Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa
File: 3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: rsGNbQEVMQKTWNEFI7M6Y3xHV0HauQSLZM5P9Pj/RCk=
Subject key identifier: 87:BD:23:6C:9F:0F:83:32:F6:B9:10:7F:24:14:48:43:F1:E4:3E:49
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 20C3FF41DE7785FAE771FF5F5E2F0457E24F3E56
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa
Signing time: Thu 19 Jun 2025 21:42:12 +0000
ROA not before: Thu 19 Jun 2025 21:37:12 +0000
ROA not after: Thu 18 Jun 2026 21:42:12 +0000
asID: 14618
IP address blocks: 212.115.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 19:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c3:ff:41:de:77:85:fa:e7:71:ff:5f:5e:2f:04:57:e2:4f:3e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Jun 19 21:37:12 2025 GMT
Not After : Jun 18 21:42:12 2026 GMT
Subject: CN=87BD236C9F0F8332F6B9107F24144843F1E43E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:1b:f3:73:12:28:c8:a3:25:48:16:38:9a:
34:e1:82:66:c9:4f:f4:d3:8a:86:95:8c:1b:39:05:
6b:c1:0d:6c:ae:18:87:6c:4c:56:95:ad:46:39:c0:
cf:5f:f2:d4:cd:ff:7d:8f:b1:33:ef:38:b3:2d:d0:
a7:cf:7d:3c:d9:b6:bc:10:e3:3f:78:d8:29:64:87:
8f:6d:10:7b:71:e0:99:38:ed:db:95:14:f9:42:a4:
4b:4e:5b:e9:ee:7b:2e:51:90:7e:b3:ad:1c:d5:be:
f5:37:c4:c4:08:6d:d0:33:d1:81:00:ca:a0:74:62:
02:b1:6d:e8:8a:c5:cb:8e:37:50:b7:43:12:56:da:
63:d9:f7:73:b9:34:67:a3:09:9b:44:d8:ef:8b:57:
a7:9c:79:6c:ed:14:04:d7:34:53:22:f2:f8:a7:73:
26:ec:91:d6:fa:8b:d5:40:4e:f8:bc:69:bc:f7:ab:
94:49:db:c5:fa:b3:3e:13:eb:f5:dd:a8:02:98:c5:
6e:e5:38:4f:92:7f:d2:55:aa:65:75:8f:bd:84:89:
6c:f8:8f:7c:0d:e4:c7:dc:bb:d1:98:2b:3a:01:13:
d8:1b:70:5f:b1:02:66:00:07:b8:51:a6:9f:e8:60:
c6:e2:cf:2f:6e:b1:cf:04:c0:84:71:c4:87:49:ae:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:23:6C:9F:0F:83:32:F6:B9:10:7F:24:14:48:43:F1:E4:3E:49
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/24
Signature Algorithm: sha256WithRSAEncryption
05:74:25:61:64:a8:e2:e5:60:3d:e7:6e:7e:4e:58:6f:74:d1:
8f:be:2d:53:49:15:c3:8f:a6:29:ff:3b:df:eb:db:2d:cd:fc:
8e:ed:51:da:b4:8a:90:98:fd:18:a5:d9:8e:1e:b4:c3:a6:54:
1e:3f:5f:1e:79:5a:9b:0a:8d:8b:03:e9:a2:78:be:f8:12:08:
90:40:28:88:e3:48:2d:ef:47:a7:02:89:bc:94:9d:6f:6a:d4:
46:c2:2e:e0:68:cb:fe:69:38:16:a9:de:08:8b:a0:38:71:18:
4f:cc:42:fd:b9:2b:6c:6a:ad:18:c1:87:8a:e1:37:05:60:a9:
79:28:e6:c8:02:d3:61:fe:62:08:94:ac:06:c0:0b:f8:e2:6d:
bd:da:06:9b:57:32:6c:e5:f1:9f:10:04:ca:75:bf:bf:d7:07:
a5:b8:dc:01:e2:fe:78:f3:77:2b:d5:f6:12:a5:dc:65:3e:ad:
f0:29:9e:0d:92:bd:da:f1:a1:9f:6f:10:6b:27:90:5f:35:77:
11:bf:7c:cf:8e:ca:3a:18:9d:ab:8a:4b:71:00:e5:10:29:58:
ab:08:9b:78:02:64:cd:fc:2e:4b:c5:41:ed:03:62:95:9a:92:
54:ff:4e:d3:f2:24:19:83:1f:f9:79:ca:26:b9:3e:77:3f:f9:
1a:c1:07:81
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIMP/Qd53hfrncf9fXi8EV+JPPlYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNjE5MjEzNzEyWhcNMjYwNjE4MjE0MjEy
WjAzMTEwLwYDVQQDEyg4N0JEMjM2QzlGMEY4MzMyRjZCOTEwN0YyNDE0NDg0M0Yx
RTQzRTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/kb83MSKMij
JUgWOJo04YJmyU/004qGlYwbOQVrwQ1srhiHbExWla1GOcDPX/LUzf99j7Ez7ziz
LdCnz3082ba8EOM/eNgpZIePbRB7ceCZOO3blRT5QqRLTlvp7nsuUZB+s60c1b71
N8TECG3QM9GBAMqgdGICsW3oisXLjjdQt0MSVtpj2fdzuTRnowmbRNjvi1ennHls
7RQE1zRTIvL4p3Mm7JHW+ovVQE74vGm896uUSdvF+rM+E+v13agCmMVu5ThPkn/S
VapldY+9hIls+I98DeTH3LvRmCs6ARPYG3BfsQJmAAe4Uaaf6GDG4s8vbrHPBMCE
ccSHSa6XPQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIe9I2yfD4My9rkQfyQUSEPx
5D5JMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMyMzEzMjJlMzEzMTM1MmUzMTMyMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HN+MA0GCSqGSIb3DQEB
CwUAA4IBAQAFdCVhZKji5WA9525+TlhvdNGPvi1TSRXDj6Yp/zvf69stzfyO7VHa
tIqQmP0YpdmOHrTDplQeP18eeVqbCo2LA+mieL74EgiQQCiI40gt70enAom8lJ1v
atRGwi7gaMv+aTgWqd4Ii6A4cRhPzEL9uStsaq0YwYeK4TcFYKl5KObIAtNh/mII
lKwGwAv44m292gabVzJs5fGfEATKdb+/1weluNwB4v5483cr1fYSpdxlPq3wKZ4N
kr3a8aGfbxBrJ5BfNXcRv3zPjso6GJ2riktxAOUQKVirCJt4AmTN/C5LxUHtA2KV
mpJU/07T8iQZgx/5ecomuT53P/kawQeB
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:59:29 2025 by rpki-client