Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5fcEWPAfhJFZKcaQ3i/Qkm8v897+/zs0QvUsVCUbg7c=
Subject key identifier: 94:C7:76:88:84:61:DB:79:94:8A:2C:B8:73:C3:CC:32:E1:23:83:13
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 1AC70EF5E4F4550334F9C92FB4B4698D88256D63
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
Signing time: Fri 16 May 2025 00:05:00 +0000
ROA not before: Fri 16 May 2025 00:00:00 +0000
ROA not after: Fri 15 May 2026 00:05:00 +0000
asID: 834
IP address blocks: 192.208.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 03:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c7:0e:f5:e4:f4:55:03:34:f9:c9:2f:b4:b4:69:8d:88:25:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: May 16 00:00:00 2025 GMT
Not After : May 15 00:05:00 2026 GMT
Subject: CN=94C776888461DB79948A2CB873C3CC32E1238313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:24:d5:b1:7d:20:94:7e:a9:69:71:2c:86:
2f:cd:c2:3b:90:59:a6:75:69:7f:43:57:47:84:b2:
51:17:1a:e2:4a:53:6c:2e:83:2d:1f:a1:15:87:e7:
da:05:f8:98:f9:5f:38:a4:72:24:68:5a:94:ec:b3:
bc:d3:e3:ca:4c:63:89:46:01:ab:e6:f3:51:d0:61:
92:c8:0b:ba:e1:6c:f6:c3:7d:f4:fb:72:b6:35:f6:
82:0b:79:6d:d9:20:de:49:c5:ff:58:03:dd:0e:ef:
e5:bf:50:0a:46:2e:c1:83:ed:89:6c:e8:2e:09:f8:
b9:48:37:8b:2e:b0:1f:ba:5b:d6:9d:0d:27:ed:49:
40:bc:27:83:5b:09:b4:aa:e7:78:3a:8a:17:81:b1:
c6:ee:ff:b2:d5:eb:7d:ca:5f:e2:ed:12:3d:47:f5:
f5:94:5b:31:93:71:fd:f6:5b:22:9d:08:8b:5a:6e:
6b:0b:15:76:d0:18:5f:c6:f2:a9:b8:a0:18:0f:c5:
37:15:98:6c:11:4c:33:cb:ed:c5:4a:35:3f:cc:55:
ac:f3:9a:42:4a:cd:76:8f:5e:83:1e:32:32:e9:cd:
46:54:4c:45:d5:52:5f:8f:54:db:e6:3d:01:9b:0b:
16:cd:30:2e:db:2f:60:e7:67:f7:d7:8b:52:e1:7b:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:76:88:84:61:DB:79:94:8A:2C:B8:73:C3:CC:32:E1:23:83:13
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0b:3a:a7:c9:e9:e1:9d:4a:81:06:b7:3c:a6:db:3a:fd:06:
8e:64:33:00:fb:27:88:f7:54:b2:4f:1d:d5:73:00:fe:0c:75:
d3:2a:2b:6d:9c:df:59:98:17:ad:d7:cd:d4:c5:e4:b7:78:aa:
12:77:57:12:55:76:1f:77:bf:95:85:bf:16:1f:cd:0d:69:13:
92:f8:80:eb:48:e2:c6:20:19:a3:52:03:66:5f:94:dc:0e:5f:
dc:f8:6d:21:0b:d4:ed:f5:b4:59:73:73:1b:4b:5e:b0:ec:06:
3a:d9:6c:83:14:0d:e5:5d:91:e7:68:26:1e:b4:ff:85:30:c0:
44:d7:97:b3:66:26:76:15:62:ba:2d:2c:83:ea:40:c3:d2:ed:
ef:4c:b9:5a:68:ae:0d:81:10:f9:12:62:67:17:9e:e8:ef:71:
4b:89:73:0c:97:35:0a:1c:c5:f1:7f:f9:62:75:a5:2f:8a:f0:
e2:ab:31:88:ab:d8:44:6b:3f:fc:51:4d:1c:1a:1c:a7:1d:e0:
f0:08:fd:cc:81:9c:32:a7:a5:76:9d:bb:5d:f4:67:f9:46:53:
82:c5:de:57:60:3d:4c:1d:91:d2:52:ae:06:c0:e9:73:5d:42:
01:03:68:e7:98:10:ee:93:ea:fd:3c:ff:f4:b9:8e:03:26:95:
31:b2:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:10 2025 by rpki-client