Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa
File: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier: GhwMBamVhtO7A+fhImaatyxue40FPW3aGqqzq+ySLnQ=
Subject key identifier: A5:89:D6:3B:F8:A4:C3:B0:54:F8:B8:BE:F0:83:32:E7:16:86:E7:EB
Certificate issuer: /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial: 013D970A1AB503F95A4E0468F7D11AEE63DAAD01
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa
Signing time: Thu 04 Jun 2026 22:33:12 +0000
ROA not before: Thu 04 Jun 2026 22:28:12 +0000
ROA not after: Thu 03 Jun 2027 22:33:12 +0000
asID: 53343
IP address blocks: 2a0a:6044:a800::/43 maxlen: 43
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3d:97:0a:1a:b5:03:f9:5a:4e:04:68:f7:d1:1a:ee:63:da:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Validity
Not Before: Jun 4 22:28:12 2026 GMT
Not After : Jun 3 22:33:12 2027 GMT
Subject: CN=A589D63BF8A4C3B054F8B8BEF08332E71686E7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:16:da:ac:5f:73:52:f0:9c:21:40:c6:6c:
93:96:ed:0a:d2:9a:8c:a0:de:28:e0:79:a8:d4:9c:
37:fa:59:2d:15:15:c1:92:2d:2e:b8:58:36:16:01:
76:65:e0:65:08:aa:63:8b:24:64:73:a9:e9:4d:52:
f6:6a:f0:fa:c8:ae:28:a7:6e:b7:8e:8c:59:c5:89:
29:bd:f2:b0:ac:6b:cd:c7:f3:3a:2c:5c:77:53:e7:
39:bf:cc:0f:ea:4a:87:74:61:4a:55:ec:2c:54:e8:
7b:a8:e0:e9:06:2d:8e:52:54:d8:e0:a9:73:08:18:
ec:31:04:79:20:b6:16:8a:68:55:45:21:6b:9e:44:
ee:b9:b1:15:95:7e:75:a2:1d:a6:8e:6b:2a:f0:18:
95:c2:ad:cd:de:0e:f4:dd:37:f1:04:c4:d6:df:58:
14:8a:50:bd:ab:69:67:81:07:fd:55:9f:07:36:aa:
3a:22:0b:e6:9b:b9:86:f6:aa:eb:11:21:9f:73:0a:
e3:d2:16:0f:68:cd:f8:5a:1b:6e:f2:06:23:a7:b5:
fc:57:a2:fd:f1:00:89:bc:bb:72:a8:f8:01:eb:bf:
3e:b2:65:36:14:25:e3:8c:f8:e0:9b:ea:f0:23:6c:
34:f5:40:0c:1f:50:5c:77:a2:15:26:83:e9:55:40:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:D6:3B:F8:A4:C3:B0:54:F8:B8:BE:F0:83:32:E7:16:86:E7:EB
X509v3 Authority Key Identifier:
keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a800::/43
Signature Algorithm: sha256WithRSAEncryption
40:91:d7:55:df:73:d0:0e:09:b5:0d:9e:d2:21:3d:c6:45:2d:
75:86:c6:c0:66:18:c7:5b:06:86:99:6c:51:20:68:b0:8a:b7:
58:8b:48:55:a8:56:9a:81:7d:1d:73:f1:47:14:5a:7b:b7:0f:
02:e9:11:74:4a:14:7b:1e:e3:ff:35:37:96:8b:b0:05:af:51:
e4:5a:b9:ab:75:83:e5:84:4c:9d:ce:57:78:1b:54:c2:93:29:
be:ad:82:a0:04:9f:52:77:59:ac:2e:26:9b:70:11:85:5c:53:
77:ed:f3:b3:c3:45:fa:bc:46:a0:0a:ef:fb:ce:c3:38:a0:f7:
a8:bb:83:c1:03:52:87:ce:f2:c3:ab:62:6c:b9:fb:e5:41:27:
db:b6:af:94:2a:75:a1:19:99:5a:b9:0e:7e:bf:cb:54:56:4d:
5a:21:cf:6b:93:7f:4f:bb:cc:04:f2:5b:51:bc:59:80:58:61:
7f:a9:3d:24:ef:f2:0d:28:9f:b0:36:c5:3e:2d:e2:f0:2b:b8:
40:82:02:d7:d5:56:52:31:3c:ec:fa:b0:5a:f9:ed:c5:ca:b7:
86:24:59:77:a1:e8:50:26:c8:3b:07:77:a0:ba:dc:0a:19:e2:
c1:d6:f7:68:36:d6:ad:5a:42:89:c3:7e:13:16:7b:3e:6d:0c:
40:00:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:00 2026 by rpki-client