Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa
File: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (raw, json)
Hash identifier: nRaKcC4NBPssuUcem1FRWt9qGZSz3sE+ddCblVRurE4=
Subject key identifier: 91:75:B9:36:CF:4B:83:50:0D:E3:71:3F:ED:65:AD:37:71:3C:74:A6
Certificate issuer: /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial: 76D25DFE50169AA2BB7E46584239196209283268
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa
Signing time: Fri 05 Jun 2026 10:01:08 +0000
ROA not before: Fri 05 Jun 2026 09:56:08 +0000
ROA not after: Fri 04 Jun 2027 10:01:08 +0000
asID: 59678
IP address blocks: 2a0a:6040:4b00::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d2:5d:fe:50:16:9a:a2:bb:7e:46:58:42:39:19:62:09:28:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Validity
Not Before: Jun 5 09:56:08 2026 GMT
Not After : Jun 4 10:01:08 2027 GMT
Subject: CN=9175B936CF4B83500DE3713FED65AD37713C74A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:88:c1:ab:54:77:4f:89:a1:65:17:0c:5c:
80:7d:26:e7:2b:95:90:60:85:07:4f:64:2e:47:34:
82:9c:8c:4f:a7:9f:38:72:f4:05:74:28:51:75:71:
be:e4:1b:89:b8:ee:5b:9c:76:a6:c2:9b:5f:db:98:
46:40:a7:d0:2f:ea:c0:7b:c1:6e:74:b1:ed:07:11:
95:b4:d3:bf:11:99:a1:60:cf:da:85:b1:16:55:5d:
b6:cb:a7:29:f7:59:3b:e4:8b:33:51:6a:74:f0:e3:
42:8d:71:7a:ed:a7:1e:bb:c5:f3:ab:41:2b:dc:bd:
6c:84:ed:42:47:9e:46:91:08:0a:0e:5d:f0:a8:b6:
70:c4:a5:34:c3:8e:45:a1:3c:f7:57:52:1f:cc:be:
03:9c:fb:68:b4:5a:71:00:43:f8:e3:d7:ea:37:43:
e9:b2:94:3e:ca:ba:90:86:54:a0:ba:1c:84:49:7e:
4f:85:f2:57:58:8e:2c:84:bb:e5:a9:61:85:37:b5:
85:be:80:c8:4b:77:1b:19:49:c2:7d:1e:01:76:22:
ea:a3:46:e8:a8:49:4a:b3:63:7a:56:2e:02:eb:25:
a6:38:d0:b1:a0:db:bd:8a:10:a8:6a:cf:bd:89:33:
bc:fc:56:89:e0:e8:a1:59:21:8c:b5:2b:6d:92:b8:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:B9:36:CF:4B:83:50:0D:E3:71:3F:ED:65:AD:37:71:3C:74:A6
X509v3 Authority Key Identifier:
keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
a3:62:9b:5d:20:97:5c:ed:18:e5:a8:f9:58:23:1c:dd:41:66:
b9:2d:0e:e4:52:45:1a:36:1f:dc:e4:4a:83:ea:da:6e:fd:ed:
87:6f:78:79:16:f6:25:90:e9:ee:cc:b0:c2:a7:f4:fc:78:ef:
20:23:98:b8:80:01:1e:42:dd:f9:a7:8d:63:26:e1:4f:ec:9c:
f8:f9:71:a8:eb:ec:36:28:99:1b:45:a8:a5:79:fa:3c:7f:27:
55:58:c6:b5:e9:02:d4:85:37:4d:7f:06:0d:04:f9:51:4c:a0:
75:98:82:ef:2b:56:b1:38:3a:d3:76:f1:3a:07:36:db:31:97:
e4:38:b5:9a:9f:59:6c:74:63:f1:0b:30:6e:42:28:15:ee:71:
bd:e5:ce:b7:70:44:07:37:18:67:0c:42:e5:d0:21:a8:77:32:
57:2a:74:81:a2:68:01:73:f1:b2:2d:28:e9:9f:93:62:7d:08:
5c:72:d8:c5:39:2e:46:47:ed:e5:f7:e9:ad:b6:21:b2:e4:74:
ec:54:74:b3:2b:e5:a8:e1:ec:bb:1b:a7:31:25:e8:aa:00:3c:
8b:0d:8e:90:2d:95:f7:18:8a:e0:e0:d8:f8:7d:79:22:22:b9:
24:8e:be:ea:ef:e5:24:b1:0e:3e:49:27:16:80:a7:07:8e:b8:
70:b2:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:44 2026 by rpki-client