Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (raw, json)
Hash identifier: 8xFsHIPWfBRUqsUfFyGq2pCYYG5vV8Yckx+Nhnh8T9I=
Subject key identifier: 69:36:59:D8:A2:60:57:EA:4E:F5:DE:47:50:13:2C:A9:CC:97:85:E2
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 773B416B951083A9490A2D92895F701273AD6002
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
Signing time: Fri 05 Jun 2026 10:01:09 +0000
ROA not before: Fri 05 Jun 2026 09:56:09 +0000
ROA not after: Fri 04 Jun 2027 10:01:09 +0000
asID: 213163
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3b:41:6b:95:10:83:a9:49:0a:2d:92:89:5f:70:12:73:ad:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:09 2026 GMT
Not After : Jun 4 10:01:09 2027 GMT
Subject: CN=693659D8A26057EA4EF5DE4750132CA9CC9785E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:39:63:4c:10:da:3a:2c:c7:d5:e6:43:30:
8b:93:76:7c:b4:1e:bb:58:fe:1c:66:13:f6:94:d0:
31:0a:dd:39:6e:fb:79:93:ce:38:ca:bf:8d:3b:2a:
b0:05:6a:79:8a:78:20:4e:a0:83:b2:a2:87:0c:80:
8c:86:bf:57:9d:d3:f3:33:01:86:38:34:1b:8d:50:
61:57:2f:cc:f7:58:8a:d0:68:2e:53:29:3c:11:f0:
95:28:9d:73:87:64:d2:16:06:fd:4e:2e:a9:83:94:
9b:0d:22:63:02:a1:ac:2b:5b:53:d4:a3:57:c2:f7:
49:00:b8:5b:f6:03:5f:cf:6c:81:0e:73:51:09:d8:
1e:59:46:3a:9a:b6:8d:79:ab:b2:e8:33:72:fa:0b:
7f:f2:0c:09:8a:b1:55:ca:83:67:cb:09:90:60:ff:
ea:56:41:d9:a6:fe:b2:cb:c7:ba:98:16:3f:7d:d9:
fb:97:3b:46:06:8c:a9:7c:3b:13:4d:6c:31:c7:1f:
16:74:d5:2c:9f:f4:47:32:bd:47:fd:b8:b4:18:ed:
fa:9e:f7:6f:dc:ee:15:f0:f2:a1:8b:96:c8:1c:0f:
93:4d:34:fe:f4:ab:26:28:ce:31:7a:00:5f:52:4b:
9c:50:02:aa:a3:94:c4:76:59:92:7c:07:ba:9b:da:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:59:D8:A2:60:57:EA:4E:F5:DE:47:50:13:2C:A9:CC:97:85:E2
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
00:ba:1f:52:cf:3b:83:0c:eb:89:69:94:bc:5c:87:93:06:da:
90:0e:2c:5e:8d:a2:fd:a0:56:6e:bb:6e:89:02:a0:99:35:a2:
1d:2e:95:1c:c3:f9:47:04:fd:49:c8:7e:f2:de:45:72:5c:5e:
6b:74:6d:f8:21:4f:27:fb:cb:e4:fc:9b:6f:13:db:aa:7e:13:
da:9f:c8:fa:fd:2f:09:12:6f:d7:31:f7:3a:4f:32:95:6d:b3:
1f:34:a1:77:1e:79:6e:48:96:aa:c4:f3:8d:20:dc:1e:48:2a:
87:7e:bb:89:d3:51:6a:b1:27:96:1d:50:1b:56:32:1b:d9:79:
de:be:09:e2:a4:35:2b:ec:2f:aa:ae:c6:71:bc:d9:01:f1:89:
21:38:eb:a5:d7:95:44:52:18:be:c6:8b:0c:eb:b9:fd:1b:fc:
f0:b3:82:72:09:01:3b:c6:40:d2:14:af:60:52:cc:b9:f1:27:
cb:79:56:1c:ad:13:ea:eb:ab:a1:49:3c:eb:81:11:6a:ff:bd:
b5:25:3c:89:1f:02:8f:dc:82:97:1a:0f:d8:68:fb:c8:d8:57:
27:34:fb:c8:03:4f:2f:7a:6c:9f:98:6a:b4:d1:5b:84:0f:55:
32:90:df:5c:ec:4b:6c:ab:8a:eb:75:9e:44:6b:b2:2d:4a:80:
17:0b:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:15 2026 by rpki-client