Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3332203d3e203534323836.roa
File: 32332e3134372e3132302e302f32342d3332203d3e203534323836.roa (raw, json)
Hash identifier: bPy9gWxHv6xy5dw2Bn7Pl25+EgtDpmB21dBwTCE8j+8=
Subject key identifier: 84:74:F8:0B:DC:54:31:41:27:B8:0F:75:BF:9D:2D:0D:07:9B:20:A5
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 16F3354BF7FA22C1BE1D1E9F322B4BAD5D3F0D5F
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3332203d3e203534323836.roa
Signing time: Sun 11 May 2025 15:40:21 +0000
ROA not before: Sun 11 May 2025 15:35:21 +0000
ROA not after: Sun 10 May 2026 15:40:21 +0000
asID: 54286
IP address blocks: 23.147.120.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 12 May 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f3:35:4b:f7:fa:22:c1:be:1d:1e:9f:32:2b:4b:ad:5d:3f:0d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: May 11 15:35:21 2025 GMT
Not After : May 10 15:40:21 2026 GMT
Subject: CN=8474F80BDC54314127B80F75BF9D2D0D079B20A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:aa:e4:81:10:e6:a5:2a:07:71:6e:61:d0:
43:fe:8f:c5:2a:f5:a3:cd:be:03:c7:79:d2:b8:20:
0d:e9:94:0c:40:0a:5c:06:60:56:02:06:6d:9f:57:
67:1a:f6:15:69:73:75:b8:05:ed:ff:ff:79:e1:38:
68:33:3f:90:e2:3b:4d:d4:c9:cc:55:c9:a3:40:63:
69:e1:ac:76:33:a0:09:69:7d:0d:e9:e8:32:38:41:
05:36:7e:44:ad:17:3e:bf:ae:a9:a3:07:7c:c2:71:
b6:f8:cf:fa:f0:59:c8:c3:de:b9:9d:9b:a6:13:a3:
eb:2f:c6:ce:1e:8d:8c:e3:d4:d9:10:7a:58:3c:db:
aa:92:d5:26:5b:18:51:8d:5b:d6:cc:a6:bd:d6:2d:
9b:6f:38:13:da:25:14:7d:0c:26:0f:5b:67:9a:7d:
6c:da:41:90:08:bb:e1:20:f5:4e:e3:16:7e:a6:60:
be:f2:eb:58:00:59:f4:d6:e2:4e:4b:e0:f5:49:e3:
a4:b2:06:0d:ab:e8:96:e5:33:bd:13:8e:9b:a9:f4:
f2:c5:b5:72:e9:f7:7b:17:c1:4a:61:8e:09:86:92:
d9:c3:4f:0d:d7:91:f5:8c:e1:7f:3c:40:db:8e:61:
d8:ba:78:7e:3c:e8:65:ce:e7:20:e1:bd:40:be:a7:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:F8:0B:DC:54:31:41:27:B8:0F:75:BF:9D:2D:0D:07:9B:20:A5
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3332203d3e203534323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.147.120.0/24
Signature Algorithm: sha256WithRSAEncryption
53:07:7b:f6:79:4c:fe:25:4e:48:af:74:b7:34:cf:fb:1a:ac:
19:41:37:a2:b8:92:d3:0a:42:fa:07:36:e8:bd:a2:bd:84:a1:
38:d7:2d:93:7c:ab:49:b5:57:47:d3:e8:d6:74:9e:f3:d9:82:
e6:23:64:a0:bb:65:63:87:a1:4d:fd:87:ab:97:b7:b5:b1:7f:
60:ad:ce:0a:fe:43:77:20:a4:0f:5a:6a:69:dc:96:92:25:1e:
ec:cf:dc:a3:33:15:cd:fb:18:a4:f9:08:79:12:8d:61:89:29:
32:9a:2e:93:2b:5c:bd:31:cf:48:b5:de:d4:8c:c4:17:ad:ba:
f3:82:da:05:4b:8a:6c:f7:ec:4f:0b:0d:b6:fb:84:a8:ff:f0:
8a:01:f6:1d:92:29:fd:af:61:07:d9:65:7c:d7:3e:29:4a:79:
54:09:3e:79:4a:3c:03:d7:1b:0a:c3:af:6d:7a:0b:70:65:47:
18:1f:93:65:37:80:a3:2c:ce:a9:c3:6d:44:4f:19:8a:52:73:
58:81:65:95:53:bc:90:98:9d:f3:2a:1e:60:6c:b6:12:a3:c0:
fb:44:37:17:2e:c5:e2:f0:ab:7e:6e:62:31:6e:82:e1:45:e4:
66:67:d7:50:05:b8:0f:aa:7e:25:14:39:6a:14:9e:05:e0:4c:
95:e6:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:10:10 2025 by rpki-client