Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier: h5ZFRGSx/ShsDQRErKYWHA1KlO4d0yuRV2TvVnPSvoc=
Subject key identifier: 41:7B:7F:EC:C3:86:F4:83:A3:4C:CF:21:D1:8D:7D:55:74:3D:55:39
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 12AD1F86F0A19E64D92D1D54584D91EF9BFE0085
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
Signing time: Fri 05 Jun 2026 10:01:08 +0000
ROA not before: Fri 05 Jun 2026 09:56:08 +0000
ROA not after: Fri 04 Jun 2027 10:01:08 +0000
asID: 60900
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ad:1f:86:f0:a1:9e:64:d9:2d:1d:54:58:4d:91:ef:9b:fe:00:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Jun 5 09:56:08 2026 GMT
Not After : Jun 4 10:01:08 2027 GMT
Subject: CN=417B7FECC386F483A34CCF21D18D7D55743D5539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:ef:ae:12:d8:42:03:bc:1e:b8:d8:fa:4d:
d8:10:0f:c2:45:f4:34:ec:6c:17:da:df:55:29:23:
30:97:a2:5f:73:be:f8:af:eb:47:03:05:65:96:7d:
4a:d5:ed:7b:1e:e0:04:df:ec:70:77:43:3f:89:a6:
35:2f:e6:8a:c2:4a:93:72:11:cd:a4:15:3d:e6:12:
c2:c4:65:3f:8b:62:ae:f8:f5:1e:bb:65:a3:bc:83:
80:f4:ec:e5:5d:3f:c9:cb:3f:1f:71:a7:89:f7:2c:
2a:d0:00:cc:a1:ed:21:fd:32:5a:2e:cf:43:1a:9b:
f1:bd:1f:00:69:ec:fc:ad:45:1f:3b:2c:7b:43:27:
1e:bb:08:22:e4:35:65:02:0d:02:2c:68:3a:0b:23:
1a:3c:28:fa:01:77:29:c7:34:17:5e:a8:5b:57:24:
bb:c3:72:b4:f6:85:98:85:70:a1:d7:70:e1:97:54:
ae:88:82:64:92:40:a5:1e:9b:a5:3a:41:40:da:e4:
44:e5:84:c9:d7:86:44:8b:d9:3f:53:84:52:b0:e1:
49:24:ab:c5:28:5a:20:a9:5a:17:40:41:d2:3a:6a:
9c:fb:5e:e5:e7:33:73:e8:47:45:cd:d0:e2:2d:47:
d8:a0:51:89:46:d0:77:c1:9e:38:8f:98:a8:15:95:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:7F:EC:C3:86:F4:83:A3:4C:CF:21:D1:8D:7D:55:74:3D:55:39
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
14:d6:27:69:14:fc:a8:19:cb:4d:66:17:75:fc:b2:c7:17:d4:
23:65:1c:dd:d7:64:c4:34:3e:c0:26:a9:0b:93:19:45:83:2b:
db:bb:ba:df:ac:3b:84:e8:67:89:9c:71:20:7b:ce:0e:5a:3e:
bc:75:88:d2:11:c3:f5:62:9d:33:4f:24:a3:46:d2:9a:db:f3:
e1:19:82:36:cd:03:1d:3f:3f:d4:a3:fc:06:5f:00:c1:4d:e0:
c8:7a:97:b0:d2:32:98:c0:72:e2:49:ef:1c:e8:20:63:b7:65:
24:64:d3:1f:eb:1d:c9:25:0e:94:ac:cc:56:96:28:2c:7b:ed:
3c:b4:20:e5:b8:b0:81:8f:e1:c7:30:44:9a:39:8a:47:47:95:
e4:d7:68:27:5b:8d:98:f1:4f:27:6a:d9:3e:43:37:83:a5:31:
57:7b:96:ba:4a:2c:14:df:11:c7:da:b8:4d:3c:22:22:df:f4:
c9:cd:27:cc:70:67:de:1a:9b:4f:1d:e5:a8:5e:13:c1:6a:df:
a4:13:b1:5b:7f:23:00:3b:fc:5e:13:76:fb:52:25:47:31:0e:
cb:5d:b7:cf:76:ce:72:bf:45:2f:e0:3f:54:92:de:6c:ec:71:
10:87:00:de:59:0a:ce:c2:fb:30:32:72:0b:08:95:0d:39:c8:
57:8d:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:45 2026 by rpki-client