Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa
File: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (raw, json)
Hash identifier: xPdzAtPq6G6/ihbiCUaeftDpO8xywUP+3oLqUtVQ2Qc=
Subject key identifier: 5A:5B:3F:8D:23:2D:64:ED:F6:8F:45:86:57:71:1E:F9:74:A5:1A:72
Certificate issuer: /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial: 446B692DD957BC8D265767BE2D8D4B997EB29EC1
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa
Signing time: Thu 04 Jun 2026 22:33:13 +0000
ROA not before: Thu 04 Jun 2026 22:28:13 +0000
ROA not after: Thu 03 Jun 2027 22:33:13 +0000
asID: 53343
IP address blocks: 2a0a:6044:a800::/46 maxlen: 46
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6b:69:2d:d9:57:bc:8d:26:57:67:be:2d:8d:4b:99:7e:b2:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Validity
Not Before: Jun 4 22:28:13 2026 GMT
Not After : Jun 3 22:33:13 2027 GMT
Subject: CN=5A5B3F8D232D64EDF68F458657711EF974A51A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:86:0b:8f:07:1e:17:6d:aa:bb:5e:63:be:
11:d7:a1:3a:bc:82:d9:15:4b:f1:d1:f6:02:2e:64:
c5:9a:06:9a:90:47:25:e5:88:df:8b:8b:24:ab:3c:
7b:6b:98:a5:eb:33:60:43:ed:c0:f1:79:c6:4b:93:
51:2c:a0:4d:4b:2f:41:ea:ee:4c:11:e9:95:0d:b8:
54:89:53:0f:42:08:1f:f0:8c:66:c8:6d:af:e1:63:
c1:14:9f:9d:62:55:9c:5a:2e:3c:f5:54:94:68:79:
76:81:74:47:77:31:04:44:42:3d:1b:d6:56:6b:bc:
0f:05:3a:c1:3e:ea:88:93:f6:b9:05:7b:2e:5d:63:
68:5c:9a:d4:d9:28:e8:71:61:5c:88:39:26:43:48:
f2:09:7e:8e:05:a8:51:a0:19:91:00:8e:39:44:bd:
5b:0d:d3:e3:9b:35:f5:c5:63:2a:07:4f:b6:2d:b3:
c2:85:d0:15:6c:39:5e:12:75:69:62:76:32:99:68:
43:03:0f:99:3d:5c:67:02:ac:03:3f:ea:75:51:44:
03:ba:22:45:6a:69:65:d8:aa:35:c2:11:66:d0:2a:
cb:a3:c9:3e:c7:95:f1:46:20:13:35:62:8b:fe:a4:
8b:0b:bc:65:bd:38:88:5e:a5:ba:d0:41:3f:cb:11:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:3F:8D:23:2D:64:ED:F6:8F:45:86:57:71:1E:F9:74:A5:1A:72
X509v3 Authority Key Identifier:
keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a800::/46
Signature Algorithm: sha256WithRSAEncryption
1d:b4:03:8c:1c:eb:1a:61:91:c0:1e:88:35:35:9a:9e:dd:35:
b5:d7:3f:c3:61:c5:e6:59:d7:70:fe:f6:98:5a:9d:ab:c5:54:
be:ae:ab:c0:69:bf:56:e2:fa:6e:97:9d:03:ef:a5:4d:24:53:
0c:d7:d7:0a:9e:cd:f2:b2:a0:65:d1:8b:71:1f:4e:74:81:ff:
d7:d1:93:b2:b2:36:66:ee:fc:eb:b5:b4:b8:22:02:f5:9d:fc:
e9:ab:bb:b4:c3:e8:66:13:a7:89:a9:44:22:30:68:c4:0d:0c:
ef:ba:29:53:fc:6c:e7:14:f5:e8:e3:f8:05:e4:62:d9:64:70:
43:e6:b4:29:24:b9:6d:14:1e:0a:d9:b8:3b:c1:50:d2:1a:34:
23:aa:24:96:51:af:fd:fc:f0:c8:30:ca:cd:19:4b:db:d1:5e:
eb:82:18:66:e8:2e:12:08:66:dc:1d:ed:2a:08:69:06:19:f2:
69:24:a6:e0:84:03:36:cc:3d:25:2c:b3:e8:15:99:99:8b:9c:
d7:47:99:84:d8:f0:54:86:1c:d4:81:d6:ba:da:24:f9:8a:29:
5b:be:58:9b:8c:61:69:80:c5:e9:00:69:54:5b:9f:84:18:51:
1e:8a:c7:9b:6e:79:52:7b:1b:be:fc:81:a6:53:0f:1b:cf:66:
49:07:7b:21
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIURGtpLdlXvI0mV2e+LY1LmX6ynsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFQjUwRTM2NDI3N0NFQjA2M0RDQThDMzcxMzY0RkUx
Q0M5ODg0NDAeFw0yNjA2MDQyMjI4MTNaFw0yNzA2MDMyMjMzMTNaMDMxMTAvBgNV
BAMTKDVBNUIzRjhEMjMyRDY0RURGNjhGNDU4NjU3NzExRUY5NzRBNTFBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7oYLjwceF22qu15jvhHXoTq8
gtkVS/HR9gIuZMWaBpqQRyXliN+LiySrPHtrmKXrM2BD7cDxecZLk1EsoE1LL0Hq
7kwR6ZUNuFSJUw9CCB/wjGbIba/hY8EUn51iVZxaLjz1VJRoeXaBdEd3MQREQj0b
1lZrvA8FOsE+6oiT9rkFey5dY2hcmtTZKOhxYVyIOSZDSPIJfo4FqFGgGZEAjjlE
vVsN0+ObNfXFYyoHT7Yts8KF0BVsOV4SdWlidjKZaEMDD5k9XGcCrAM/6nVRRAO6
IkVqaWXYqjXCEWbQKsujyT7HlfFGIBM1Yov+pIsLvGW9OIhepbrQQT/LEdefAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUWls/jSMtZO32j0WGV3Ee+XSlGnIwHwYDVR0j
BBgwFoAU6etQ42QnfOsGPcqMNxNk/hzJiEQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0
Mjc3Q0VCMDYzRENBOEMzNzEzNjRGRTFDQzk4ODQ0LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81L0U5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz
ZDU4MzZmZjFiMjkvNC8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzMDMwM2EzYTJm
MzQzNjJkMzQzNjIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioKYESoADAN
BgkqhkiG9w0BAQsFAAOCAQEAHbQDjBzrGmGRwB6INTWant01tdc/w2HF5lnXcP72
mFqdq8VUvq6rwGm/VuL6bpedA++lTSRTDNfXCp7N8rKgZdGLcR9OdIH/19GTsrI2
Zu7867W0uCIC9Z386au7tMPoZhOnialEIjBoxA0M77opU/xs5xT16OP4BeRi2WRw
Q+a0KSS5bRQeCtm4O8FQ0ho0I6okllGv/fzwyDDKzRlL29Fe64IYZuguEghm3B3t
KghpBhnyaSSm4IQDNsw9JSyz6BWZmYuc10eZhNjwVIYc1IHWutok+YopW75Ym4xh
aYDF6QBpVFufhBhRHorHm255UnsbvvyBplMPG89mSQd7IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:44:20 2026 by rpki-client