Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402487.roa
File: AS402487.roa (raw, json)
Hash identifier: uL4yRvUR4AIMwQHqf+th0V8+GxM63ZL/UyWzjpOaLm4=
Subject key identifier: 4D:FF:19:3B:6C:87:00:4B:57:97:8F:CA:F6:E9:4F:62:3B:0E:5E:DA
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 09351278EC5602193BC05C1A42E6E7C329BC92FC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402487.roa
Signing time: Wed 05 Aug 2026 11:17:02 +0000
ROA not before: Wed 05 Aug 2026 11:12:02 +0000
ROA not after: Wed 04 Aug 2027 11:17:02 +0000
asID: 402487
IP address blocks: 104.234.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Aug 2026 16:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:35:12:78:ec:56:02:19:3b:c0:5c:1a:42:e6:e7:c3:29:bc:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 5 11:12:02 2026 GMT
Not After : Aug 4 11:17:02 2027 GMT
Subject: CN=4DFF193B6C87004B57978FCAF6E94F623B0E5EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:5b:dc:fd:12:3d:01:8e:e6:57:d5:ef:89:
6e:07:54:54:7c:cd:a8:54:c2:a0:46:35:23:ad:a7:
c5:38:85:ce:3f:6b:6d:59:52:c0:da:49:e4:43:42:
25:ee:7d:b2:db:a9:6b:f4:f8:f7:5d:31:e5:5e:ec:
e9:0d:05:07:18:01:e7:21:5a:44:80:3b:e0:90:0f:
87:aa:52:bb:10:f6:38:f0:16:0b:10:2d:a8:3c:89:
4e:1e:17:67:bf:c5:ee:4c:62:fe:ac:45:fc:ef:00:
81:b8:d5:13:0e:14:e4:fe:1d:0c:51:d1:aa:49:cb:
31:9f:d7:c0:ae:e2:38:02:96:23:0c:77:65:4a:90:
ef:ac:88:20:08:00:f9:6a:c9:19:a3:9b:b1:ff:12:
48:25:40:c8:31:be:42:78:c8:e2:60:76:f7:0b:24:
57:78:37:03:e6:23:7c:10:c2:18:3d:12:68:4f:95:
83:da:69:67:17:95:38:8f:4d:a4:68:7d:2d:75:5d:
81:e4:1f:ab:a0:46:a4:46:91:12:8f:29:c9:17:6f:
74:0d:c1:9a:5b:13:d6:26:c1:58:c6:85:9b:09:00:
b4:6b:4c:44:19:e6:6a:0e:f5:47:ed:24:65:aa:26:
a2:f8:bc:ca:51:2a:c7:80:cc:37:50:7e:e5:3f:96:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:19:3B:6C:87:00:4B:57:97:8F:CA:F6:E9:4F:62:3B:0E:5E:DA
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:58:a1:30:cd:f2:f7:48:1f:85:e9:8c:bc:79:5d:f0:19:94:
6e:68:26:1c:0c:c0:b9:26:d8:25:cc:23:be:d2:a9:40:43:2e:
60:6a:fd:bb:88:3d:a7:98:4b:c9:bb:d8:3b:bf:9b:43:ce:c6:
01:b5:fa:17:b5:14:68:a8:8f:b0:ef:bd:36:3f:a7:e9:61:6d:
b3:84:c2:0c:39:de:30:c2:3c:45:cf:e0:18:37:8a:6a:59:ce:
48:4a:4f:ec:e2:33:4e:b8:cd:53:c9:9d:fc:43:57:f6:86:16:
65:01:80:93:83:aa:d4:a4:31:0c:5f:c5:32:1b:76:28:ee:db:
c7:c9:91:10:62:d6:61:a5:d0:75:d2:54:b3:b0:eb:39:c7:7d:
f0:83:1c:38:2e:52:26:4a:db:e0:25:50:ba:f9:09:2e:fa:43:
72:cc:a2:08:2a:10:ab:18:0b:5d:dc:75:a7:68:a0:4d:91:d4:
f5:8e:61:4e:1a:0f:b2:1b:b6:d5:5e:6b:5d:82:27:41:4f:c9:
d7:17:04:4c:76:e8:c0:1e:e6:2d:ec:8a:12:96:1d:e5:10:50:
ea:ed:53:d9:1c:a0:ee:1e:d2:b4:22:3e:45:f4:3b:aa:f3:c2:
21:e0:6d:34:07:fa:d0:c5:c4:95:17:8a:eb:42:10:17:15:f0:
4e:a3:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:01 2026 by rpki-client