Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa
File: 323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier: XHLTe+pqyThuvqNdzxACEBM0XdU6n7EaEijVa813VV0=
Subject key identifier: 13:01:15:C3:4E:F8:30:24:B5:00:B8:AC:39:E3:A8:74:F2:3F:D3:0B
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 5426962D1E4A4AAB5056F996D4D74F0AED26BDF2
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa
Signing time: Sat 30 May 2026 00:01:08 +0000
ROA not before: Fri 29 May 2026 23:56:08 +0000
ROA not after: Sat 29 May 2027 00:01:08 +0000
asID: 54218
IP address blocks: 2602:fa9b:900::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:26:96:2d:1e:4a:4a:ab:50:56:f9:96:d4:d7:4f:0a:ed:26:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: May 29 23:56:08 2026 GMT
Not After : May 29 00:01:08 2027 GMT
Subject: CN=130115C34EF83024B500B8AC39E3A874F23FD30B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:41:30:e9:85:66:7d:9e:29:26:92:74:bb:
6a:7a:92:8e:3e:4e:ed:db:93:08:d5:2d:fc:56:ad:
97:b5:58:38:25:60:4e:c0:3e:45:20:e0:af:a9:00:
0d:12:5a:6a:56:07:d5:da:35:0d:c7:05:0c:59:3e:
c4:3b:5c:93:68:0a:b5:3e:ac:6d:65:d8:c2:93:c9:
ac:cc:b7:2c:60:07:a0:19:cb:98:4e:40:23:27:a9:
56:df:0b:7a:27:21:28:65:bf:00:e0:65:6a:d7:2f:
b7:df:48:b4:36:64:bd:54:1d:9c:c5:83:e7:91:98:
e4:d3:1e:5f:bd:2f:69:ef:ab:39:01:5c:59:78:b0:
66:63:6e:ec:5a:23:e7:c0:8f:d0:72:0d:8f:31:5e:
f9:c9:69:d5:a4:38:78:74:51:c1:b9:fb:4f:f0:78:
b6:d8:11:39:5f:32:77:b3:af:11:c0:0f:bc:c2:e0:
52:d5:f3:56:98:00:a4:fd:0d:b8:30:fc:61:3b:20:
f3:61:1d:f8:44:fb:e1:97:5c:d1:57:e8:da:8e:82:
c0:c8:4e:01:1b:04:18:7f:95:33:c2:c3:f5:5f:c3:
bd:bb:b7:e0:66:f1:cc:4f:98:bc:54:ad:6d:94:f7:
e5:3f:f9:19:4f:f9:f4:bb:3f:73:97:8c:1d:c2:f8:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:15:C3:4E:F8:30:24:B5:00:B8:AC:39:E3:A8:74:F2:3F:D3:0B
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:900::/40
Signature Algorithm: sha256WithRSAEncryption
84:55:7a:2a:f4:31:b0:be:1d:91:a4:4d:39:da:41:5f:47:60:
e9:9a:b3:5a:69:35:3a:82:2a:e6:35:8b:9a:68:4c:89:ec:0c:
05:6b:10:ff:7e:2e:e1:e1:72:73:37:42:91:cb:53:f6:99:ea:
63:18:aa:67:61:2b:eb:d0:41:e9:6c:d8:0e:bf:52:3f:9d:4b:
d5:b1:c6:00:42:80:3f:0b:86:09:e9:13:fb:f8:0e:4a:f4:c6:
b1:12:3c:eb:66:74:64:4a:7a:7e:d8:dd:dc:d2:48:d8:94:f6:
f3:9a:59:0c:98:24:38:18:1e:de:6e:54:21:af:ed:6b:48:98:
5a:33:b2:93:38:41:a3:f8:a5:bb:b4:a3:75:9c:d6:50:e9:25:
90:b0:48:d3:97:4a:f8:04:0c:a8:6c:36:3b:2f:5f:bc:ff:b3:
30:b0:69:99:31:6f:a2:89:f7:a5:df:cf:d0:b9:e9:6d:37:1f:
d8:cf:3f:7e:c0:68:0e:dd:c5:2d:57:81:67:04:ed:ea:e9:3a:
36:3a:ef:7b:58:51:51:4c:7c:ca:ad:be:e6:8b:da:10:42:bd:
e9:22:44:6f:5a:f9:b0:53:f1:d6:29:58:d6:7a:f8:c1:9a:0a:
80:ec:f7:c5:e9:db:cd:ac:cf:0d:3b:43:21:0f:a4:2d:04:39:
c7:74:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:15 2026 by rpki-client