Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
File: AS214174.roa (raw, json)
Hash identifier: zWwD6uvm/s8sJz5ijg8N7HhqcY3yVD9XiaXFTUhoDbE=
Subject key identifier: E9:12:83:66:5F:4B:F1:D7:DC:60:DF:41:31:B4:80:66:91:8F:E0:B9
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5A34DA9BE6D4C1D527CB6F042FB626F8F7852166
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
Signing time: Wed 24 Sep 2025 16:23:24 +0000
ROA not before: Wed 24 Sep 2025 16:18:24 +0000
ROA not after: Wed 23 Sep 2026 16:23:24 +0000
asID: 214174
IP address blocks: 157.254.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Oct 2025 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:34:da:9b:e6:d4:c1:d5:27:cb:6f:04:2f:b6:26:f8:f7:85:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Sep 24 16:18:24 2025 GMT
Not After : Sep 23 16:23:24 2026 GMT
Subject: CN=E91283665F4BF1D7DC60DF4131B48066918FE0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:09:49:7f:ab:16:da:b7:70:e7:c2:d0:0f:
b7:d0:5a:8c:d2:c0:94:53:2d:85:9c:af:d2:48:06:
2c:44:2b:c3:0f:bf:a1:99:65:ad:fc:4a:7e:de:e3:
b1:bb:bb:c1:29:48:23:70:0f:7a:d8:a6:1e:6f:9a:
f8:f5:07:d3:3e:00:c0:39:c8:2c:ff:9d:d8:29:bf:
b8:76:b2:4a:69:40:bd:b8:d7:c8:4d:7e:81:e7:f5:
34:d2:3a:01:68:fd:c8:e8:e8:3b:e4:3f:53:2a:7a:
c2:c6:9b:84:05:96:1a:21:a3:09:03:b2:c5:c2:e5:
3c:5b:94:a5:82:04:06:ee:f5:3b:a2:f1:09:2a:6d:
f3:98:1f:c2:39:1e:c6:23:3b:1c:42:91:5e:ff:10:
b1:e1:44:e5:70:27:d8:d7:45:24:a7:6e:2f:de:22:
ea:ce:42:05:da:b8:b7:c1:ef:69:89:5e:7f:6a:f4:
e0:55:5a:76:bc:50:de:70:c9:8f:e5:4d:cc:99:42:
48:89:d3:9a:96:59:3f:c9:22:b0:57:5b:c2:6a:07:
b8:76:e3:32:b6:60:58:5c:bc:c3:87:6d:2d:b9:4e:
fc:92:4b:8b:cc:80:68:73:42:f1:9e:5d:a1:09:33:
5b:ad:74:cd:4a:b4:f8:7c:93:8b:bb:4a:fe:89:96:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:83:66:5F:4B:F1:D7:DC:60:DF:41:31:B4:80:66:91:8F:E0:B9
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.189.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a0:6a:61:33:df:a6:58:f9:32:b1:4c:f3:15:ee:e4:70:56:
fa:ba:18:7e:6e:a5:4e:d2:84:04:05:de:e6:06:c0:8b:c9:9d:
50:93:d3:a1:4f:c4:ad:63:6e:c3:16:60:1d:4e:18:1d:26:49:
f8:36:d3:3c:ab:64:3e:55:e1:04:7c:37:ca:1d:65:d2:4e:9f:
98:7d:d2:a4:dc:ec:74:fc:f6:d4:36:17:73:a7:09:a0:b2:93:
df:57:6c:de:12:e4:17:4e:fc:61:5e:30:c4:d2:a4:ec:16:a4:
d8:72:2d:43:87:a6:93:50:68:29:2c:03:58:97:b9:c1:32:6d:
a0:f9:32:4a:42:a9:a6:4a:49:11:ca:61:fc:e3:b5:43:b7:df:
ee:2f:e3:38:fe:b9:cb:88:2c:3c:0c:79:53:0c:71:64:a9:c5:
57:1d:44:57:65:33:96:09:7a:f6:e9:fd:0e:98:db:04:95:1b:
61:3c:8a:e8:5c:d6:75:61:fd:3b:5f:63:1b:20:e1:b6:a2:3e:
ca:f3:fe:97:23:fc:ef:94:af:a6:c3:4d:74:96:d6:43:54:f7:
c6:5a:ab:23:7d:63:3c:dc:17:68:bc:ba:f5:da:9f:57:90:bb:
aa:61:5b:72:a2:8e:d0:a8:d1:c2:ae:f7:18:1b:56:8a:d5:cd:
f8:6d:a4:17
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWjTam+bUwdUny28EL7Ym+PeFIWYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwOTI0MTYxODI0WhcNMjYwOTIzMTYyMzI0
WjAzMTEwLwYDVQQDEyhFOTEyODM2NjVGNEJGMUQ3REM2MERGNDEzMUI0ODA2Njkx
OEZFMEI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzecJSX+rFtq3
cOfC0A+30FqM0sCUUy2FnK/SSAYsRCvDD7+hmWWt/Ep+3uOxu7vBKUgjcA962KYe
b5r49QfTPgDAOcgs/53YKb+4drJKaUC9uNfITX6B5/U00joBaP3I6Og75D9TKnrC
xpuEBZYaIaMJA7LFwuU8W5SlggQG7vU7ovEJKm3zmB/COR7GIzscQpFe/xCx4UTl
cCfY10Ukp24v3iLqzkIF2ri3we9piV5/avTgVVp2vFDecMmP5U3MmUJIidOallk/
ySKwV1vCage4duMytmBYXLzDh20tuU78kkuLzIBoc0Lxnl2hCTNbrXTNSrT4fJOL
u0r+iZb8IwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFOkSg2ZfS/HX3GDfQTG0gGaR
j+C5MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIxNDE3NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+vTANBgkqhkiG9w0BAQsFAAOC
AQEAUaBqYTPfplj5MrFM8xXu5HBW+roYfm6lTtKEBAXe5gbAi8mdUJPToU/ErWNu
wxZgHU4YHSZJ+DbTPKtkPlXhBHw3yh1l0k6fmH3SpNzsdPz21DYXc6cJoLKT31ds
3hLkF078YV4wxNKk7Bak2HItQ4emk1BoKSwDWJe5wTJtoPkySkKppkpJEcph/OO1
Q7ff7i/jOP65y4gsPAx5UwxxZKnFVx1EV2Uzlgl69un9DpjbBJUbYTyK6FzWdWH9
O19jGyDhtqI+yvP+lyP875SvpsNNdJbWQ1T3xlqrI31jPNwXaLy69dqfV5C7qmFb
cqKO0KjRwq73GBtWitXN+G2kFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:16 2025 by rpki-client