Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa
File: 323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier: aEX4tKDySqzd4M+9VA6olSuy/Q4xINoKzst+tWjKrr4=
Subject key identifier: F0:87:29:20:D5:EA:5E:6B:E5:25:80:DD:19:F7:49:0C:D8:86:FD:7D
Certificate issuer: /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial: 06B3FBE7F9A4FC138D3AE3338E46EB9C37C077CF
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa
Signing time: Wed 16 Jul 2025 09:13:35 +0000
ROA not before: Wed 16 Jul 2025 09:08:35 +0000
ROA not after: Wed 15 Jul 2026 09:13:35 +0000
asID: 60900
IP address blocks: 2602:f9ba:a3::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b3:fb:e7:f9:a4:fc:13:8d:3a:e3:33:8e:46:eb:9c:37:c0:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Validity
Not Before: Jul 16 09:08:35 2025 GMT
Not After : Jul 15 09:13:35 2026 GMT
Subject: CN=F0872920D5EA5E6BE52580DD19F7490CD886FD7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:50:98:d5:88:7d:15:ba:51:d5:f2:93:e6:
e1:3f:b9:66:79:e6:6f:32:90:5f:d3:38:e2:75:58:
83:3c:43:35:2c:a1:5c:b6:75:8c:84:42:52:95:0e:
43:55:92:fd:c6:7c:18:58:13:4a:94:9c:68:d7:aa:
0d:d5:ba:38:bd:86:1f:62:3c:2e:f4:4e:75:c2:3f:
d2:16:41:31:a0:55:f9:40:e3:c6:25:77:e8:88:f3:
da:42:fb:13:64:a2:92:f8:12:b6:13:56:36:06:fd:
8a:bd:78:ea:4f:64:b3:85:3a:ed:d9:fb:f3:e3:81:
69:15:e6:9c:15:1a:ed:e3:3d:75:23:9b:73:23:27:
14:21:4e:2f:b6:cb:2f:13:7a:82:56:fd:c5:a0:bc:
fe:5f:2d:32:9f:5a:37:c2:a5:5b:f2:d6:1f:c4:07:
77:0f:8b:a3:90:eb:3f:08:2d:39:a4:0c:2a:d6:68:
1a:8d:9f:8c:95:f0:f3:15:cc:0f:17:8f:94:9e:09:
e6:ff:5b:fa:68:9d:84:90:11:f3:61:ab:37:78:f4:
6d:bd:2d:a5:ad:e4:99:49:51:d4:e3:09:60:c1:60:
3a:3a:7b:c4:b1:3c:ca:15:25:bc:02:e5:34:66:82:
09:5a:a5:bb:47:9e:13:cd:d3:93:62:57:51:24:10:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:29:20:D5:EA:5E:6B:E5:25:80:DD:19:F7:49:0C:D8:86:FD:7D
X509v3 Authority Key Identifier:
keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ba:a3::/48
Signature Algorithm: sha256WithRSAEncryption
37:95:e0:f4:14:19:ef:84:5e:16:ec:72:84:df:c9:9c:f9:5d:
31:cf:59:62:db:66:e4:17:be:81:d5:13:6c:8e:c3:ba:10:82:
a3:48:2c:38:bc:3e:da:93:c1:06:b7:4d:8f:ff:1e:fb:f1:fd:
bd:ed:d1:63:a4:54:e8:d2:b5:26:cc:70:c4:f3:6d:e9:3f:fb:
e8:25:3c:66:67:e4:1a:89:56:38:ce:6a:65:69:62:fe:ff:9b:
59:2a:79:b7:86:91:de:23:ba:00:d7:67:b8:b8:21:1f:9f:87:
88:c0:3b:df:79:b0:88:84:f9:de:28:82:34:36:22:c0:14:b6:
3e:66:3e:93:2c:f1:53:41:9b:01:31:01:c5:88:4a:0c:98:e0:
cd:0d:27:2e:2e:da:8b:c6:c6:b2:fa:c8:13:5b:a3:d2:e9:8f:
65:54:98:75:85:23:ee:74:53:f6:f1:48:35:d7:38:e0:71:f8:
08:b0:89:72:70:39:ee:5f:3d:19:d4:b7:09:4a:b4:11:72:ad:
bf:3b:48:fb:5d:40:43:27:6e:37:4d:e4:27:13:78:5c:15:31:
b0:3b:59:82:76:e1:bc:6b:68:71:88:16:61:5d:0d:37:ed:ef:
34:ba:2b:18:b3:3b:02:39:28:e4:5b:2d:d9:a1:f7:55:a3:cf:
5d:9a:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:42 2025 by rpki-client