Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
File: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: kSJzfBQsScaJvuw8WOhYZvNhcTU9pJ0mUl1g2IfLvlU=
Subject key identifier: F1:2A:88:9A:60:43:9F:17:C7:1E:D3:2C:FC:7E:A9:85:11:19:A6:CE
Certificate issuer: /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial: 43285552FEB04B3E5BBF912DD71A579D36F1D27C
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
Signing time: Fri 05 Jun 2026 10:01:08 +0000
ROA not before: Fri 05 Jun 2026 09:56:08 +0000
ROA not after: Fri 04 Jun 2027 10:01:08 +0000
asID: 16509
IP address blocks: 2a05:dfc1:1004::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:28:55:52:fe:b0:4b:3e:5b:bf:91:2d:d7:1a:57:9d:36:f1:d2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Validity
Not Before: Jun 5 09:56:08 2026 GMT
Not After : Jun 4 10:01:08 2027 GMT
Subject: CN=F12A889A60439F17C71ED32CFC7EA9851119A6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:36:24:03:ce:47:5a:8b:c7:ec:a0:34:42:
d0:2a:ef:f7:99:bc:84:40:1e:b3:f6:98:73:5e:9c:
8c:00:da:2b:16:d2:58:c1:37:22:27:0c:71:8c:d5:
28:98:f3:fc:a7:19:95:1d:74:71:dc:08:5d:b2:b8:
1e:ed:91:e8:03:db:b5:a5:f4:79:53:c9:c6:eb:47:
82:0e:8b:95:59:0b:f7:15:e5:e3:d5:da:bd:d1:1d:
ce:62:84:6c:cf:8b:3b:70:33:0b:b7:75:d4:ad:98:
83:ce:da:b6:45:1e:d0:25:63:bd:d7:4c:76:b6:ef:
a6:a9:1e:32:74:12:43:29:40:c2:36:56:09:e5:0a:
29:a3:50:12:72:80:e9:58:34:ac:f9:6d:f5:67:79:
e6:d4:90:e0:23:43:64:e3:36:29:69:77:7e:31:dd:
4b:9d:68:e1:48:9c:92:7a:68:76:6f:cc:3b:f7:81:
ec:81:ab:48:e1:cd:c5:f3:ea:19:d0:66:bd:af:f0:
a9:94:dc:81:f2:f6:48:2a:62:e4:eb:a8:d6:61:c6:
9b:32:45:ab:0c:9f:d6:ea:64:d1:77:88:df:a2:c2:
58:3e:34:ef:0a:c2:ba:43:e0:e2:e9:60:5a:fe:b6:
c2:e8:8e:a3:be:6c:b7:92:9d:0d:90:09:bb:06:b9:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:88:9A:60:43:9F:17:C7:1E:D3:2C:FC:7E:A9:85:11:19:A6:CE
X509v3 Authority Key Identifier:
keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1004::/48
Signature Algorithm: sha256WithRSAEncryption
44:c7:71:5f:4d:86:5e:df:74:80:60:1c:58:6a:92:12:ce:af:
6b:83:90:06:17:a5:69:bf:15:3f:c7:42:91:76:a2:28:f0:2e:
e2:34:28:7f:78:05:87:4d:8b:50:87:88:eb:f7:ea:89:7a:55:
7e:41:42:8c:2c:59:8e:40:dc:3d:b7:0a:c4:d4:1c:b9:6f:38:
ef:a9:bd:1c:26:5b:26:c1:fa:9f:d6:df:fa:3e:ea:96:0b:08:
f5:79:80:9d:d6:dc:ff:ba:ec:31:32:e0:7f:92:9b:dc:26:b9:
21:e8:d4:3e:27:31:68:7d:75:31:05:f5:c2:84:08:d4:b7:2d:
7d:d2:ba:5f:db:8d:a3:f9:90:84:7e:d2:8c:12:d7:d7:b6:bf:
2c:f3:c1:7e:cc:dc:26:db:32:ca:27:0b:93:be:f1:f6:29:db:
90:0d:99:c6:f1:5b:ef:74:4e:60:f5:7c:27:71:e9:98:5f:1a:
3d:cc:3b:e1:cd:49:14:f0:8e:f4:ad:4c:4b:ce:e0:4e:30:45:
d9:0e:b7:49:c1:d9:6b:2b:33:21:58:3d:dd:f5:75:96:ec:e7:
bd:79:17:2b:27:92:85:cb:95:4e:2b:52:34:82:25:44:4e:ba:
75:5f:6c:e6:16:cb:32:d7:50:36:05:4a:ff:fd:25:02:fc:a9:
12:bc:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:49 2026 by rpki-client