Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: G/x3+BxsKISYPTlWx3YB+49+XYUDebOt3pgAzFc/Y74=
Subject key identifier: 06:1D:7A:17:41:18:E7:1A:F0:A1:F0:41:31:40:CF:83:5C:EA:AA:0D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4402B75A4B4184CB767C288A634575CB2C999D7C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237613a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 05:36:02 +0000
ROA not before: Wed 14 May 2025 05:31:02 +0000
ROA not after: Wed 13 May 2026 05:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:627a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 08:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:02:b7:5a:4b:41:84:cb:76:7c:28:8a:63:45:75:cb:2c:99:9d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 05:31:02 2025 GMT
Not After : May 13 05:36:02 2026 GMT
Subject: CN=061D7A174118E71AF0A1F0413140CF835CEAAA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:29:54:77:75:ef:5d:b4:e5:82:42:dd:27:
7f:15:c2:45:0b:7b:ec:ff:6d:10:45:a9:4f:c7:28:
43:43:e8:c2:25:7d:45:cb:c6:1a:d2:ae:de:d5:8e:
8e:83:b5:5e:a4:41:6c:01:66:bd:6c:23:2b:1a:74:
1d:06:e0:41:c5:de:93:55:35:17:72:22:6e:b9:16:
95:00:ef:ca:1e:dc:58:5b:2f:b6:37:fd:e3:e8:b5:
60:01:c2:24:cc:66:3e:86:fd:b0:fe:ba:76:ce:5e:
a3:1e:3d:6b:e2:2a:57:21:68:d2:3a:24:b9:c9:93:
55:57:46:b7:58:8f:35:1d:16:3b:99:41:30:82:e4:
06:c4:f6:40:f1:fa:58:10:2e:91:1c:7d:0e:88:78:
d2:96:d7:7d:06:c0:05:b8:fb:e7:83:d5:54:03:ae:
2c:7b:57:0f:bc:6d:92:98:02:90:11:61:02:b0:c7:
9e:c2:0d:fe:60:a0:f3:0a:07:36:88:f5:9e:7c:fc:
e2:35:7d:d5:6f:64:25:e3:a3:1e:ff:64:35:51:d5:
0b:69:1a:85:df:58:19:9e:81:d7:b2:55:3b:c0:80:
2d:55:9e:ed:57:87:89:24:fe:8d:17:84:3e:7d:2c:
4b:c7:84:5d:55:31:74:d0:97:92:9e:d1:51:20:cd:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:7A:17:41:18:E7:1A:F0:A1:F0:41:31:40:CF:83:5C:EA:AA:0D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:627a::/48
Signature Algorithm: sha256WithRSAEncryption
1d:df:9d:c6:ef:f6:08:89:e5:63:69:5d:59:44:5f:12:cb:c4:
8f:b5:9e:67:2b:3d:52:57:9d:2e:9a:17:c4:61:40:c2:a1:0b:
a3:96:2d:a0:dc:c8:cd:5b:b2:32:e8:92:37:9b:f6:f6:da:77:
99:ac:fd:2f:61:81:e5:bb:95:f9:f5:09:2b:77:7f:4e:09:d5:
b4:f0:e3:c6:b2:0c:f3:f0:d0:c4:55:f7:e1:4d:a3:72:b5:9c:
ee:92:38:de:65:a7:08:4f:e9:9b:f0:f0:10:91:ff:cf:50:fb:
7c:35:8a:85:c8:32:5e:0f:63:dd:a1:a5:09:bd:40:0a:14:22:
39:17:4b:8f:2a:fb:c0:a3:d6:92:0f:a8:1e:e6:a9:04:66:3c:
0d:8c:ea:d1:6d:9e:0a:4e:f6:c8:d4:7c:75:07:de:46:5c:18:
ec:03:62:a3:c1:7e:5a:48:67:18:b6:78:66:dc:7a:0f:39:e2:
e2:f1:05:ef:e2:55:03:8e:5c:5f:14:0c:53:4d:7f:5c:a7:d0:
3e:dd:fd:d6:bb:65:81:b0:ab:9a:55:38:fc:dc:fe:d8:a8:cd:
01:a9:1c:76:d2:c9:40:e5:bb:fe:ba:e7:1b:c2:e8:81:5f:a1:
72:9b:bd:5c:68:94:4f:c8:57:3c:74:f4:d5:f8:90:01:12:af:
84:92:f6:b2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURAK3WktBhMt2fCiKY0V1yyyZnXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTQwNTMxMDJaFw0yNjA1MTMwNTM2MDJaMDMxMTAvBgNV
BAMTKDA2MUQ3QTE3NDExOEU3MUFGMEExRjA0MTMxNDBDRjgzNUNFQUFBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaylUd3XvXbTlgkLdJ38VwkUL
e+z/bRBFqU/HKEND6MIlfUXLxhrSrt7Vjo6DtV6kQWwBZr1sIysadB0G4EHF3pNV
NRdyIm65FpUA78oe3FhbL7Y3/ePotWABwiTMZj6G/bD+unbOXqMePWviKlchaNI6
JLnJk1VXRrdYjzUdFjuZQTCC5AbE9kDx+lgQLpEcfQ6IeNKW130GwAW4++eD1VQD
rix7Vw+8bZKYApARYQKwx57CDf5goPMKBzaI9Z58/OI1fdVvZCXjox7/ZDVR1Qtp
GoXfWBmegdeyVTvAgC1Vnu1Xh4kk/o0XhD59LEvHhF1VMXTQl5Ke0VEgzSX7AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUBh16F0EY5xrwofBBMUDPg1zqqg0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzNzYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiejAN
BgkqhkiG9w0BAQsFAAOCAQEAHd+dxu/2CInlY2ldWURfEsvEj7WeZys9UledLpoX
xGFAwqELo5YtoNzIzVuyMuiSN5v29tp3maz9L2GB5buV+fUJK3d/TgnVtPDjxrIM
8/DQxFX34U2jcrWc7pI43mWnCE/pm/DwEJH/z1D7fDWKhcgyXg9j3aGlCb1AChQi
ORdLjyr7wKPWkg+oHuapBGY8DYzq0W2eCk72yNR8dQfeRlwY7ANio8F+WkhnGLZ4
Ztx6Dzni4vEF7+JVA45cXxQMU01/XKfQPt391rtlgbCrmlU4/Nz+2KjNAakcdtLJ
QOW7/rrnG8LogV+hcpu9XGiUT8hXPHT01fiQARKvhJL2sg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:17 2025 by rpki-client