Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier: 2ZBaNtPaE/+smzK+8aqGHHgZK55Ap8sXf895fgT3o8M=
Subject key identifier: F3:39:52:F4:A4:89:0C:4D:45:06:7D:36:EA:D0:B1:B1:FE:BB:47:EA
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 383388ADEED622DA5CB553237A5ADE50172957FB
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
Signing time: Fri 05 Jun 2026 10:01:10 +0000
ROA not before: Fri 05 Jun 2026 09:56:10 +0000
ROA not after: Fri 04 Jun 2027 10:01:10 +0000
asID: 200454
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:33:88:ad:ee:d6:22:da:5c:b5:53:23:7a:5a:de:50:17:29:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:10 2026 GMT
Not After : Jun 4 10:01:10 2027 GMT
Subject: CN=F33952F4A4890C4D45067D36EAD0B1B1FEBB47EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:dd:53:a8:9f:a4:cf:00:4d:7d:c6:1e:17:
e7:85:91:6c:d0:cc:95:b3:67:aa:c8:16:66:2d:ed:
14:bd:cd:82:c1:33:73:d6:69:f4:fa:56:23:90:77:
0a:e2:99:f6:99:d4:ea:c1:71:2d:7e:3b:51:02:c8:
bd:b4:57:ca:be:c9:9c:cb:5b:f5:c2:21:5b:30:1f:
9b:6d:47:8c:2a:26:0a:d5:9e:a7:12:56:e7:bf:c3:
26:f6:02:98:c5:3b:39:04:f2:85:83:ef:b4:72:3e:
4c:75:5f:83:31:0b:fe:d1:8f:f6:e5:68:27:a4:95:
46:a5:9b:14:df:08:54:38:f7:cb:e8:26:81:c6:e3:
8e:9a:2c:70:33:da:aa:61:33:b9:e8:a4:aa:79:ee:
e4:6c:28:07:3c:95:9c:b7:98:66:88:ea:54:45:57:
c7:99:bd:ea:5b:7f:ba:42:9f:6b:c5:bc:d4:54:dc:
d4:06:37:f4:4f:19:13:61:a3:1a:4a:c7:14:2d:5c:
76:e4:83:d8:54:6f:d6:8e:cb:d6:bf:db:3b:d8:8e:
27:e3:af:45:08:a5:cb:91:26:6e:c2:49:61:18:79:
de:a4:67:de:93:a4:f0:58:cf:12:92:ed:c2:3c:5d:
7c:85:fc:3d:4c:60:71:d1:7b:dc:2f:71:5a:ff:95:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:52:F4:A4:89:0C:4D:45:06:7D:36:EA:D0:B1:B1:FE:BB:47:EA
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
a1:88:24:d4:a2:c9:f2:cd:7b:5f:d3:5d:2b:a8:df:e5:ec:81:
32:6b:ba:0e:c9:fe:7a:a8:3d:d3:18:2c:d8:f5:24:a4:88:6a:
4d:3a:6d:b8:e4:46:3c:13:1a:ca:58:52:95:10:2f:6e:43:b0:
e1:b2:e9:3c:cf:52:71:9f:ef:74:24:9f:2e:34:b9:af:c0:b3:
f9:a3:02:7f:34:10:94:8a:89:15:89:c4:05:53:8b:74:c5:ef:
8e:90:ce:7f:d4:67:9b:ad:b8:88:85:a8:b4:fe:ab:16:3f:59:
c8:b0:bd:59:74:bc:63:a0:30:87:38:fc:0d:76:9a:66:dc:e7:
d7:7a:92:b2:2f:6d:92:4a:66:6b:51:8a:14:04:94:e8:a3:90:
ec:a1:af:91:68:6d:12:8b:86:e2:76:7a:c2:c3:38:98:8b:f9:
c1:b8:79:53:f0:40:10:96:db:d9:a5:8a:fa:f8:c3:bb:87:c3:
ec:46:5b:dc:0e:a0:4b:bb:10:ae:51:ea:12:07:8a:cc:5d:00:
86:36:fe:72:14:ef:d1:9d:59:36:ae:ad:36:e0:fc:f0:a9:3b:
fc:14:4c:8f:c0:b7:dc:80:4b:b1:d3:2f:50:28:ec:6f:8b:09:
ba:14:91:c7:7b:1c:34:43:98:a1:cc:79:7a:69:18:3e:42:67:
de:8c:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:12 2026 by rpki-client