Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: D4yyGWHwFQac96xKNokcDuJMkOkF/4arPWZRO+Rpkk0=
Subject key identifier: AC:BF:77:EE:1F:72:78:DD:0C:C5:61:60:8B:73:BC:89:E9:C9:3B:F4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1E764E34DAD4B182B5AC549991F54BC43A0704BC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 05:18:01 +0000
ROA not before: Sat 17 May 2025 05:13:01 +0000
ROA not after: Sat 16 May 2026 05:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62bc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 22:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:76:4e:34:da:d4:b1:82:b5:ac:54:99:91:f5:4b:c4:3a:07:04:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 05:13:01 2025 GMT
Not After : May 16 05:18:01 2026 GMT
Subject: CN=ACBF77EE1F7278DD0CC561608B73BC89E9C93BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:3c:30:77:14:a8:9a:bf:25:22:6a:f9:1d:
45:a6:7e:a8:60:ab:d4:a2:34:e8:ef:58:dd:b5:0f:
ce:5c:3f:c9:e1:8e:28:71:ab:14:ee:ba:20:f3:f3:
95:4b:fb:49:f0:cb:ad:24:05:66:9e:9b:a4:91:61:
fd:28:ab:19:c2:64:d0:aa:9c:b4:e0:9a:49:f3:4f:
5c:ed:0d:9f:63:ac:72:36:5c:7f:3b:43:fd:de:ff:
df:88:25:3c:96:3a:c2:e4:7a:7c:40:4b:3a:e8:f4:
4e:c8:86:a5:74:97:b8:ac:2f:7f:8e:e0:54:16:fe:
8d:a3:4a:05:d0:35:b4:1e:74:88:a0:34:18:4d:73:
c7:74:dd:63:e3:2f:00:38:c9:eb:99:36:42:0d:fd:
48:27:2a:e8:e7:2d:67:99:4f:e7:72:01:14:ed:55:
ce:85:89:e6:e1:7f:4e:7d:8e:69:32:f5:1f:78:cd:
09:92:09:64:a2:e9:c9:61:93:26:3f:87:b8:18:5f:
a7:59:f8:b8:0b:82:f9:bd:ed:1a:2d:f8:75:f2:78:
1d:98:a9:34:9e:62:48:6d:da:02:2b:78:68:0d:7e:
84:e7:2f:db:59:a4:b5:6c:e1:03:63:02:f8:4b:3d:
0d:4f:29:99:77:a4:a8:02:8e:0c:62:4b:58:e7:3e:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:77:EE:1F:72:78:DD:0C:C5:61:60:8B:73:BC:89:E9:C9:3B:F4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62bc::/48
Signature Algorithm: sha256WithRSAEncryption
80:87:60:f3:db:89:77:2a:29:9b:6a:bd:45:1a:9e:95:64:c9:
ac:b4:d0:57:aa:31:29:d8:a8:d3:a1:7e:bb:01:47:95:ef:8c:
da:bd:18:e8:73:39:9c:e6:68:c3:1e:2a:96:7a:d4:90:fd:29:
44:a5:3c:c1:18:f9:26:b6:68:87:e6:01:11:c5:df:47:ea:e4:
20:8c:6b:16:e5:7d:07:82:e5:e5:3d:9f:03:37:7f:0c:4c:2d:
fe:b4:ce:4b:f4:53:ea:29:ca:45:d1:5d:f6:23:a6:6e:b6:13:
17:61:b1:0f:b8:7f:a5:c7:71:ee:5e:7d:89:d5:a0:61:f2:32:
9e:87:b3:84:e7:e3:2d:4a:75:71:29:2c:88:67:ed:13:06:85:
46:89:77:7e:c1:03:9e:9d:d8:f5:25:ba:c4:60:b3:87:ca:ce:
14:ef:4f:77:7d:0b:65:ac:a6:06:30:ed:1c:34:41:02:7e:f9:
f2:48:ff:77:8f:63:08:df:aa:4f:75:2a:a5:4e:56:97:48:d1:
13:c4:29:de:30:26:be:e2:87:b0:51:27:58:8c:83:fd:94:3f:
5d:95:60:7b:00:c9:37:fe:fc:29:0b:b3:a9:34:fb:3b:1e:ac:
0e:37:a8:9a:94:aa:72:da:b3:20:bb:f7:18:7c:c5:47:3d:58:
00:a2:d8:7b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHnZONNrUsYK1rFSZkfVLxDoHBLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTcwNTEzMDFaFw0yNjA1MTYwNTE4MDFaMDMxMTAvBgNV
BAMTKEFDQkY3N0VFMUY3Mjc4REQwQ0M1NjE2MDhCNzNCQzg5RTlDOTNCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PTwwdxSomr8lImr5HUWmfqhg
q9SiNOjvWN21D85cP8nhjihxqxTuuiDz85VL+0nwy60kBWaem6SRYf0oqxnCZNCq
nLTgmknzT1ztDZ9jrHI2XH87Q/3e/9+IJTyWOsLkenxASzro9E7IhqV0l7isL3+O
4FQW/o2jSgXQNbQedIigNBhNc8d03WPjLwA4yeuZNkIN/UgnKujnLWeZT+dyARTt
Vc6Fiebhf059jmky9R94zQmSCWSi6clhkyY/h7gYX6dZ+LgLgvm97Rot+HXyeB2Y
qTSeYkht2gIreGgNfoTnL9tZpLVs4QNjAvhLPQ1PKZl3pKgCjgxiS1jnPtcPAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUrL937h9yeN0MxWFgi3O8ienJO/QwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRivDAN
BgkqhkiG9w0BAQsFAAOCAQEAgIdg89uJdyopm2q9RRqelWTJrLTQV6oxKdio06F+
uwFHle+M2r0Y6HM5nOZowx4qlnrUkP0pRKU8wRj5JrZoh+YBEcXfR+rkIIxrFuV9
B4Ll5T2fAzd/DEwt/rTOS/RT6inKRdFd9iOmbrYTF2GxD7h/pcdx7l59idWgYfIy
noezhOfjLUp1cSksiGftEwaFRol3fsEDnp3Y9SW6xGCzh8rOFO9Pd30LZaymBjDt
HDRBAn758kj/d49jCN+qT3UqpU5Wl0jRE8Qp3jAmvuKHsFEnWIyD/ZQ/XZVgewDJ
N/78KQuzqTT7Ox6sDjeompSqctqzILv3GHzFRz1YAKLYew==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:44 2025 by rpki-client