Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a393366663a3a2f34382d3438203d3e203436313338.roa
File: 326130353a646663363a393366663a3a2f34382d3438203d3e203436313338.roa (raw, json)
Hash identifier: MZ/7j574TgG9FpddgFVc51rLqCFEp5rGQkeq2rKAXOA=
Subject key identifier: DA:1F:80:57:1E:25:32:37:EF:B2:45:0F:85:EC:7D:82:8E:35:75:00
Certificate issuer: /CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
Certificate serial: 2DF9D090F07F5D71FFDEB853BB471A96316D13C5
Authority key identifier: 89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a393366663a3a2f34382d3438203d3e203436313338.roa
Signing time: Wed 16 Jul 2025 22:42:44 +0000
ROA not before: Wed 16 Jul 2025 22:37:44 +0000
ROA not after: Wed 15 Jul 2026 22:42:44 +0000
asID: 46138
IP address blocks: 2a05:dfc6:93ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Jul 2025 16:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f9:d0:90:f0:7f:5d:71:ff:de:b8:53:bb:47:1a:96:31:6d:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
Validity
Not Before: Jul 16 22:37:44 2025 GMT
Not After : Jul 15 22:42:44 2026 GMT
Subject: CN=DA1F80571E253237EFB2450F85EC7D828E357500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:83:94:36:14:01:3e:74:e9:ca:cf:29:43:
ac:0f:c3:bd:df:71:ee:88:e8:86:bf:d8:11:a8:06:
2b:32:63:2f:42:d8:87:97:61:fa:c2:2b:b0:0b:26:
23:0b:fd:94:15:cd:2b:97:b5:aa:87:92:34:ed:7d:
c4:87:f3:72:f3:da:53:44:8c:d7:81:55:97:aa:18:
c4:50:73:f1:91:1f:7a:84:74:69:05:cb:83:11:e3:
2d:4c:58:c1:f7:e0:da:a3:7a:5e:6d:d3:ff:16:4a:
cc:ad:06:b4:1e:b9:90:68:4a:10:2d:bc:9a:65:6f:
88:24:03:ae:52:72:95:3a:ee:19:ef:72:15:06:77:
9f:c2:e2:43:fa:89:0e:b5:2a:4f:8b:c7:98:a8:d1:
fe:e0:4a:46:da:e2:b3:aa:35:4d:fa:2e:89:30:d5:
0c:9c:c6:4d:d8:fd:fe:b2:13:20:d3:18:65:93:86:
47:2c:fe:aa:37:65:93:83:52:a2:f8:b7:b2:da:02:
2e:49:37:51:ce:bd:9d:19:3a:42:bd:69:a1:c6:a4:
48:33:79:24:bb:f8:ba:53:81:f7:ea:38:5e:1e:10:
e4:ea:10:1f:44:29:5d:76:2a:c5:17:14:ef:28:31:
6a:9b:86:b7:62:ed:7c:0a:0d:8b:a2:1a:d6:0f:3e:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:80:57:1E:25:32:37:EF:B2:45:0F:85:EC:7D:82:8E:35:75:00
X509v3 Authority Key Identifier:
keyid:89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a393366663a3a2f34382d3438203d3e203436313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc6:93ff::/48
Signature Algorithm: sha256WithRSAEncryption
04:77:fa:51:8d:0b:1f:24:08:f7:79:f3:ed:57:8a:ec:bc:41:
6b:78:fa:45:c7:2f:8f:ac:28:d4:d5:20:6e:30:18:1b:7a:bd:
fb:bb:b9:6c:5b:12:28:33:f0:a8:71:21:fd:c4:cf:17:22:ed:
72:a8:ab:8c:04:a3:ce:b3:9f:e1:fc:4f:69:bb:6e:2f:31:93:
52:d6:d5:e3:77:2f:85:6b:a4:98:ba:8a:c0:9d:96:8f:94:17:
ae:f3:83:46:8f:45:de:a3:73:ef:d9:76:a3:6c:17:e1:42:12:
d5:e0:0a:f7:ed:07:53:18:e9:1a:a4:a1:8e:0e:ca:4f:e3:3d:
73:10:8f:bb:c2:22:66:98:c6:b1:5a:a2:62:5d:ba:cc:53:ef:
4e:b0:bd:ab:c1:7f:f8:05:f5:56:ee:92:a6:5b:a3:f1:11:fd:
45:0a:36:30:5b:f8:06:c7:46:3d:b5:c5:7e:9e:c3:a2:09:e6:
9c:b3:bc:ff:49:d3:d4:79:1b:d2:e4:b4:3b:47:df:86:63:d1:
3b:f4:0b:f1:d6:53:e4:c7:4e:3e:83:d2:31:84:1c:4a:c2:4d:
11:23:ef:aa:7d:78:d0:b9:ae:50:64:53:e1:40:6d:a5:6b:14:
6f:d0:b0:a4:5d:56:77:83:fb:98:cd:a4:c5:48:9e:bd:90:e7:
3d:fe:4e:b3
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIULfnQkPB/XXH/3rhTu0caljFtE8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlBQkRDRDhBOThBMjNBRjI1MjEzMzA3NzdDNDM5QzUw
QjgzQzBFMzAeFw0yNTA3MTYyMjM3NDRaFw0yNjA3MTUyMjQyNDRaMDMxMTAvBgNV
BAMTKERBMUY4MDU3MUUyNTMyMzdFRkIyNDUwRjg1RUM3RDgyOEUzNTc1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcE4OUNhQBPnTpys8pQ6wPw73f
ce6I6Ia/2BGoBisyYy9C2IeXYfrCK7ALJiML/ZQVzSuXtaqHkjTtfcSH83Lz2lNE
jNeBVZeqGMRQc/GRH3qEdGkFy4MR4y1MWMH34Nqjel5t0/8WSsytBrQeuZBoShAt
vJplb4gkA65ScpU67hnvchUGd5/C4kP6iQ61Kk+Lx5io0f7gSkba4rOqNU36Lokw
1Qycxk3Y/f6yEyDTGGWThkcs/qo3ZZODUqL4t7LaAi5JN1HOvZ0ZOkK9aaHGpEgz
eSS7+LpTgffqOF4eEOTqEB9EKV12KsUXFO8oMWqbhrdi7XwKDYuiGtYPPmBZAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQU2h+AVx4lMjfvskUPhex9go41dQAwHwYDVR0j
BBgwFoAUiavc2KmKI68lITMHd8Q5xQuDwOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTIvODlBQkRDRDhB
OThBMjNBRjI1MjEzMzA3NzdDNDM5QzUwQjgzQzBFMy5jcmwwgZMGCCsGAQUFBwEB
BIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9y
ZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvODlB
QkRDRDhBOThBMjNBRjI1MjEzMzA3NzdDNDM5QzUwQjgzQzBFMy5jZXIwgasGCCsG
AQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNkN2VlNWJiZWQz
MS8xMi8zMjYxMzAzNTNhNjQ2NjYzMzYzYTM5MzM2NjY2M2EzYTJmMzQzODJkMzQz
ODIwM2QzZTIwMzQzNjMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38aT/zANBgkqhkiG9w0B
AQsFAAOCAQEABHf6UY0LHyQI93nz7VeK7LxBa3j6Rccvj6wo1NUgbjAYG3q9+7u5
bFsSKDPwqHEh/cTPFyLtcqirjASjzrOf4fxPabtuLzGTUtbV43cvhWukmLqKwJ2W
j5QXrvODRo9F3qNz79l2o2wX4UIS1eAK9+0HUxjpGqShjg7KT+M9cxCPu8IiZpjG
sVqiYl26zFPvTrC9q8F/+AX1Vu6Spluj8RH9RQo2MFv4BsdGPbXFfp7DognmnLO8
/0nT1Hkb0uS0O0ffhmPRO/QL8dZT5MdOPoPSMYQcSsJNESPvqn140LmuUGRT4UBt
pWsUb9CwpF1Wd4P7mM2kxUievZDnPf5Osw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:53 2025 by rpki-client