Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa
File: 3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa (raw, json)
Hash identifier: jCL8mFWV33/rQcCRd26+u/FUiOXIYssabT8ICHyyeNQ=
Subject key identifier: 53:24:13:7B:47:BD:6D:FB:F1:EF:64:42:37:7A:A4:6D:CD:8D:02:71
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 44F83AFF8B6F849644C8E437984F770DCF5BA6DD
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa
Signing time: Tue 06 May 2025 12:39:24 +0000
ROA not before: Tue 06 May 2025 12:34:24 +0000
ROA not after: Tue 05 May 2026 12:39:24 +0000
asID: 14135
IP address blocks: 173.247.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 04:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f8:3a:ff:8b:6f:84:96:44:c8:e4:37:98:4f:77:0d:cf:5b:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: May 6 12:34:24 2025 GMT
Not After : May 5 12:39:24 2026 GMT
Subject: CN=5324137B47BD6DFBF1EF6442377AA46DCD8D0271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:da:70:1b:c4:af:f6:75:ed:c8:a2:4e:49:
07:7b:f3:84:17:c2:57:e1:40:30:4b:d2:f8:1f:22:
74:c8:83:61:db:11:6b:e7:b4:a2:a2:5a:0c:13:e4:
20:f9:7e:a6:87:22:ac:42:6f:e5:22:d5:62:47:86:
e2:c6:46:60:18:30:f9:3a:a4:87:02:0f:51:d0:5e:
46:e3:0a:6c:a3:fb:aa:d3:9c:a3:c7:9a:b0:36:26:
21:02:71:cb:d5:27:91:0c:59:57:51:ca:44:b1:5d:
1d:98:2c:be:36:af:92:f8:67:82:8c:1b:3a:75:b2:
40:d4:80:14:c1:ed:58:06:fd:d0:12:b0:7c:e4:e0:
4f:52:2a:c9:38:c0:71:53:0f:b6:35:03:a5:0b:13:
8e:73:89:07:cb:e3:4d:3c:19:8f:76:29:47:39:6f:
b1:2b:91:c9:6f:16:39:34:26:7c:47:d2:28:95:69:
ec:aa:4d:0a:17:dc:9b:28:88:5c:5c:5e:cc:09:d2:
7a:df:7a:f1:f5:66:91:75:95:39:a8:06:4a:2c:47:
7c:79:8e:f1:5c:58:c2:92:ec:f1:30:28:db:99:c8:
aa:68:a7:e4:af:d9:83:48:e3:e9:34:10:2d:c9:58:
70:6a:62:d1:a4:e7:da:6c:67:e2:af:7d:b1:fe:b3:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:13:7B:47:BD:6D:FB:F1:EF:64:42:37:7A:A4:6D:CD:8D:02:71
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.225.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dd:8e:32:f1:2e:1f:b4:df:ec:a5:42:7e:cf:fb:b0:df:dd:
72:45:92:ee:a7:af:4b:fa:f0:b0:72:79:8e:eb:84:02:cd:c0:
85:00:41:8f:1b:47:a8:1e:42:29:02:19:76:35:8f:96:e4:91:
94:a6:ba:1b:e8:1f:92:5b:89:5e:06:e4:b1:e9:dd:c8:05:87:
06:d3:52:17:81:17:83:c8:f7:61:46:fd:48:74:36:db:c1:d3:
d0:2d:60:22:39:30:2d:10:39:1b:1b:5e:1f:6f:b8:ed:82:19:
d1:d5:28:43:77:e9:ef:ef:55:cc:d6:d9:d3:c5:c2:d5:4d:cc:
e2:0a:ea:61:0f:70:e0:b0:4f:79:b7:a1:66:33:dd:30:08:cd:
26:42:90:cb:68:e2:3e:f0:61:98:2b:84:ca:94:52:c6:b4:dd:
f5:ce:79:76:16:b4:88:60:01:e3:d5:ca:30:26:ed:ae:d2:1f:
bf:ed:3e:05:e5:3b:0c:c8:54:ed:c1:b1:b4:e8:b1:6a:30:5b:
44:f2:13:00:1c:48:63:ea:3b:85:dc:8a:41:0f:c1:34:3f:16:
9c:fd:38:c4:81:63:6d:b0:22:1e:d2:b0:4e:df:6e:5d:f5:dc:
fb:e3:49:8b:79:72:00:76:0c:a4:de:fb:a1:f8:af:dc:c5:d0:
e3:af:c6:be
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIURPg6/4tvhJZEyOQ3mE93Dc9bpt0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNTA2MTIzNDI0WhcNMjYwNTA1MTIzOTI0
WjAzMTEwLwYDVQQDEyg1MzI0MTM3QjQ3QkQ2REZCRjFFRjY0NDIzNzdBQTQ2RENE
OEQwMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth7acBvEr/Z1
7ciiTkkHe/OEF8JX4UAwS9L4HyJ0yINh2xFr57SioloME+Qg+X6mhyKsQm/lItVi
R4bixkZgGDD5OqSHAg9R0F5G4wpso/uq05yjx5qwNiYhAnHL1SeRDFlXUcpEsV0d
mCy+Nq+S+GeCjBs6dbJA1IAUwe1YBv3QErB85OBPUirJOMBxUw+2NQOlCxOOc4kH
y+NNPBmPdilHOW+xK5HJbxY5NCZ8R9IolWnsqk0KF9ybKIhcXF7MCdJ633rx9WaR
dZU5qAZKLEd8eY7xXFjCkuzxMCjbmciqaKfkr9mDSOPpNBAtyVhwamLRpOfabGfi
r32x/rNLHwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFMkE3tHvW378e9kQjd6pG3N
jQJxMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffhMA0GCSqGSIb3DQEB
CwUAA4IBAQBD3Y4y8S4ftN/spUJ+z/uw391yRZLup69L+vCwcnmO64QCzcCFAEGP
G0eoHkIpAhl2NY+W5JGUprob6B+SW4leBuSx6d3IBYcG01IXgReDyPdhRv1IdDbb
wdPQLWAiOTAtEDkbG14fb7jtghnR1ShDd+nv71XM1tnTxcLVTcziCuphD3DgsE95
t6FmM90wCM0mQpDLaOI+8GGYK4TKlFLGtN31znl2FrSIYAHj1cowJu2u0h+/7T4F
5TsMyFTtwbG06LFqMFtE8hMAHEhj6juF3IpBD8E0Pxac/TjEgWNtsCIe0rBO325d
9dz740mLeXIAdgyk3vuh+K/cxdDjr8a+
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:39:10 2025 by rpki-client