Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AI8RtnZyGvVv4hObTWSUGRVLRGxxT7O8OLzouww+leM=
Subject key identifier: C8:AB:32:71:DE:3D:55:39:01:7B:41:BE:F6:F2:0C:12:B7:F4:3D:17
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 38123212B83A63CD25CA11268842918C612A76F9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:02 +0000
ROA not before: Mon 12 May 2025 16:13:02 +0000
ROA not after: Mon 11 May 2026 16:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6227::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 19:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:12:32:12:b8:3a:63:cd:25:ca:11:26:88:42:91:8c:61:2a:76:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:02 2025 GMT
Not After : May 11 16:18:02 2026 GMT
Subject: CN=C8AB3271DE3D5539017B41BEF6F20C12B7F43D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:42:db:b6:2c:62:40:39:5a:d1:52:a0:c5:
cf:34:20:db:60:64:72:66:2f:12:ab:c9:86:37:b3:
95:1c:18:37:95:a8:73:e9:c8:17:1d:55:a1:1f:04:
eb:47:12:c8:c7:78:4c:5e:0a:1c:4b:5e:46:24:fd:
33:74:6d:06:58:72:ba:43:b7:dd:35:74:1e:e9:1d:
55:f5:b8:e0:04:27:be:e6:1e:41:6e:95:52:23:0a:
37:94:ec:72:fe:b4:9c:5b:fd:e5:ca:8e:d2:89:5e:
6d:ff:b5:3d:26:89:61:ca:77:cc:21:dd:ed:54:53:
c9:a3:da:a1:fe:96:83:64:4c:32:e6:8c:c9:a1:87:
1b:45:05:c7:df:5a:09:c1:d8:d7:2d:6c:18:30:af:
77:c0:ea:14:09:e0:06:2f:9d:fc:09:70:c6:47:09:
da:d7:a3:28:e5:2d:c2:80:0e:e6:04:1b:d0:9f:a9:
69:c4:d4:14:5f:07:57:9a:e0:5a:b3:6a:f4:2e:7f:
18:b7:ed:3e:9a:80:cf:ef:62:62:3c:b3:64:5e:07:
52:b9:0e:46:50:e9:3f:ae:91:ab:a6:79:79:d7:65:
d3:29:0d:0f:f3:e0:32:dd:37:38:d4:6b:d0:28:d4:
4d:a5:04:2f:cf:f7:16:f1:25:00:e5:8a:87:5f:3f:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:32:71:DE:3D:55:39:01:7B:41:BE:F6:F2:0C:12:B7:F4:3D:17
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6227::/48
Signature Algorithm: sha256WithRSAEncryption
0b:83:b8:dd:e9:78:ff:6f:8c:41:c0:ef:34:4a:74:03:98:55:
cb:88:bb:e4:09:76:24:33:7f:83:51:ca:22:2d:07:67:61:48:
fa:82:8e:64:71:3e:0c:44:27:ec:38:f1:a2:37:d0:f9:e7:9f:
bc:3a:75:05:68:5a:54:ac:ab:e1:05:03:86:94:0e:9a:40:2d:
38:08:8f:ca:d7:50:f9:29:32:52:ef:3d:4b:c7:4c:4c:a2:99:
62:1f:62:9d:06:4c:71:40:b2:a6:8a:e5:4a:29:84:d8:1c:ca:
68:77:43:58:2e:a4:c3:94:c1:57:a5:fe:75:78:15:f4:05:df:
80:45:7e:43:4e:9b:b6:c2:20:c6:b1:73:13:ef:01:33:67:53:
1e:93:34:dc:9d:e7:6a:25:5d:2e:5c:11:74:b9:a6:bc:72:93:
c1:32:e1:2f:bb:f3:83:80:7f:a5:a3:d0:2f:e5:81:24:48:56:
f1:f4:3e:dc:1f:d6:94:db:be:3a:0d:ce:d0:f4:67:26:5d:67:
53:d5:e4:3c:53:d4:4d:ee:00:74:e3:ad:3e:56:c5:35:1c:c0:
f9:2d:a7:bb:86:82:7d:81:cf:2a:6c:d6:0a:27:05:36:5b:51:
f3:fc:19:cc:09:7b:a6:80:e7:11:83:cc:a3:c4:d1:2c:a0:ce:
b8:df:cb:9b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUOBIyErg6Y80lyhEmiEKRjGEqdvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDJaFw0yNjA1MTExNjE4MDJaMDMxMTAvBgNV
BAMTKEM4QUIzMjcxREUzRDU1MzkwMTdCNDFCRUY2RjIwQzEyQjdGNDNEMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9ULbtixiQDla0VKgxc80INtg
ZHJmLxKryYY3s5UcGDeVqHPpyBcdVaEfBOtHEsjHeExeChxLXkYk/TN0bQZYcrpD
t901dB7pHVX1uOAEJ77mHkFulVIjCjeU7HL+tJxb/eXKjtKJXm3/tT0miWHKd8wh
3e1UU8mj2qH+loNkTDLmjMmhhxtFBcffWgnB2NctbBgwr3fA6hQJ4AYvnfwJcMZH
CdrXoyjlLcKADuYEG9CfqWnE1BRfB1ea4FqzavQufxi37T6agM/vYmI8s2ReB1K5
DkZQ6T+ukaumeXnXZdMpDQ/z4DLdNzjUa9Ao1E2lBC/P9xbxJQDliodfP2R3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUyKsycd49VTkBe0G+9vIMErf0PRcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMjM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiJzAN
BgkqhkiG9w0BAQsFAAOCAQEAC4O43el4/2+MQcDvNEp0A5hVy4i75Al2JDN/g1HK
Ii0HZ2FI+oKOZHE+DEQn7DjxojfQ+eefvDp1BWhaVKyr4QUDhpQOmkAtOAiPytdQ
+SkyUu89S8dMTKKZYh9inQZMcUCyporlSimE2BzKaHdDWC6kw5TBV6X+dXgV9AXf
gEV+Q06btsIgxrFzE+8BM2dTHpM03J3naiVdLlwRdLmmvHKTwTLhL7vzg4B/paPQ
L+WBJEhW8fQ+3B/WlNu+Og3O0PRnJl1nU9XkPFPUTe4AdOOtPlbFNRzA+S2nu4aC
fYHPKmzWCicFNltR8/wZzAl7poDnEYPMo8TRLKDOuN/Lmw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:09 2025 by rpki-client