Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier: IVw343EIyqlr6Q9NO8j9NuBVM9SixAXimHVlxkTAWZE=
Subject key identifier: D7:05:67:32:99:9F:40:B8:C5:52:37:A8:57:DA:FB:CA:18:33:12:00
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 73159BF15999EFE8B801FBE2BFAD55DABC63414C
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
Signing time: Fri 05 Jun 2026 10:01:09 +0000
ROA not before: Fri 05 Jun 2026 09:56:09 +0000
ROA not after: Fri 04 Jun 2027 10:01:09 +0000
asID: 59678
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:15:9b:f1:59:99:ef:e8:b8:01:fb:e2:bf:ad:55:da:bc:63:41:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:09 2026 GMT
Not After : Jun 4 10:01:09 2027 GMT
Subject: CN=D7056732999F40B8C55237A857DAFBCA18331200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:52:5c:29:09:76:d6:15:17:c2:6d:76:e0:
48:3e:b6:d0:4b:e8:c1:f0:9d:47:eb:81:5d:0a:ec:
3e:34:9a:92:dd:68:66:1d:a7:31:68:33:6c:69:41:
55:19:8f:f4:f5:b3:71:74:d1:0c:47:31:1d:8e:7b:
2b:8b:9d:3b:dc:68:b6:59:c7:e6:33:fb:48:e5:bc:
8d:c0:82:4a:27:f5:97:3e:47:1a:0e:4e:09:74:28:
0a:59:ed:0d:cd:08:88:20:29:9f:9f:78:4c:3b:92:
94:f9:94:e4:6c:b8:a8:f2:88:51:a6:63:24:e6:cb:
79:61:cd:7d:19:47:5f:da:ce:11:c4:60:e2:8f:fe:
2e:d8:7a:5b:af:06:cc:df:d8:54:18:d9:9c:77:d7:
bd:84:0b:c6:4f:66:79:6f:cc:f5:89:d5:16:88:d5:
7d:a6:6a:c4:74:d9:7e:c9:38:2a:4b:58:34:6f:98:
10:94:4a:00:35:1a:d6:93:a9:cb:88:62:c0:be:b9:
dd:be:d7:3c:ee:50:69:60:ff:57:f7:1c:78:b7:f5:
d6:6f:e0:42:43:ff:18:bd:bb:dc:7e:b0:e9:fc:23:
0e:2f:68:48:e0:a1:1a:0c:29:7f:39:44:01:20:97:
e9:67:5b:6a:62:25:d4:89:60:e7:56:57:23:7a:99:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:67:32:99:9F:40:B8:C5:52:37:A8:57:DA:FB:CA:18:33:12:00
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
29:89:a9:87:7e:17:db:11:75:27:a9:a5:05:ea:70:7d:48:3f:
2f:a1:f0:a5:17:1d:be:7f:44:df:63:cb:66:04:1f:d8:71:63:
4c:9d:a2:09:b2:ee:74:ed:9f:12:9e:73:db:13:9e:36:84:41:
bf:a2:57:e8:09:8e:98:21:21:dd:6c:33:58:34:b4:2b:bb:64:
b8:6c:ec:0b:70:b1:0a:46:8f:84:5c:6a:aa:c4:c6:eb:1d:80:
f9:f0:9e:21:2c:f6:f2:fb:aa:39:7c:34:f2:8e:76:ab:1d:41:
1d:35:e7:db:7e:36:56:37:19:22:3d:91:e5:56:95:86:8f:41:
1a:f2:1d:71:88:60:b8:e4:64:b0:a5:50:18:8d:20:d4:f5:d9:
d6:5e:20:8a:91:05:7a:af:43:67:ba:50:32:c1:b1:11:8c:21:
4e:9e:d0:13:db:a0:72:89:5f:63:88:76:d8:51:1e:e1:c5:c1:
cd:15:14:84:f0:39:77:13:50:a7:c4:30:9e:e3:b8:fd:05:d7:
6c:d1:90:0c:5f:55:4c:6b:77:67:ed:fb:1a:40:1b:eb:d5:9b:
d7:90:b3:8a:1b:8f:ae:ca:85:8a:b3:9b:b5:12:e4:2d:30:65:
d4:68:2d:07:a6:20:d5:27:c8:41:58:85:af:8c:1c:08:ea:4b:
04:33:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:56 2026 by rpki-client