Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363936383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Id13NMb2vKAKOJcmLdWGQpQqETt875qRGzQ6ol15NnQ=
Subject key identifier: 27:67:BB:9C:FE:5A:DA:05:58:36:22:74:6E:C9:9A:C1:AE:86:C8:E9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 359E77C4ED9EDE33650310CE92552881F99EF50F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936383a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 15:18:01 +0000
ROA not before: Wed 28 May 2025 15:13:01 +0000
ROA not after: Wed 27 May 2026 15:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6968::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9e:77:c4:ed:9e:de:33:65:03:10:ce:92:55:28:81:f9:9e:f5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 15:13:01 2025 GMT
Not After : May 27 15:18:01 2026 GMT
Subject: CN=2767BB9CFE5ADA05583622746EC99AC1AE86C8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:9d:93:de:96:1e:f7:38:b0:b2:c6:43:24:
d6:2a:4f:2f:94:6a:de:99:44:20:7f:21:c0:64:c0:
a2:6e:07:63:fa:ef:02:d4:45:45:27:6f:8a:9a:b2:
e6:ed:50:eb:0a:66:ee:3c:15:9c:94:2d:86:ad:72:
c0:0a:62:5e:30:a5:96:10:c8:3b:6e:51:27:88:24:
3d:c6:52:02:f6:85:3a:a4:9f:9f:4f:16:2a:0f:09:
17:a9:d9:8e:a7:c9:92:ea:e3:74:c6:8f:62:de:d0:
fc:e8:4f:0b:db:c7:b9:fd:db:72:f0:88:9c:56:58:
96:b5:26:ae:6f:d8:1c:34:a8:84:d9:26:2f:51:9a:
b9:23:53:95:cb:65:a8:13:56:a4:43:87:f5:b1:68:
06:29:e4:cc:1c:da:36:9d:33:ae:02:54:a9:6e:34:
45:52:82:12:3a:91:c1:11:42:9a:9e:37:18:e2:18:
dc:50:2c:25:d2:f3:7f:36:0a:e0:ff:bc:06:61:96:
57:4e:b5:0f:c6:b0:56:4c:a6:14:76:7d:4f:3f:ee:
f2:79:b1:39:ab:74:5a:75:5f:ae:2f:92:f6:6d:d8:
b5:1a:75:ab:09:34:54:14:51:83:18:1b:f3:26:25:
b8:d7:0e:1a:0b:96:38:52:b6:6b:7a:65:5c:4a:99:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:BB:9C:FE:5A:DA:05:58:36:22:74:6E:C9:9A:C1:AE:86:C8:E9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6968::/48
Signature Algorithm: sha256WithRSAEncryption
a8:10:61:99:39:ba:e3:37:de:39:f4:02:4f:a5:82:9d:ed:77:
e2:33:77:d7:db:d4:c1:75:9d:2b:4d:72:b3:dc:9a:a6:5a:4f:
ef:29:bb:d7:ed:7a:79:5a:c9:58:5e:87:e8:bb:a8:2d:96:cc:
fe:79:d7:1c:b7:16:05:af:e1:25:d1:02:50:bc:23:a0:cc:df:
e7:e7:79:4d:ae:29:93:1a:63:d8:b3:16:39:8c:56:c8:41:67:
4a:06:3d:2c:2d:bf:5c:f9:07:68:90:7d:90:97:6f:87:15:8e:
b2:35:8a:d6:19:2c:24:d0:31:12:2d:c5:a2:65:e4:e4:a3:1b:
86:d6:d5:78:6f:d1:7c:1d:68:ca:0c:61:01:07:49:14:b3:bc:
5f:7c:d3:ba:ea:30:3a:3b:99:53:70:c3:0a:cc:04:b2:cd:ea:
18:70:60:85:ee:0b:7d:0e:b9:7a:52:b0:80:99:0c:36:c4:40:
b0:7b:ac:0c:35:bb:a8:27:24:e9:0e:3b:1d:3a:34:17:38:66:
61:67:b6:f2:73:1f:8e:2c:ea:d4:41:ea:78:f1:d0:24:50:8d:
25:9a:c0:19:18:1f:1d:a1:b1:98:cc:88:29:b4:8e:3d:d2:85:
3b:cb:b9:74:f9:d5:10:97:b0:08:bb:f5:98:2a:ea:59:01:70:
78:5b:1b:be
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNZ53xO2e3jNlAxDOklUogfme9Q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjgxNTEzMDFaFw0yNjA1MjcxNTE4MDFaMDMxMTAvBgNV
BAMTKDI3NjdCQjlDRkU1QURBMDU1ODM2MjI3NDZFQzk5QUMxQUU4NkM4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxJ2T3pYe9ziwssZDJNYqTy+U
at6ZRCB/IcBkwKJuB2P67wLURUUnb4qasubtUOsKZu48FZyULYatcsAKYl4wpZYQ
yDtuUSeIJD3GUgL2hTqkn59PFioPCRep2Y6nyZLq43TGj2Le0PzoTwvbx7n923Lw
iJxWWJa1Jq5v2Bw0qITZJi9RmrkjU5XLZagTVqRDh/WxaAYp5Mwc2jadM64CVKlu
NEVSghI6kcERQpqeNxjiGNxQLCXS8382CuD/vAZhlldOtQ/GsFZMphR2fU8/7vJ5
sTmrdFp1X64vkvZt2LUadasJNFQUUYMYG/MmJbjXDhoLljhStmt6ZVxKmWUrAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUJ2e7nP5a2gVYNiJ0bsmawa6GyOkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzNjM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpaDAN
BgkqhkiG9w0BAQsFAAOCAQEAqBBhmTm64zfeOfQCT6WCne134jN319vUwXWdK01y
s9yaplpP7ym71+16eVrJWF6H6LuoLZbM/nnXHLcWBa/hJdECULwjoMzf5+d5Ta4p
kxpj2LMWOYxWyEFnSgY9LC2/XPkHaJB9kJdvhxWOsjWK1hksJNAxEi3FomXk5KMb
htbVeG/RfB1oygxhAQdJFLO8X3zTuuowOjuZU3DDCswEss3qGHBghe4LfQ65elKw
gJkMNsRAsHusDDW7qCck6Q47HTo0FzhmYWe28nMfjizq1EHqePHQJFCNJZrAGRgf
HaGxmMyIKbSOPdKFO8u5dPnVEJewCLv1mCrqWQFweFsbvg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:12 2025 by rpki-client