Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
File: 3230392e38372e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ZBxHmLv7L5ABxfJq9WZlxnt+RPAwwScNJ+lOVEsKa2Y=
Subject key identifier: 51:75:69:5F:F7:78:53:DA:B1:50:E8:80:FC:64:57:89:0E:F9:E0:0E
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 7573EBE1068AECDE41D2C37E7F4F1B903EDBA614
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
Signing time: Sat 17 May 2025 16:26:37 +0000
ROA not before: Sat 17 May 2025 16:21:37 +0000
ROA not after: Sat 16 May 2026 16:26:37 +0000
asID: 834
IP address blocks: 209.87.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 13:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:73:eb:e1:06:8a:ec:de:41:d2:c3:7e:7f:4f:1b:90:3e:db:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: May 17 16:21:37 2025 GMT
Not After : May 16 16:26:37 2026 GMT
Subject: CN=5175695FF77853DAB150E880FC6457890EF9E00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:6f:76:23:4d:9a:7e:90:3f:ea:44:dd:b7:
bc:ea:88:51:04:7d:df:bb:20:e2:7f:fe:4d:aa:49:
67:78:91:14:c8:68:48:6c:23:e1:f4:2f:0f:65:f2:
be:55:69:e2:ca:de:dc:2c:25:e0:fe:65:09:8b:87:
f5:6f:79:1e:3e:f2:0a:db:c8:5c:bd:3a:c6:b3:a0:
4a:a7:21:b0:9b:6b:2e:a7:dc:35:0f:89:09:36:9f:
a5:86:20:44:bb:46:47:2f:50:63:f5:3b:24:57:b1:
f1:cf:25:77:31:a1:ee:01:29:44:b3:e0:dd:f4:72:
07:50:1f:2b:2a:0b:4d:ba:32:12:f2:f5:3b:99:fc:
e8:f1:19:55:82:ee:a5:a2:50:0e:64:74:31:5b:2f:
11:a6:aa:8f:02:ac:e7:f4:12:9c:a2:f3:59:2f:6e:
6a:f2:aa:f2:88:b4:1e:88:93:ef:a9:38:be:d9:64:
74:37:c1:9e:b3:bb:a4:22:99:41:1a:d0:13:98:a5:
d1:96:5c:ba:75:ca:c0:4a:fd:9d:02:4b:f5:f4:f1:
14:df:19:15:8b:8e:a6:02:6d:71:11:90:81:79:00:
3b:12:12:73:31:2c:03:0f:00:a8:e7:c8:53:81:f8:
16:41:67:a8:df:aa:2c:9e:fe:9e:33:31:4b:0c:e2:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:69:5F:F7:78:53:DA:B1:50:E8:80:FC:64:57:89:0E:F9:E0:0E
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
97:97:62:14:88:fa:43:ff:ea:e6:f5:eb:fe:c0:5b:82:3e:9f:
ee:ed:15:b1:66:50:9b:06:b8:f8:bc:82:98:0c:54:f1:2e:34:
c3:ff:58:06:20:fe:72:7c:a0:6d:03:45:ff:3e:83:3e:4a:7c:
f0:20:0d:e6:7d:1d:65:6e:81:f6:76:b7:75:10:d5:8f:39:6c:
c2:be:e1:97:77:4a:69:06:35:37:1d:71:3a:ec:ae:ed:06:fc:
ce:80:e9:1a:19:9d:22:8d:0d:f7:b0:5b:55:fa:8f:dd:2b:02:
99:44:61:15:a2:a0:de:fd:17:a0:bb:0e:87:54:b6:71:55:d4:
96:2a:58:00:78:d0:af:9d:e0:1e:07:53:4e:68:aa:5c:35:47:
8e:dd:4e:a1:51:95:a4:ac:26:94:96:40:d9:63:be:71:f9:0f:
23:86:49:91:1a:14:56:bb:58:a9:29:7d:41:4d:d3:97:56:d3:
d5:c7:21:61:1c:a0:bc:88:d7:c7:a0:be:c3:f4:d6:de:34:56:
4d:ba:90:3a:82:3e:f0:87:40:2c:d6:d6:0f:27:82:a8:04:6e:
9b:9a:bb:92:33:b2:63:d1:4d:da:a0:34:3e:8a:1b:e6:fd:0e:
48:54:82:08:03:82:fc:d0:31:bc:31:85:8d:fe:35:2b:77:03:
7c:a3:ce:f8
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUdXPr4QaK7N5B0sN+f08bkD7bphQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNTE3MTYyMTM3WhcNMjYwNTE2MTYyNjM3
WjAzMTEwLwYDVQQDEyg1MTc1Njk1RkY3Nzg1M0RBQjE1MEU4ODBGQzY0NTc4OTBF
RjlFMDBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOxvdiNNmn6Q
P+pE3be86ohRBH3fuyDif/5NqklneJEUyGhIbCPh9C8PZfK+VWniyt7cLCXg/mUJ
i4f1b3kePvIK28hcvTrGs6BKpyGwm2sup9w1D4kJNp+lhiBEu0ZHL1Bj9TskV7Hx
zyV3MaHuASlEs+Dd9HIHUB8rKgtNujIS8vU7mfzo8RlVgu6lolAOZHQxWy8RpqqP
Aqzn9BKcovNZL25q8qryiLQeiJPvqTi+2WR0N8Ges7ukIplBGtATmKXRlly6dcrA
Sv2dAkv19PEU3xkVi46mAm1xEZCBeQA7EhJzMSwDDwCo58hTgfgWQWeo36osnv6e
MzFLDOISVQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFF1aV/3eFPasVDogPxkV4kO
+eAOMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5
Mzg4NGQyYTMwLzAvMzIzMDM5MmUzODM3MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRV6wwDQYJKoZIhvcNAQELBQADggEB
AJeXYhSI+kP/6ub16/7AW4I+n+7tFbFmUJsGuPi8gpgMVPEuNMP/WAYg/nJ8oG0D
Rf8+gz5KfPAgDeZ9HWVugfZ2t3UQ1Y85bMK+4Zd3SmkGNTcdcTrsru0G/M6A6RoZ
nSKNDfewW1X6j90rAplEYRWioN79F6C7DodUtnFV1JYqWAB40K+d4B4HU05oqlw1
R47dTqFRlaSsJpSWQNljvnH5DyOGSZEaFFa7WKkpfUFN05dW09XHIWEcoLyI18eg
vsP01t40Vk26kDqCPvCHQCzW1g8ngqgEbpuau5IzsmPRTdqgND6KG+b9DkhUgggD
gvzQMbwxhY3+NSt3A3yjzvg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:55 2025 by rpki-client