Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/323630373a326563303a3a2f33322d3438203d3e203430383530.roa
File: 323630373a326563303a3a2f33322d3438203d3e203430383530.roa (raw, json)
Hash identifier: E0Vx4A5yUh7zijXPkwVDX4Y7o3ElRTMqqKeVbvs+Wik=
Subject key identifier: F1:82:32:71:8C:7A:17:13:40:5D:FE:15:20:06:6C:C7:72:B3:A9:E9
Certificate issuer: /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial: 046F0C40548ABD245AF333AD5E6D2FD3D4223ED5
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/323630373a326563303a3a2f33322d3438203d3e203430383530.roa
Signing time: Thu 24 Jul 2025 20:53:21 +0000
ROA not before: Thu 24 Jul 2025 20:48:21 +0000
ROA not after: Thu 23 Jul 2026 20:53:21 +0000
asID: 40850
IP address blocks: 2607:2ec0::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6f:0c:40:54:8a:bd:24:5a:f3:33:ad:5e:6d:2f:d3:d4:22:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Validity
Not Before: Jul 24 20:48:21 2025 GMT
Not After : Jul 23 20:53:21 2026 GMT
Subject: CN=F18232718C7A1713405DFE1520066CC772B3A9E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:5b:a2:57:af:0a:e0:f2:84:58:f6:c1:e9:
43:3a:6f:34:7e:66:3e:ce:aa:5e:bf:d4:ef:d9:c7:
53:d7:74:96:5b:a6:65:ef:23:e2:9e:cf:45:f9:a1:
9e:a6:28:2c:bd:ed:49:6e:d8:a8:10:df:29:4f:78:
bc:cb:2f:1d:36:ee:3f:fe:b6:3e:da:46:4e:13:a8:
8c:cd:e5:4e:9c:e7:7c:14:e0:a9:63:88:23:10:54:
6b:27:de:b0:5e:00:97:d2:db:98:9e:dc:93:da:13:
6f:bf:25:eb:d0:3c:b2:c4:3e:4a:43:fc:5f:c0:10:
1b:7b:ee:3a:c0:4c:13:a5:2e:51:93:1d:36:b4:6b:
20:a2:91:ba:15:b3:43:68:3a:99:16:77:94:be:e6:
9c:d6:76:cb:df:11:dc:98:25:e5:43:51:69:73:52:
26:dd:af:73:d7:02:53:e7:6f:36:aa:6b:17:e0:85:
33:80:1f:2b:c4:45:d7:7c:23:3c:1b:3b:8b:db:ca:
fe:66:12:6d:ff:25:b4:0f:a7:fd:3d:eb:88:5e:df:
90:ef:c5:ca:c9:c3:1b:d0:7f:2a:3b:48:b9:d0:bd:
94:91:83:14:5c:26:9d:c6:50:0d:a9:e6:8a:96:1a:
10:6c:04:6a:e0:27:62:db:7d:13:ca:d2:cd:ca:45:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:32:71:8C:7A:17:13:40:5D:FE:15:20:06:6C:C7:72:B3:A9:E9
X509v3 Authority Key Identifier:
keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/323630373a326563303a3a2f33322d3438203d3e203430383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:2ec0::/32
Signature Algorithm: sha256WithRSAEncryption
52:89:c5:ee:46:74:0b:01:1c:7b:2a:a3:b9:86:7b:ea:11:c6:
b1:eb:8c:9d:4a:cc:7b:53:9c:b9:27:48:50:d6:e7:30:0f:00:
d3:c8:7b:5a:69:d8:83:bc:48:0d:63:89:6a:f2:41:de:61:72:
ff:72:ee:57:1e:ff:26:02:05:69:90:b0:70:fe:95:b4:5c:e7:
94:41:5a:0d:76:9f:b7:21:9f:f2:e2:59:80:2f:c7:b5:1c:98:
81:45:31:1e:34:3e:63:91:95:15:6e:f7:fe:69:e7:7b:e7:2a:
d0:45:59:80:21:ba:ab:c7:10:4e:42:55:e6:93:4e:c7:45:c9:
7a:c7:2e:6f:80:45:71:cd:fd:6b:c8:33:d4:a2:b6:b4:9f:26:
07:de:13:49:93:97:d4:2f:0f:11:5d:8a:61:a9:67:ce:05:99:
1d:4d:58:9d:5e:36:79:53:2c:b0:84:7a:e0:16:4c:07:10:70:
99:73:64:fb:90:77:7b:53:1c:43:74:15:92:f0:29:b5:5a:04:
34:3f:37:15:ef:ad:52:a1:f1:b9:4c:9f:90:5c:c1:80:61:7e:
58:5d:02:dd:a6:a8:c0:0b:46:89:64:bc:6e:48:67:8b:b4:f5:
ac:32:59:ff:9d:61:86:25:6b:36:54:95:b3:50:03:85:01:56:
81:cb:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:50:54 2025 by rpki-client