Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
File: 3230342e31342e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +DjKeYdLA+gQ4EVDAG2izQp6/mchEcRIJo7krvNMlbc=
Subject key identifier: 22:8C:52:D5:5C:D5:BD:59:11:4F:04:CB:51:E0:91:6E:27:85:30:0F
Certificate issuer: /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial: 6266D18EB22C94951624752D120B335F2BCB4ACE
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 01:56:24 +0000
ROA not before: Sun 25 Oct 2026 01:51:24 +0000
ROA not after: Sun 24 Oct 2027 01:56:24 +0000
asID: 834
IP address blocks: 204.14.75.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:66:d1:8e:b2:2c:94:95:16:24:75:2d:12:0b:33:5f:2b:cb:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Validity
Not Before: Oct 25 01:51:24 2026 GMT
Not After : Oct 24 01:56:24 2027 GMT
Subject: CN=228C52D55CD5BD59114F04CB51E0916E2785300F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:84:e0:bd:a5:8e:3c:8e:33:81:56:ce:34:
17:b0:0a:f8:6f:b4:5c:c5:6f:a0:44:7c:d0:8c:ba:
89:f4:e9:c9:06:d2:f9:7c:f7:57:2a:c9:25:83:99:
5c:c7:7f:dd:b4:f2:ba:82:e0:ee:db:18:b3:d5:c6:
c2:cb:49:3a:bd:8e:07:2f:ec:18:11:df:33:75:ee:
34:c9:86:57:29:8e:48:ba:3e:fe:01:f0:bd:c1:39:
03:d3:cb:e3:78:aa:82:c2:3f:b4:10:8a:42:d0:21:
69:86:dc:c3:0f:07:00:af:0a:51:9f:01:58:d4:4d:
83:ff:22:e8:ee:64:a6:4f:80:af:a3:cc:e5:ad:5b:
46:47:25:4a:63:ef:66:f8:5a:52:8a:7e:8d:b6:02:
d1:b4:8f:c1:8c:46:a9:6d:8b:c8:20:92:4f:fc:43:
87:61:53:a6:dc:8b:53:a7:ac:63:e2:f2:e8:ca:71:
4b:2b:ee:20:e3:43:88:9c:bf:4e:5a:cc:b2:02:3c:
66:16:19:a2:16:29:58:c1:e6:3c:84:b9:43:b4:62:
ce:3a:95:9f:14:2d:7c:91:ad:c6:34:ae:92:8c:34:
50:06:bb:3e:dc:da:95:60:6d:56:19:18:9f:9b:18:
38:ff:20:9a:cf:bb:3b:c2:e8:5a:b2:28:5a:e5:2f:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:52:D5:5C:D5:BD:59:11:4F:04:CB:51:E0:91:6E:27:85:30:0F
X509v3 Authority Key Identifier:
keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.14.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b0:ee:a9:91:34:71:dc:c5:3b:83:80:f7:26:cb:38:c4:38:
a2:a0:9f:2a:30:a6:8e:e0:fa:fb:a6:05:a1:d5:08:b7:9f:7c:
33:05:3b:88:fd:02:29:9e:a0:62:24:bd:35:33:80:9e:2f:97:
64:ba:ad:ed:ed:85:32:c6:0e:6e:ac:0f:f7:20:a0:83:99:1a:
a2:f8:46:1f:da:ea:c5:df:99:d9:53:3a:4f:ce:62:09:fa:a7:
f7:61:e4:76:5b:53:4a:ec:20:ec:87:a2:9c:3b:5c:75:4f:00:
cb:77:df:ce:71:d7:1a:bd:ba:0f:f2:4b:03:79:92:b1:87:90:
ee:ff:2c:1d:10:51:c0:ce:f4:7c:0d:c8:fb:de:42:c5:0c:7f:
cc:2f:0f:f5:20:39:9a:61:b3:c0:6c:b1:68:fa:87:86:4d:b1:
2c:66:7d:db:f3:01:cc:1d:cd:ca:4b:5d:05:90:be:cb:1a:55:
f3:20:7f:31:f8:42:24:d0:12:05:92:97:0e:d6:8c:69:98:23:
2b:f5:65:91:1b:7f:27:7b:5a:df:23:78:8b:06:bc:76:81:03:
86:d2:64:00:46:4a:86:54:86:d9:bc:92:1c:42:d6:a0:71:c9:
a6:27:4c:fd:80:63:19:45:20:6d:0a:12:2f:2e:11:35:ea:bb:
59:2b:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 09:29:33 2026 by rpki-client