Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (raw, json)
Hash identifier: KMNhkQJHqwCwFD05qI7l6V8aD6zflu+hW4gX63/9xVk=
Subject key identifier: D6:8F:47:55:FD:40:85:A9:AD:24:29:CA:E2:AC:99:90:9C:61:CA:1D
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 32CA76C550C7A6021FEC9A9CC2C6F52A30690689
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
Signing time: Fri 05 Jun 2026 10:01:08 +0000
ROA not before: Fri 05 Jun 2026 09:56:08 +0000
ROA not after: Fri 04 Jun 2027 10:01:08 +0000
asID: 200952
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ca:76:c5:50:c7:a6:02:1f:ec:9a:9c:c2:c6:f5:2a:30:69:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:08 2026 GMT
Not After : Jun 4 10:01:08 2027 GMT
Subject: CN=D68F4755FD4085A9AD2429CAE2AC99909C61CA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:5d:27:52:98:45:a7:63:ab:0d:9d:79:02:
90:e9:75:3b:e6:86:a4:15:3c:28:a2:7e:2b:5d:33:
93:ca:04:db:4d:70:3b:56:20:af:98:af:a4:a0:bc:
cc:00:3c:83:17:be:4d:9f:75:4a:78:69:99:71:60:
1e:d0:04:08:2d:a3:14:d7:08:fd:34:d7:5a:d6:0d:
d3:1f:dd:80:17:09:fe:cf:aa:21:5e:2d:bc:c0:8a:
3c:29:32:7b:bd:e5:b0:9e:1f:72:2b:17:e5:b0:7e:
f7:0f:05:18:26:3a:b3:64:75:22:77:be:83:c3:df:
d8:a8:83:b5:35:15:15:3d:7e:96:3b:8e:30:4d:a4:
4f:25:00:b2:4d:b9:9f:8f:5e:73:08:14:3e:a3:54:
e4:91:47:11:31:92:f4:fd:fa:a3:20:a8:34:a4:07:
ea:6e:83:c5:15:19:84:1a:92:6d:be:dd:85:e4:0f:
5b:28:4f:dd:e3:38:0e:ed:c8:3a:b2:4c:d8:dd:0c:
5e:40:4b:19:25:58:75:d9:52:69:a8:dc:00:b6:eb:
5b:94:52:b4:9b:04:aa:f9:92:c7:64:da:7f:9d:73:
e5:f0:6d:46:c2:cc:05:5d:1f:b1:3d:da:ed:79:90:
35:09:57:e4:3f:c6:82:fa:52:af:20:1f:db:0a:af:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:47:55:FD:40:85:A9:AD:24:29:CA:E2:AC:99:90:9C:61:CA:1D
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
6e:a6:4a:28:49:96:d5:59:f8:a5:03:18:55:cc:0f:e3:64:de:
6c:70:b6:45:53:f2:e0:4b:af:51:1d:4d:07:3a:37:2e:1c:ba:
32:04:7b:26:c6:7b:08:0b:3b:25:62:0f:28:52:79:cc:52:39:
58:83:cf:ae:e7:57:85:e6:61:7f:dd:8e:45:fa:2d:79:4f:1e:
3d:56:bc:43:02:33:2d:83:a9:de:7c:fa:ab:3a:a7:93:e1:10:
9f:5e:c5:3a:95:aa:9a:f0:bb:83:aa:98:0d:b5:81:4d:9a:1f:
c0:09:c2:1e:a6:80:91:41:f6:22:07:8a:bf:6b:c7:29:91:97:
b9:12:05:81:49:62:70:9e:86:71:2c:d2:fa:b8:5f:ce:9b:d8:
97:f1:bb:ca:fa:b8:25:ca:21:a8:c7:8e:b6:9b:82:6b:78:d6:
bb:41:6e:84:78:b2:38:a5:b0:cf:3c:d8:1d:a3:33:3d:a2:2b:
93:ad:6d:77:6c:37:9e:a9:59:9f:2c:11:e2:8f:52:7b:c7:13:
97:5e:82:5e:5c:3a:fe:9d:ea:0d:61:d1:30:a0:a9:9d:33:85:
d4:05:05:2d:77:b2:97:fd:d2:7f:82:25:97:21:23:89:92:7c:
f3:09:69:39:fd:fc:17:bf:9d:1a:3e:10:b9:a3:2a:b4:02:ed:
5e:77:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:37 2026 by rpki-client