Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
File: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier: ZmoOnatwXAhq6piyjplbxrAgytF+z0nQC5FYO259tVE=
Subject key identifier: C1:AF:93:13:61:C0:A9:9F:21:23:60:23:62:BB:55:A2:2E:0A:7C:D8
Certificate issuer: /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial: 3B89C08EE7094776F3A4E15450AAE093ED90A7A0
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
Signing time: Fri 05 Jun 2026 10:01:08 +0000
ROA not before: Fri 05 Jun 2026 09:56:08 +0000
ROA not after: Fri 04 Jun 2027 10:01:08 +0000
asID: 54218
IP address blocks: 2a05:dfc1:1005::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:89:c0:8e:e7:09:47:76:f3:a4:e1:54:50:aa:e0:93:ed:90:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Validity
Not Before: Jun 5 09:56:08 2026 GMT
Not After : Jun 4 10:01:08 2027 GMT
Subject: CN=C1AF931361C0A99F2123602362BB55A22E0A7CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:b9:8f:69:a3:10:a8:21:18:ad:d8:29:24:
ae:6d:2d:ce:c9:26:ce:a3:e9:c0:bc:6b:f4:5a:c8:
e7:19:85:fc:bc:8c:5b:a4:78:50:4b:c6:45:74:43:
81:78:48:a7:a5:62:cb:7d:5d:d4:5d:8d:b2:4b:ad:
2a:e8:ce:bc:1e:e0:9e:27:d4:88:d0:9c:c5:00:db:
74:01:c8:4b:c4:5e:7f:47:13:0e:50:e1:9d:87:96:
08:a5:7c:89:26:f3:b0:68:72:7a:20:ec:ac:7f:17:
bf:de:f1:80:3c:97:72:02:70:77:53:a6:a8:ce:0e:
78:bb:4b:a4:29:08:85:bf:aa:48:ea:6b:ba:d7:be:
a3:05:23:d4:58:2b:00:3d:47:b5:59:b5:e6:b4:6a:
10:fb:7a:c3:8d:36:66:d9:84:e3:b0:11:5e:05:29:
f1:55:95:24:5f:ea:e9:1c:04:ee:cd:1f:7e:2c:0f:
2e:07:f6:9e:78:96:a2:79:30:a4:49:4b:02:05:3a:
2a:69:c5:d0:1b:0d:d0:1d:6f:41:f2:c4:11:2d:47:
e2:8c:de:82:2f:6d:70:70:9f:3c:bd:2a:78:20:bd:
ee:54:1a:e4:28:fc:ec:40:bf:c4:65:5e:14:e2:79:
ae:4c:0e:95:5a:d7:b6:de:4d:d1:50:ce:a3:b7:96:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:93:13:61:C0:A9:9F:21:23:60:23:62:BB:55:A2:2E:0A:7C:D8
X509v3 Authority Key Identifier:
keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1005::/48
Signature Algorithm: sha256WithRSAEncryption
64:46:f6:69:62:88:8f:1e:11:c1:52:7a:27:f6:6c:56:a7:2d:
78:17:25:b7:e5:88:35:28:7e:a0:fe:57:36:2f:38:16:38:d6:
b6:9b:27:a6:d6:2d:c2:0f:02:f0:e9:e6:ff:f5:15:e6:53:0a:
e8:64:14:65:5b:b1:13:e5:4e:8d:0e:a7:77:33:70:c9:05:b4:
ce:cb:55:31:7f:48:ba:68:f7:a9:1e:97:9f:7a:bc:d5:af:1c:
3a:0d:c6:4f:a9:0a:a9:7b:bc:08:8c:a1:7c:45:f3:d9:a4:a1:
f8:0d:87:92:49:99:c3:b9:72:4e:b3:75:0b:fd:c1:22:e5:ea:
50:d9:3b:f7:c6:e2:83:68:75:0b:72:52:7f:cf:f3:7d:51:62:
27:af:39:d5:bf:48:13:87:ff:48:34:a3:01:44:3c:b1:c5:4b:
1a:6d:21:7f:a9:92:b3:be:06:d3:25:ff:cb:32:03:43:22:f8:
8f:62:e3:19:ad:1b:f8:e9:b3:f0:b2:7b:aa:84:2e:7a:d9:43:
20:c2:ca:e9:e5:19:8d:98:f0:bf:fd:ba:9c:10:f2:42:75:6c:
a0:09:47:9d:1e:26:85:bc:40:ff:0d:8f:32:32:25:fb:d5:45:
22:db:f1:b9:ac:ee:74:fe:4f:e3:e7:d9:55:94:d5:91:c5:91:
b5:fa:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:47 2026 by rpki-client