Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa
File: 3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa (raw, json)
Hash identifier: av2l99OQonnUQG/x7Udk0/G1YyU0z4+yJUBSRzlKf20=
Subject key identifier: 30:D2:DA:A9:19:FE:EC:78:18:C3:DC:C9:C6:01:80:04:09:A1:2F:4E
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 33F0B200A2A5BCCBA7DA279297ED1E8DDAA2272F
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa
Signing time: Thu 01 May 2025 20:11:58 +0000
ROA not before: Thu 01 May 2025 20:06:58 +0000
ROA not after: Thu 30 Apr 2026 20:11:58 +0000
asID: 393886
IP address blocks: 209.87.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f0:b2:00:a2:a5:bc:cb:a7:da:27:92:97:ed:1e:8d:da:a2:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: May 1 20:06:58 2025 GMT
Not After : Apr 30 20:11:58 2026 GMT
Subject: CN=30D2DAA919FEEC7818C3DCC9C601800409A12F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:87:20:0d:b1:d6:b9:3e:c8:7d:92:62:48:
6a:82:22:76:92:83:e5:08:16:5e:7a:a0:83:9b:cb:
99:25:8b:ed:f7:05:ba:87:8f:4a:68:cd:22:9b:d5:
ab:49:de:d9:f8:f3:b5:1a:22:72:d1:e8:a2:bb:b5:
0e:12:3b:8e:62:f6:77:97:11:bb:54:21:b8:d4:48:
b4:db:ad:79:90:40:9f:25:60:ed:7e:ec:da:57:54:
fe:fb:94:40:41:fd:c2:9e:70:40:21:f4:37:85:1b:
9a:a2:c3:e5:27:50:80:e0:8f:4f:75:66:fd:eb:75:
82:9c:87:ec:fc:d2:30:5c:b6:0a:2a:85:e1:5c:e6:
47:b1:9d:1b:9d:78:49:e4:30:85:66:24:56:ab:bd:
fa:00:f0:a1:dc:19:2c:05:0c:97:46:04:33:40:ef:
40:36:19:6d:a0:ba:ae:ca:e5:a1:17:06:d9:68:37:
0b:74:02:38:34:d5:5e:6d:fa:9d:6a:e9:43:54:a1:
aa:32:78:09:ce:63:d2:c5:e7:7e:66:0b:48:27:f2:
7e:b6:c7:b1:be:e3:55:35:de:54:ea:a5:1b:cd:cb:
50:b3:a7:a0:7f:05:54:88:c4:7a:74:87:9d:89:66:
1f:3c:a2:f7:77:f1:13:e5:a5:bd:0d:94:92:42:b6:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D2:DA:A9:19:FE:EC:78:18:C3:DC:C9:C6:01:80:04:09:A1:2F:4E
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:82:1c:65:10:a0:3c:b3:a3:fd:7e:e2:7b:20:e2:42:97:3d:
86:d0:91:94:f2:b8:c9:d6:da:3d:28:bd:5d:bd:63:f9:df:94:
d9:f8:24:7f:b1:ed:83:42:54:ab:01:b0:b5:9a:2d:ca:2a:a1:
2d:09:3e:eb:ab:94:c8:0b:4c:df:22:e7:8b:3f:08:44:96:eb:
ba:c4:4f:73:6d:92:3b:a0:60:c0:d7:cf:25:ed:5d:a7:ee:28:
dd:31:a0:46:e1:c4:cc:b1:d7:5f:a0:b5:e0:a9:f0:a2:2c:6a:
9e:d5:0c:93:0f:e1:e7:47:b4:ad:29:f9:de:d6:d4:81:64:c2:
6a:f8:8a:82:25:e0:8a:a4:4e:f3:40:04:dc:4a:44:21:52:2e:
5c:06:5b:74:f9:77:aa:2f:5f:7d:e2:c2:3a:a1:7a:ea:f0:ea:
31:5b:a9:88:16:d1:d6:62:3f:a3:dc:7d:35:6b:45:d6:98:9a:
29:a6:63:34:44:43:3e:2e:1c:fc:2d:d9:53:a2:53:08:14:e4:
c3:49:62:f9:ef:29:91:f3:46:a8:f8:cb:14:71:6f:df:95:2a:
f8:fd:36:20:f4:42:54:94:d1:55:c0:80:9e:50:e2:70:e6:91:
77:3a:dd:7e:af:db:1c:61:18:ba:1f:a4:86:5a:01:7f:e0:7d:
a5:96:b5:e9
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUM/CyAKKlvMun2ieSl+0ejdqiJy8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNTAxMjAwNjU4WhcNMjYwNDMwMjAxMTU4
WjAzMTEwLwYDVQQDEygzMEQyREFBOTE5RkVFQzc4MThDM0RDQzlDNjAxODAwNDA5
QTEyRjRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk72HIA2x1rk+
yH2SYkhqgiJ2koPlCBZeeqCDm8uZJYvt9wW6h49KaM0im9WrSd7Z+PO1GiJy0eii
u7UOEjuOYvZ3lxG7VCG41Ei02615kECfJWDtfuzaV1T++5RAQf3CnnBAIfQ3hRua
osPlJ1CA4I9PdWb963WCnIfs/NIwXLYKKoXhXOZHsZ0bnXhJ5DCFZiRWq736APCh
3BksBQyXRgQzQO9ANhltoLquyuWhFwbZaDcLdAI4NNVebfqdaulDVKGqMngJzmPS
xed+ZgtIJ/J+tsexvuNVNd5U6qUbzctQs6egfwVUiMR6dIediWYfPKL3d/ET5aW9
DZSSQraQrwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDDS2qkZ/ux4GMPcycYBgAQJ
oS9OMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNzMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTMzMzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VetMA0GCSqGSIb3DQEB
CwUAA4IBAQBOghxlEKA8s6P9fuJ7IOJClz2G0JGU8rjJ1to9KL1dvWP535TZ+CR/
se2DQlSrAbC1mi3KKqEtCT7rq5TIC0zfIueLPwhEluu6xE9zbZI7oGDA188l7V2n
7ijdMaBG4cTMsddfoLXgqfCiLGqe1QyTD+HnR7StKfne1tSBZMJq+IqCJeCKpE7z
QATcSkQhUi5cBlt0+XeqL1994sI6oXrq8OoxW6mIFtHWYj+j3H01a0XWmJoppmM0
REM+Lhz8LdlTolMIFOTDSWL57ymR80ao+MsUcW/flSr4/TYg9EJUlNFVwICeUOJw
5pF3Ot1+r9scYRi6H6SGWgF/4H2llrXp
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:48:28 2025 by rpki-client