Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: frmGWV5tSkEN+tpiYvXMpyOJj7UAW9YVchrc0MpAH1Y=
Subject key identifier: 92:19:D2:2F:C8:31:C1:C3:10:1F:93:F7:2F:40:E5:75:B4:63:E7:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21BA4A4014AC18DB89FB84B737E81B72C7330EF5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 401507
IP address blocks: 2a14:7584:623d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 19:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:4a:40:14:ac:18:db:89:fb:84:b7:37:e8:1b:72:c7:33:0e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=9219D22FC831C1C3101F93F72F40E575B463E745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:2c:0b:ec:8d:0b:9a:da:50:4d:19:a6:a5:
be:8b:db:a0:d0:81:81:39:b3:ec:ee:43:7d:df:e3:
9d:4f:8f:85:d6:2e:c8:7b:d0:0f:8d:a3:8c:b4:b5:
c0:52:b0:ad:51:0d:b7:51:41:70:0c:a7:e7:65:82:
27:60:ce:7f:9a:42:e5:6d:50:8e:8a:45:8f:91:5e:
7a:5d:0d:49:2e:17:8f:9b:2b:ac:13:f9:90:77:4e:
5d:7c:b7:22:7a:d1:0e:1d:d6:b0:06:22:9a:0f:8d:
1b:fd:ad:6a:be:29:be:3b:71:87:26:49:5d:31:1f:
19:31:99:9b:e3:07:4e:ec:aa:e9:a7:61:38:d5:2e:
5b:55:f8:e3:af:15:bf:e9:bd:ac:cf:11:e3:99:2a:
da:24:7f:29:74:aa:e4:d6:c3:2d:db:ad:ac:b1:75:
60:00:2c:c0:d4:bb:92:3a:90:dc:c9:b0:e2:26:77:
e5:dc:6e:78:26:f1:30:8b:0f:cb:90:10:8a:33:56:
bd:56:76:27:64:51:78:17:be:4f:87:08:3f:d9:ce:
9c:f3:66:8f:4a:b7:1f:d1:a4:74:81:af:13:4b:5b:
88:df:36:9a:72:fc:83:bc:ae:3c:46:80:4e:ac:17:
87:69:a3:67:10:55:71:9f:00:bb:c5:84:10:28:04:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:D2:2F:C8:31:C1:C3:10:1F:93:F7:2F:40:E5:75:B4:63:E7:45
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:623d::/48
Signature Algorithm: sha256WithRSAEncryption
93:11:a8:c7:b8:ae:ba:91:db:2a:3e:41:7c:9f:cc:df:fc:7d:
d4:c4:e7:12:62:2c:21:67:1f:b0:6e:9d:c4:d2:42:74:7c:eb:
3f:a3:e1:33:62:9f:92:e3:57:3f:2b:aa:84:2a:66:71:9c:69:
6c:0e:20:e2:f0:e2:0c:73:b6:1b:8e:ef:05:b1:27:4c:0c:0b:
0c:9b:c9:35:81:d7:74:6c:11:78:2b:71:3f:3f:b9:c0:40:72:
43:14:3b:4a:c3:04:60:bc:e3:1f:62:1c:c5:94:9e:44:e8:3d:
4d:3d:94:59:e0:cd:e7:0c:17:29:1e:69:35:40:5e:71:b2:09:
42:8a:db:1b:ec:c1:14:b9:4f:6a:71:9b:88:ce:b8:59:39:7c:
9c:21:10:af:15:15:8b:14:9f:62:db:4a:82:f3:ef:de:59:f2:
60:72:38:0d:e0:27:12:58:4b:f0:0e:51:3b:dd:fe:df:c7:39:
72:41:d3:df:23:20:63:ea:f3:ca:96:0b:0f:6e:c9:2a:5e:f2:
83:b3:ea:3f:6e:49:59:de:ec:b0:9a:49:98:ae:93:ff:59:51:
b8:b2:0c:c4:6f:dc:5a:3d:5f:42:7b:bb:f1:39:96:47:89:e2:
4a:2e:17:30:02:b5:f8:5c:07:90:53:91:ac:12:29:51:7f:29:
3e:cc:ef:fc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIbpKQBSsGNuJ+4S3N+gbcsczDvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDhaFw0yNjA1MTExNjE4MDhaMDMxMTAvBgNV
BAMTKDkyMTlEMjJGQzgzMUMxQzMxMDFGOTNGNzJGNDBFNTc1QjQ2M0U3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOAiwL7I0LmtpQTRmmpb6L26DQ
gYE5s+zuQ33f451Pj4XWLsh70A+No4y0tcBSsK1RDbdRQXAMp+dlgidgzn+aQuVt
UI6KRY+RXnpdDUkuF4+bK6wT+ZB3Tl18tyJ60Q4d1rAGIpoPjRv9rWq+Kb47cYcm
SV0xHxkxmZvjB07squmnYTjVLltV+OOvFb/pvazPEeOZKtokfyl0quTWwy3brayx
dWAALMDUu5I6kNzJsOImd+Xcbngm8TCLD8uQEIozVr1WdidkUXgXvk+HCD/Zzpzz
Zo9Ktx/RpHSBrxNLW4jfNppy/IO8rjxGgE6sF4dpo2cQVXGfALvFhBAoBA5BAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUkhnSL8gxwcMQH5P3L0DldbRj50UwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMzY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGI9
MA0GCSqGSIb3DQEBCwUAA4IBAQCTEajHuK66kdsqPkF8n8zf/H3UxOcSYiwhZx+w
bp3E0kJ0fOs/o+EzYp+S41c/K6qEKmZxnGlsDiDi8OIMc7Ybju8FsSdMDAsMm8k1
gdd0bBF4K3E/P7nAQHJDFDtKwwRgvOMfYhzFlJ5E6D1NPZRZ4M3nDBcpHmk1QF5x
sglCitsb7MEUuU9qcZuIzrhZOXycIRCvFRWLFJ9i20qC8+/eWfJgcjgN4CcSWEvw
DlE73f7fxzlyQdPfIyBj6vPKlgsPbskqXvKDs+o/bklZ3uywmkmYrpP/WVG4sgzE
b9xaPV9Ce7vxOZZHieJKLhcwArX4XAeQU5GsEilRfyk+zO/8
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:44 2025 by rpki-client