Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: 5OtlO1CvVlB1/ObOQdJeEsyrPkWRIRWc2imLQ9A4D4I=
Subject key identifier: 67:27:06:74:6D:2D:60:1C:C9:7C:B7:6B:F6:41:8C:BE:F3:36:1D:06
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 0B5EAA1316D13F838A8C7F1D3E9EF58C64BAC1EC
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
Signing time: Fri 05 Jun 2026 10:01:10 +0000
ROA not before: Fri 05 Jun 2026 09:56:10 +0000
ROA not after: Fri 04 Jun 2027 10:01:10 +0000
asID: 57870
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5e:aa:13:16:d1:3f:83:8a:8c:7f:1d:3e:9e:f5:8c:64:ba:c1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:10 2026 GMT
Not After : Jun 4 10:01:10 2027 GMT
Subject: CN=672706746D2D601CC97CB76BF6418CBEF3361D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:19:5f:8a:fc:fd:1d:a2:eb:d5:45:04:df:
19:96:0a:75:68:b8:c3:0a:16:22:f6:19:c1:9b:39:
f1:17:e6:28:cc:94:1f:56:93:df:7e:d2:82:40:72:
86:87:52:d3:62:ba:41:e3:d0:77:15:ff:1d:12:1c:
a4:81:6a:c7:c2:1a:8a:bd:26:8d:b4:8e:d3:db:1f:
b3:20:bb:68:03:b6:c8:76:d3:46:73:30:b0:31:b5:
d7:8a:35:f5:31:aa:fa:6c:ca:04:34:16:48:e4:57:
98:71:c8:1d:cf:c8:ef:d2:6c:29:10:51:e9:80:26:
20:0a:d7:fb:19:bf:fa:19:e2:75:23:ae:fe:8b:67:
c4:73:37:79:c8:a1:4c:a2:3d:2a:58:dd:60:09:41:
fd:b5:9f:bc:7f:e3:b6:af:8b:bf:8d:38:fa:21:2d:
0b:31:64:c6:a8:d3:86:f6:de:85:61:64:d1:2f:1f:
f7:ed:ce:dd:a2:31:1c:3e:1c:61:51:d9:4b:61:7a:
a1:cf:83:69:82:b3:4c:40:fc:6e:37:25:c2:57:67:
6e:52:56:96:fb:c0:02:23:a3:85:7a:ca:16:8f:b1:
c8:38:06:65:2b:9c:61:c8:3c:ed:55:a4:fe:32:a0:
b2:54:70:d1:1f:19:56:b8:7a:b7:4e:bd:cd:22:ae:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:06:74:6D:2D:60:1C:C9:7C:B7:6B:F6:41:8C:BE:F3:36:1D:06
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
81:54:a1:95:9c:34:2e:4e:dd:3a:b8:c4:17:4b:29:cd:ab:19:
73:23:43:7b:b5:4d:1d:58:1e:e7:c5:72:f0:07:da:fe:4b:da:
eb:9e:77:9e:df:24:27:eb:c0:6a:76:05:97:49:34:e0:67:fb:
16:25:a4:29:96:f9:ac:83:f8:1c:76:08:d5:e4:4e:68:8e:25:
a2:59:33:78:5b:34:01:75:0a:02:f9:ac:bf:96:a7:f8:4f:ee:
23:5e:c0:f5:af:91:18:4a:02:33:57:40:1f:12:c6:b4:6e:49:
e0:0f:88:88:15:f7:1e:98:36:0b:98:8a:f9:7c:7f:70:53:e1:
67:f8:b6:35:aa:cd:d2:44:f8:e9:e6:9d:d5:57:2d:95:8b:81:
be:5c:ae:cd:db:54:7e:ea:b4:33:0e:5f:f5:f0:b1:93:02:7c:
69:74:5c:9d:7f:b6:18:25:84:70:a6:f4:af:a4:6b:3d:be:e7:
93:8f:c6:b0:a7:9a:c7:55:5f:12:a3:1a:37:7d:6d:15:2e:46:
d7:53:38:82:22:56:9e:59:cc:ad:e7:cb:83:77:9d:5f:7c:49:
25:bf:a6:c0:88:df:d1:55:ef:70:ef:7a:7b:5b:11:31:03:fe:
aa:a7:5b:5b:73:74:b7:e6:d2:71:df:15:6c:11:6c:55:24:8c:
a8:4d:2f:2d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUC16qExbRP4OKjH8dPp71jGS6wewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNjA2MDUwOTU2MTBaFw0yNzA2MDQxMDAxMTBaMDMxMTAvBgNV
BAMTKDY3MjcwNjc0NkQyRDYwMUNDOTdDQjc2QkY2NDE4Q0JFRjMzNjFEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjBlfivz9HaLr1UUE3xmWCnVo
uMMKFiL2GcGbOfEX5ijMlB9Wk99+0oJAcoaHUtNiukHj0HcV/x0SHKSBasfCGoq9
Jo20jtPbH7Mgu2gDtsh200ZzMLAxtdeKNfUxqvpsygQ0FkjkV5hxyB3PyO/SbCkQ
UemAJiAK1/sZv/oZ4nUjrv6LZ8RzN3nIoUyiPSpY3WAJQf21n7x/47avi7+NOPoh
LQsxZMao04b23oVhZNEvH/ftzt2iMRw+HGFR2UtheqHPg2mCs0xA/G43JcJXZ25S
Vpb7wAIjo4V6yhaPscg4BmUrnGHIPO1VpP4yoLJUcNEfGVa4erdOvc0irjjhAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUZycGdG0tYBzJfLdr9kGMvvM2HQYwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzNzM4MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAgVShlZw0Lk7dOrjEF0spzasZcyNDe7VNHVge58Vy
8Afa/kva6553nt8kJ+vAanYFl0k04Gf7FiWkKZb5rIP4HHYI1eROaI4lolkzeFs0
AXUKAvmsv5an+E/uI17A9a+RGEoCM1dAHxLGtG5J4A+IiBX3Hpg2C5iK+Xx/cFPh
Z/i2NarN0kT46ead1VctlYuBvlyuzdtUfuq0Mw5f9fCxkwJ8aXRcnX+2GCWEcKb0
r6RrPb7nk4/GsKeax1VfEqMaN31tFS5G11M4giJWnlnMrefLg3edX3xJJb+mwIjf
0VXvcO96e1sRMQP+qqdbW3N0t+bScd8VbBFsVSSMqE0vLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:33 2026 by rpki-client