![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa
File: 36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier: scJj5ES8Ckfsd3EPtG9M2YfBwEQIlIJcW/qEV8zf3xo=
Subject key identifier: 6F:9C:B8:FB:0C:19:64:7C:90:44:DA:7B:44:C1:18:63:A6:7B:59:E9
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 66D247C7A51AB9659D07E3D9E00B7FB7DB90CCF0
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa
Signing time: Thu 22 Aug 2024 18:41:52 +0000
ROA not before: Thu 22 Aug 2024 18:36:52 +0000
ROA not after: Thu 21 Aug 2025 18:41:52 +0000
asID: 270764
IP address blocks: 69.166.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d2:47:c7:a5:1a:b9:65:9d:07:e3:d9:e0:0b:7f:b7:db:90:cc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Aug 22 18:36:52 2024 GMT
Not After : Aug 21 18:41:52 2025 GMT
Subject: CN=6F9CB8FB0C19647C9044DA7B44C11863A67B59E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:3a:85:e7:90:16:af:22:b5:cb:55:2b:07:
7e:44:93:b2:04:25:98:5d:0c:a2:19:e0:a3:ff:23:
df:0f:fb:c0:5d:9c:dc:f1:e7:64:fb:e5:b4:01:da:
c0:c1:96:ac:7c:73:ee:c7:4a:ae:d0:48:2f:8b:32:
e0:c8:a7:85:e2:2d:c8:2f:d3:8b:be:18:d7:74:a2:
36:2c:ba:e6:34:d9:58:72:35:34:79:d8:c9:76:ab:
d0:ba:ab:83:5b:28:01:91:66:6a:22:39:d7:b0:b9:
f8:9b:bc:1a:89:20:fd:23:3e:9c:6a:71:1e:ce:f0:
f7:bb:ca:2e:3d:26:62:1c:ac:e4:3b:4a:1d:3d:fa:
91:ad:23:55:89:43:a7:87:10:9c:e0:bf:f4:8d:36:
dc:a8:b6:de:75:fa:63:5d:b3:0f:1a:ea:e5:8f:23:
54:e0:fe:c9:81:52:ea:e0:08:76:92:bd:c7:7e:16:
e2:fe:8f:5c:86:18:18:5b:2e:40:c8:2f:db:cb:71:
1d:cb:31:fd:51:93:d3:74:c3:86:ea:12:e4:30:fd:
f7:dc:4b:7d:f5:4a:df:33:0a:de:39:91:0a:1e:b5:
4c:9f:4f:7b:eb:b3:19:3c:95:51:48:b7:76:14:42:
bf:a6:69:29:e1:cd:96:61:86:1b:1c:e8:13:ec:4f:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:B8:FB:0C:19:64:7C:90:44:DA:7B:44:C1:18:63:A6:7B:59:E9
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:40:a0:74:9f:89:0b:1b:a6:f3:70:f4:4b:53:ea:24:1a:95:
d0:f6:7c:db:cb:54:ba:2d:ae:9e:33:f4:82:c9:7f:15:f5:65:
6c:f4:5a:ad:71:14:10:c5:17:51:b2:f8:4f:99:43:d7:09:64:
d4:6c:1a:f4:5d:d5:bc:19:26:17:87:bf:18:c3:5f:fb:7b:60:
4b:d3:47:ae:e1:ca:9b:ed:33:3f:fc:94:3b:98:a8:b9:1a:4d:
a6:22:e7:b3:8e:96:a3:df:84:69:75:a0:84:bd:3f:7e:90:2b:
ae:13:ca:2a:fe:13:78:12:a4:06:53:3c:0b:33:6c:91:aa:f1:
81:cd:d3:01:80:7d:65:89:cb:04:bd:c1:13:69:85:8f:ea:82:
bb:89:f9:51:9f:20:62:b5:7b:e7:12:72:7a:62:c4:c8:a7:fe:
21:ab:c0:63:53:77:c6:d4:92:74:a0:f1:4c:07:60:96:05:0a:
f5:d0:6f:f5:e3:2a:59:86:ec:81:4a:f9:9e:86:9c:43:af:9f:
7b:65:a2:ec:e2:0d:91:31:23:44:1f:7b:20:bf:a4:09:bb:59:
71:e3:8f:68:be:e3:66:b5:8b:aa:54:f4:65:22:0d:75:7a:e5:
fa:f3:2d:ae:55:53:b8:4e:85:32:65:a4:58:4b:c0:f3:46:17:
e3:0f:1a:d2
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZtJHx6UauWWdB+PZ4At/t9uQzPAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQwODIyMTgzNjUyWhcNMjUwODIxMTg0MTUy
WjAzMTEwLwYDVQQDEyg2RjlDQjhGQjBDMTk2NDdDOTA0NERBN0I0NEMxMTg2M0E2
N0I1OUU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g86heeQFq8i
tctVKwd+RJOyBCWYXQyiGeCj/yPfD/vAXZzc8edk++W0AdrAwZasfHPux0qu0Egv
izLgyKeF4i3IL9OLvhjXdKI2LLrmNNlYcjU0edjJdqvQuquDWygBkWZqIjnXsLn4
m7waiSD9Iz6canEezvD3u8ouPSZiHKzkO0odPfqRrSNViUOnhxCc4L/0jTbcqLbe
dfpjXbMPGurljyNU4P7JgVLq4Ah2kr3Hfhbi/o9chhgYWy5AyC/by3EdyzH9UZPT
dMOG6hLkMP333Et99UrfMwreOZEKHrVMn09767MZPJVRSLd2FEK/pmkp4c2WYYYb
HOgT7E87qQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFG+cuPsMGWR8kETae0TBGGOm
e1npMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNzMwMzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARabsMA0GCSqGSIb3DQEB
CwUAA4IBAQAMQKB0n4kLG6bzcPRLU+okGpXQ9nzby1S6La6eM/SCyX8V9WVs9Fqt
cRQQxRdRsvhPmUPXCWTUbBr0XdW8GSYXh78Yw1/7e2BL00eu4cqb7TM//JQ7mKi5
Gk2mIuezjpaj34RpdaCEvT9+kCuuE8oq/hN4EqQGUzwLM2yRqvGBzdMBgH1licsE
vcETaYWP6oK7iflRnyBitXvnEnJ6YsTIp/4hq8BjU3fG1JJ0oPFMB2CWBQr10G/1
4ypZhuyBSvmehpxDr597ZaLs4g2RMSNEH3sgv6QJu1lx449ovuNmtYuqVPRlIg11
euX68y2uVVO4ToUyZaRYS8DzRhfjDxrS
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:59 2025 by rpki-client