Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366164613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366164613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iJ06yXW6dYMVS4464i6zNUslZCm8Fv7tKP5KSZN9ITY=
Subject key identifier: AE:AE:E4:D4:0D:5A:68:E7:42:BB:7A:5A:BC:AF:B0:A4:95:03:7D:EB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6126C735F8BB2A2826B1900FAADB448FEB6D1199
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366164613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:18:02 +0000
ROA not before: Sun 25 May 2025 05:13:02 +0000
ROA not after: Sun 24 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ada::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:26:c7:35:f8:bb:2a:28:26:b1:90:0f:aa:db:44:8f:eb:6d:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:13:02 2025 GMT
Not After : May 24 05:18:02 2026 GMT
Subject: CN=AEAEE4D40D5A68E742BB7A5ABCAFB0A495037DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:4c:3a:1a:ee:39:33:18:85:17:03:22:20:
04:54:b6:cf:c8:e7:e6:a3:87:3b:78:4b:4e:31:31:
09:57:33:5c:cc:06:de:e9:07:f5:92:39:39:a3:d6:
24:59:03:46:b4:39:c0:19:1d:ce:5d:89:52:41:d4:
0b:b6:08:07:76:1f:35:35:53:cd:50:61:1d:38:db:
d0:ae:1d:ad:3f:c9:81:be:d6:c3:07:43:93:ef:bc:
7e:c7:ff:e0:9f:c5:dd:2b:d8:99:f4:f9:fd:4b:f1:
f9:a3:c5:87:3d:a6:60:b7:09:ac:b8:ca:ac:3e:f5:
3e:a3:e9:d0:93:d0:56:0b:78:d5:25:a8:23:51:00:
3e:25:9e:dc:66:e0:68:21:e4:47:73:e5:90:5f:e9:
ff:05:92:35:12:04:53:84:9d:43:a4:43:58:b0:ec:
89:06:4d:4a:38:42:ce:aa:5d:6e:d4:f8:7d:c4:27:
be:1f:e4:4f:5e:fe:3f:00:18:1c:ca:f0:86:b8:d4:
23:03:ca:9d:e7:dc:d4:c0:84:45:f6:33:df:ff:65:
c8:77:c0:2a:5c:a6:f4:d5:6a:88:0c:0d:ca:ed:ce:
01:c0:8a:58:0d:1b:45:0b:c7:a9:68:f9:b6:71:a0:
a9:6a:c6:b4:d8:a9:3d:32:b5:57:b7:0a:50:e0:67:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:E4:D4:0D:5A:68:E7:42:BB:7A:5A:BC:AF:B0:A4:95:03:7D:EB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366164613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ada::/48
Signature Algorithm: sha256WithRSAEncryption
51:cc:3e:61:54:1d:47:71:19:42:9a:52:93:7c:d5:aa:45:69:
cf:d5:cf:99:58:eb:00:ba:86:19:75:cd:52:71:bd:4d:12:b0:
c8:2c:96:3d:d5:f7:00:10:6f:1f:8e:08:fc:05:f3:76:e4:c2:
cb:66:bd:1f:22:11:5f:e4:cf:61:4f:5a:76:0d:3f:27:ed:35:
83:e4:b9:70:54:aa:46:dc:d6:64:cb:d2:01:bb:87:61:47:b2:
e2:8b:d5:6d:5b:f1:55:1d:ca:b1:6a:55:be:9e:51:38:24:e8:
59:14:9b:ac:92:a7:64:cb:54:56:cc:99:ee:05:40:9a:6d:40:
b5:28:72:37:0a:c4:dc:86:9a:59:cc:83:34:90:c3:ae:b5:a3:
ec:45:c6:a6:6d:ee:e0:9c:3a:c5:27:0f:d3:8b:b8:17:43:f2:
a7:cd:43:11:3c:81:c8:7f:f9:bf:3e:99:dc:96:a6:e9:df:33:
65:6b:d2:e5:cc:e7:3e:40:9b:cc:f3:47:21:ba:ce:11:8a:79:
78:0c:bf:65:40:87:61:dc:cb:49:c8:4e:8d:df:d2:16:c6:84:
f1:94:5d:fe:2b:2b:00:02:bb:ab:db:dc:e2:b9:04:07:89:a7:
b9:60:f3:ca:62:ab:b3:cc:6c:49:fa:0c:d7:05:87:c1:f9:81:
ec:8d:40:c5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYSbHNfi7KigmsZAPqttEj+ttEZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjUwNTEzMDJaFw0yNjA1MjQwNTE4MDJaMDMxMTAvBgNV
BAMTKEFFQUVFNEQ0MEQ1QTY4RTc0MkJCN0E1QUJDQUZCMEE0OTUwMzdERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1i0w6Gu45MxiFFwMiIARUts/I
5+ajhzt4S04xMQlXM1zMBt7pB/WSOTmj1iRZA0a0OcAZHc5diVJB1Au2CAd2HzU1
U81QYR0429CuHa0/yYG+1sMHQ5PvvH7H/+Cfxd0r2Jn0+f1L8fmjxYc9pmC3Cay4
yqw+9T6j6dCT0FYLeNUlqCNRAD4lntxm4Ggh5Edz5ZBf6f8FkjUSBFOEnUOkQ1iw
7IkGTUo4Qs6qXW7U+H3EJ74f5E9e/j8AGBzK8Ia41CMDyp3n3NTAhEX2M9//Zch3
wCpcpvTVaogMDcrtzgHAilgNG0ULx6lo+bZxoKlqxrTYqT0ytVe3ClDgZ7EtAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUrq7k1A1aaOdCu3pavK+wpJUDfeswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjE2NDYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRq2jAN
BgkqhkiG9w0BAQsFAAOCAQEAUcw+YVQdR3EZQppSk3zVqkVpz9XPmVjrALqGGXXN
UnG9TRKwyCyWPdX3ABBvH44I/AXzduTCy2a9HyIRX+TPYU9adg0/J+01g+S5cFSq
RtzWZMvSAbuHYUey4ovVbVvxVR3KsWpVvp5ROCToWRSbrJKnZMtUVsyZ7gVAmm1A
tShyNwrE3IaaWcyDNJDDrrWj7EXGpm3u4Jw6xScP04u4F0Pyp81DETyByH/5vz6Z
3Jam6d8zZWvS5cznPkCbzPNHIbrOEYp5eAy/ZUCHYdzLSchOjd/SFsaE8ZRd/isr
AAK7q9vc4rkEB4mnuWDzymKrs8xsSfoM1wWHwfmB7I1AxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:04 2025 by rpki-client