9fRn02ww9Nfl9GeCAODyOsmwgP2apwYTn9EVRst+IeTSpAvu
ctBI9+hG7287DRQ1DGdYURR13ExFbEJAGVxEfpaBcdfvwV9jqcXnpkuLOMp78kGL
Tm2v/rdjn9zAegWo5oMSRjXWd5ncHyyFiYK2xnvfqtP2Xg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:39 2025 by rpki-client