Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e203230343733.roa
File: 3230392e38372e3137322e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: AewBqn3jiv0RmWsLANo5RxHS4o2LuQ4CD5m5PAW25vo=
Subject key identifier: 48:62:C3:90:41:F5:57:3F:B9:4F:82:13:51:5B:F5:61:62:93:74:A0
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 2F08D7824151F558E9DE1FC252AFD6C8B8FECE75
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e203230343733.roa
Signing time: Tue 13 May 2025 13:47:57 +0000
ROA not before: Tue 13 May 2025 13:42:57 +0000
ROA not after: Tue 12 May 2026 13:47:57 +0000
asID: 20473
IP address blocks: 209.87.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 16:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:08:d7:82:41:51:f5:58:e9:de:1f:c2:52:af:d6:c8:b8:fe:ce:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: May 13 13:42:57 2025 GMT
Not After : May 12 13:47:57 2026 GMT
Subject: CN=4862C39041F5573FB94F8213515BF561629374A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:8a:92:32:8c:26:16:97:4d:af:4f:49:5a:
13:be:75:9c:d7:0d:4e:44:ac:a3:a5:1f:08:52:1f:
ec:09:34:01:ee:cf:cd:2a:91:e8:29:73:d9:e0:b2:
2a:04:9a:df:3c:46:bf:ab:fe:7a:c7:1b:9a:d8:60:
5e:a0:00:b3:aa:c1:a0:3d:71:05:d3:64:10:49:9d:
7f:85:ef:ca:b3:6f:c8:1c:8f:ef:bf:8a:96:64:5b:
43:54:16:a2:84:63:69:d9:40:c0:0d:7b:9c:1c:5b:
27:c8:ab:06:09:10:04:88:77:d3:6f:21:15:04:cc:
4e:b1:c3:f8:eb:7a:1a:81:5e:ea:bf:85:db:0a:16:
ce:07:8f:7f:bd:39:7b:0b:a7:e6:01:76:a7:0c:92:
b0:dd:67:2d:c8:1d:8c:b4:dc:fd:16:48:cc:17:f4:
1d:8d:6c:5f:4c:6f:4b:82:89:57:ed:59:4a:f2:4a:
5a:ca:b8:6b:45:c0:e9:e6:48:aa:06:d9:ae:83:19:
8d:50:52:7d:6a:e5:55:15:65:3b:6f:1c:26:76:e3:
d3:0c:44:bd:21:53:bb:07:50:70:05:f8:14:d5:1e:
af:86:fd:7b:a8:4f:97:c6:89:7e:a1:ec:48:49:cf:
55:97:18:c5:f6:fa:ec:6a:7a:89:82:1c:61:cf:ce:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:C3:90:41:F5:57:3F:B9:4F:82:13:51:5B:F5:61:62:93:74:A0
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
96:11:fb:5e:28:cf:56:25:11:64:6e:c5:df:32:f8:51:b1:f1:
a7:65:76:6a:a2:14:94:00:69:50:bd:c7:4b:7b:54:45:d8:9f:
a0:a2:b6:ee:e9:e5:e3:a5:20:60:e5:a6:ad:eb:26:76:b6:02:
b0:0c:f2:b8:ee:19:16:3b:21:f7:be:d9:ef:7d:c0:23:7d:8a:
ad:52:75:c2:66:0f:f5:26:12:2b:ed:d3:4d:1b:a8:81:9f:2c:
8a:a1:1f:47:1a:b6:20:fb:2b:c1:c3:d0:47:55:09:b9:f8:89:
99:dc:14:0f:53:1c:08:91:11:e5:f7:c0:1c:d8:06:ab:4a:5a:
25:a5:d3:d5:b4:ff:80:bf:3c:f7:eb:71:48:0c:71:58:5e:32:
f7:fd:4f:02:ce:8c:39:6a:e7:06:2c:6b:62:1e:12:f8:34:b3:
6b:15:b7:35:dd:3d:c0:04:a7:69:83:88:e4:d9:cc:22:11:e0:
25:09:bc:bf:fc:38:8f:7a:49:77:92:be:ba:69:9d:b6:ce:5e:
13:8b:70:3a:63:69:b9:a0:dd:31:2e:87:a9:68:4a:9e:29:fe:
31:fd:b2:44:3a:be:aa:09:4a:46:d5:51:b0:30:50:81:6a:7d:
25:3f:a4:86:4b:3c:f5:aa:78:11:19:e9:20:05:56:45:79:fb:
d0:2b:70:56
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIULwjXgkFR9Vjp3h/CUq/WyLj+znUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNTEzMTM0MjU3WhcNMjYwNTEyMTM0NzU3
WjAzMTEwLwYDVQQDEyg0ODYyQzM5MDQxRjU1NzNGQjk0RjgyMTM1MTVCRjU2MTYy
OTM3NEEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oyKkjKMJhaX
Ta9PSVoTvnWc1w1ORKyjpR8IUh/sCTQB7s/NKpHoKXPZ4LIqBJrfPEa/q/56xxua
2GBeoACzqsGgPXEF02QQSZ1/he/Ks2/IHI/vv4qWZFtDVBaihGNp2UDADXucHFsn
yKsGCRAEiHfTbyEVBMxOscP463oagV7qv4XbChbOB49/vTl7C6fmAXanDJKw3Wct
yB2MtNz9FkjMF/QdjWxfTG9LgolX7VlK8kpayrhrRcDp5kiqBtmugxmNUFJ9auVV
FWU7bxwmduPTDES9IVO7B1BwBfgU1R6vhv17qE+Xxol+oexISc9VlxjF9vrsanqJ
ghxhz855/QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEhiw5BB9Vc/uU+CE1Fb9WFi
k3SgMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNzMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANFXrDANBgkqhkiG9w0BAQsF
AAOCAQEAlhH7XijPViURZG7F3zL4UbHxp2V2aqIUlABpUL3HS3tURdifoKK27unl
46UgYOWmresmdrYCsAzyuO4ZFjsh977Z733AI32KrVJ1wmYP9SYSK+3TTRuogZ8s
iqEfRxq2IPsrwcPQR1UJufiJmdwUD1McCJER5ffAHNgGq0paJaXT1bT/gL889+tx
SAxxWF4y9/1PAs6MOWrnBixrYh4S+DSzaxW3Nd09wASnaYOI5NnMIhHgJQm8v/w4
j3pJd5K+ummdts5eE4twOmNpuaDdMS6HqWhKnin+Mf2yRDq+qglKRtVRsDBQgWp9
JT+khks89ap4ERnpIAVWRXn70CtwVg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:46:03 2025 by rpki-client