Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OfMfEZ7F6DaCJYzXE+af0n1eAM2LtC9vea8g6kR6MK8=
Subject key identifier: AE:91:A9:D3:90:1F:94:4B:B0:A1:35:38:B6:38:25:24:8D:9E:9E:AF
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 04EA2598524DA01FE131093EF12B79692D8639F0
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
Signing time: Sun 16 Mar 2025 11:11:51 +0000
ROA not before: Sun 16 Mar 2025 11:06:51 +0000
ROA not after: Sun 15 Mar 2026 11:11:51 +0000
asID: 834
IP address blocks: 192.208.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 23:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ea:25:98:52:4d:a0:1f:e1:31:09:3e:f1:2b:79:69:2d:86:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Mar 16 11:06:51 2025 GMT
Not After : Mar 15 11:11:51 2026 GMT
Subject: CN=AE91A9D3901F944BB0A13538B63825248D9E9EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3e:7b:c1:d8:97:fd:04:cc:18:3e:b9:67:6d:
19:ab:99:f5:87:af:43:84:c6:55:b2:b6:34:42:c9:
db:10:a0:ad:1a:aa:7a:27:5b:d1:0b:e2:6a:c6:8c:
ab:5e:26:48:53:90:06:a4:55:41:c5:80:ea:e4:b3:
d9:8f:97:d6:9b:c3:df:82:7c:5f:35:2a:74:d9:6e:
9e:50:f1:40:96:48:b7:1d:f2:fb:e2:dc:44:d8:5e:
bd:0c:81:6c:cc:24:cf:95:12:e9:ca:ed:80:ca:09:
8f:93:5a:95:66:5f:b3:8a:ab:55:a4:6c:82:07:37:
d1:b6:e2:d3:9f:58:f9:91:f9:0b:fe:aa:08:38:18:
1b:31:42:80:7a:1f:d7:e9:9b:69:b7:bd:ae:27:8f:
05:66:68:47:b6:c4:7b:ce:46:fb:5c:5a:98:72:14:
ee:5f:9d:89:ba:33:ae:12:98:dc:0a:14:99:29:78:
13:8b:17:6e:d3:4a:e4:ce:13:23:d8:58:79:1a:6b:
40:d3:6c:88:22:3c:be:43:ae:fd:60:9d:1f:de:8c:
6a:bc:d7:9c:b0:34:e5:f5:2a:f4:fe:c5:97:f8:9a:
36:1b:11:d7:fb:7a:e0:5b:0d:9d:a1:57:06:81:ff:
9f:18:f5:c1:ce:32:4a:7e:b4:56:dd:ea:b9:84:e0:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:91:A9:D3:90:1F:94:4B:B0:A1:35:38:B6:38:25:24:8D:9E:9E:AF
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:39:f6:58:81:20:a7:7d:47:e8:e8:fd:a6:97:ce:52:3c:40:
2a:5a:f4:fe:51:d8:ea:87:41:6a:da:c6:43:f6:50:dc:61:2c:
fc:ee:74:85:66:32:a0:2a:ff:9c:e6:73:7c:e4:ed:1f:c8:46:
c3:ec:19:cb:0c:2a:7b:ab:52:12:7a:8f:31:33:43:c6:f5:a6:
cf:38:3a:4d:75:18:7c:7f:e6:34:b3:aa:e6:92:e5:79:93:7e:
4e:35:29:34:3c:1f:1d:d6:ff:4f:31:9b:d6:23:2d:88:09:48:
c2:49:71:0f:a5:1f:7f:04:5c:bf:6e:4a:a9:95:b1:25:a4:78:
8d:12:2e:75:80:ec:61:8f:8e:50:d0:a0:68:35:c8:47:0c:0e:
4e:af:65:88:60:fd:c5:85:2f:5d:00:9c:4c:72:20:a7:12:33:
ec:d0:b5:f1:fd:b1:07:cb:6e:bd:cc:6f:e7:9b:79:55:a7:22:
f3:71:20:de:d9:35:3a:e0:ba:2d:c5:31:f4:05:0b:64:e5:8e:
5c:8d:3f:55:7c:8c:dc:de:d7:8d:1e:21:cf:3d:83:3f:f8:ee:
9f:96:8e:ae:74:50:22:86:92:ae:de:e0:5a:dd:b6:22:48:e1:
d4:11:1c:0a:5b:2f:18:c4:e2:b4:de:9a:32:cd:3c:64:6b:c1:
fa:1a:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:15 2025 by rpki-client