Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
File:                     326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier:          Jj3KDlhgwgVXidJWpaNviHL7BafoNzOHGdeVZtD0xT4=
Subject key identifier:   17:D4:4F:74:A1:57:51:9F:FC:FB:FA:C7:91:4C:37:92:22:D8:5D:58
Certificate issuer:       /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial:       260F9336DE6AC36A0167C537E5F6944F04926BDE
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
Signing time:             Thu 04 Jun 2026 22:33:13 +0000
ROA not before:           Thu 04 Jun 2026 22:28:13 +0000
ROA not after:            Thu 03 Jun 2027 22:33:13 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a880::/44 maxlen: 44
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0f:93:36:de:6a:c3:6a:01:67:c5:37:e5:f6:94:4f:04:92:6b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
        Validity
            Not Before: Jun  4 22:28:13 2026 GMT
            Not After : Jun  3 22:33:13 2027 GMT
        Subject: CN=17D44F74A157519FFCFBFAC7914C379222D85D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:dd:b6:ef:44:59:20:ea:d2:6c:cf:e5:8e:
                    75:93:b8:b4:5a:e8:28:87:15:dc:63:49:53:93:8f:
                    25:c2:02:51:5a:5c:02:81:fa:42:ca:a1:08:c8:37:
                    3c:03:22:e2:e8:5c:1b:a3:e4:73:48:c9:6c:b8:58:
                    65:b6:d6:40:06:6c:be:fc:ef:47:87:4d:51:73:02:
                    fd:35:11:78:27:39:db:41:84:e0:32:e1:2d:59:8d:
                    42:bd:d8:f3:19:21:e3:e7:67:d2:49:4d:69:26:dc:
                    b8:ad:a5:82:6f:84:8f:da:18:0a:31:e2:8d:0a:91:
                    b5:38:98:4d:fb:33:88:58:f6:a7:75:33:e4:f7:54:
                    d7:17:10:9a:a9:4b:f7:f4:f0:ae:07:08:92:78:36:
                    66:82:4a:7b:59:7f:26:05:08:3d:b5:d5:89:8d:54:
                    64:b8:6e:37:2c:5d:72:37:3c:88:e6:5f:b0:49:1d:
                    0a:56:66:16:d3:73:45:38:03:f1:83:42:eb:84:93:
                    c7:18:8b:1b:12:b9:74:77:e9:d2:92:df:a1:41:f4:
                    4a:7a:b0:ea:9a:2c:38:a4:ee:08:09:ae:0c:21:ac:
                    1f:41:0b:4c:ae:2e:a0:bf:c0:e0:65:d4:dd:eb:38:
                    c9:ff:c2:0b:2b:94:40:8e:bd:04:7d:29:d8:88:2e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:4F:74:A1:57:51:9F:FC:FB:FA:C7:91:4C:37:92:22:D8:5D:58
            X509v3 Authority Key Identifier:
                keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a880::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:05:ec:a2:2f:d7:fe:31:48:e9:d0:fb:22:46:72:ed:19:6c:
         67:68:9b:c5:eb:03:8e:8d:87:b7:a8:23:e7:fa:3f:b8:a3:43:
         0e:38:98:ae:b5:1e:38:c3:70:c3:2b:8f:cc:1c:e6:3e:05:69:
         8a:41:10:43:35:33:8f:43:c9:65:7d:e4:3f:c3:b4:a8:58:8e:
         97:08:ea:6e:00:67:17:cd:07:56:a9:4d:ef:a8:07:c0:eb:c1:
         77:21:1c:e1:eb:5f:7b:e9:9e:d6:c4:e5:78:46:a8:7f:fe:d5:
         ab:d9:fd:f9:d4:bc:4a:51:61:fa:4a:9f:e6:27:78:7c:0c:f7:
         9c:39:eb:40:87:32:2d:3a:58:b1:46:40:db:43:8a:39:93:6b:
         13:b1:02:56:bb:8a:58:11:64:fe:eb:ba:9d:fa:8f:dc:71:5e:
         a3:df:ca:81:e9:a9:76:bf:24:79:f8:c9:c2:04:eb:bb:ea:dc:
         58:7a:ec:5e:ec:98:0c:76:40:96:ba:56:b3:3a:ab:bc:ed:8f:
         af:d4:46:1c:9a:ca:86:3e:f6:34:2b:04:05:5d:79:2d:10:2c:
         20:d2:24:21:df:09:de:af:2b:8c:e9:fc:85:e7:51:e8:e9:5b:
         77:78:f5:24:78:c7:a4:73:ce:c1:c7:be:20:cb:1e:a6:f1:97:
         d2:cd:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:44:32 2026 by rpki-client