Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/36694084-1317-3749-82c8-0c5ee19959d7.roa
File: 36694084-1317-3749-82c8-0c5ee19959d7.roa (raw, json)
Hash identifier: WHvpZXBcN7r7PThnrw0MzTgnPFpPkZVbJsDzAHoUwK4=
Subject key identifier: 5C:20:3B:5C:37:E9:58:1A:0D:FB:FB:B0:40:9A:79:FD:30:7D:5E:0B
Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial: 010D0C9F4328584F4627C23B5C3FB10289FF8D00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/36694084-1317-3749-82c8-0c5ee19959d7.roa
Signing time: Wed 23 Sep 2026 20:42:09 +0000
ROA not before: Wed 23 Sep 2026 20:42:09 +0000
ROA not after: Tue 22 Dec 2026 21:42:09 +0000
asID: 40934
IP address blocks: 189.25.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Oct 2026 22:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:46:27:c2:3b:5c:3f:b1:02:89:ff:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
Validity
Not Before: Sep 23 20:42:09 2026 GMT
Not After : Dec 22 21:42:09 2026 GMT
Subject: CN=7faad619-e4df-4141-80c6-be778823f440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2f:fc:8a:5d:ce:55:97:04:54:5f:1e:33:fa:
d5:34:86:6d:97:83:7d:f3:8a:df:12:f6:c9:3c:b1:
24:9b:25:d7:85:16:39:ca:aa:5a:cc:ee:cc:b0:2b:
8c:74:75:7c:fb:b0:58:42:98:b4:dd:97:f0:e1:a7:
75:7d:49:a3:50:38:34:a1:84:29:d4:bc:69:98:71:
8e:e4:c6:38:a9:16:58:c8:cd:16:ce:bf:f8:fe:e7:
af:5a:98:36:14:81:8a:a7:fc:a6:1f:66:80:63:2e:
52:0f:9c:02:48:f4:01:8e:e7:54:42:d9:ad:49:98:
72:56:82:1b:70:d0:47:1d:18:ab:72:77:11:76:20:
da:9a:67:dd:36:2c:21:b8:8c:b6:dc:92:e9:40:f4:
bf:44:80:0b:41:11:64:47:17:06:76:bc:1b:d9:0d:
90:9a:2e:db:16:f7:d4:80:49:22:8a:a1:63:ae:b5:
5a:91:c2:b8:1c:50:b4:bf:d9:65:c4:97:d4:33:cb:
5a:00:8a:19:2b:7d:dd:81:94:18:e9:c9:33:2a:b2:
64:1b:dd:a3:43:14:98:0e:71:4a:43:d4:0e:a7:20:
48:f4:f8:40:1d:78:ed:ff:d0:8d:56:26:55:94:a6:
de:d6:b1:70:f7:35:c0:86:e3:85:2f:16:e4:bc:35:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:3B:5C:37:E9:58:1A:0D:FB:FB:B0:40:9A:79:FD:30:7D:5E:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/36694084-1317-3749-82c8-0c5ee19959d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
X509v3 Authority Key Identifier:
keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
sbgp-ipAddrBlock: critical
IPv4:
189.25.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:a3:dc:a0:10:6f:e9:e8:70:7a:49:15:c9:5f:29:b3:f0:76:
c7:82:3b:4a:06:2f:80:1e:1f:dc:f5:8a:8e:f1:7c:a3:d5:c6:
ab:37:a6:92:d4:58:79:14:07:96:17:93:4c:ed:4c:86:3f:75:
5b:cd:57:23:b8:6c:16:e2:26:39:26:ac:93:7d:37:95:df:98:
18:a4:3b:29:af:9e:69:80:18:13:ab:3d:9e:e5:0d:45:c2:d5:
1f:22:9b:a6:d8:4e:ba:49:f8:c3:b2:10:5b:0d:f7:b4:1d:33:
bb:c6:36:0e:ae:93:66:b9:7d:58:ff:d8:3d:87:09:d9:d0:11:
85:de:73:da:0c:36:51:24:19:87:a8:0f:80:ce:7d:ce:db:a9:
0d:6f:92:e1:13:f3:c1:c1:a7:40:53:98:97:69:0d:86:51:aa:
08:02:6b:5c:3a:e7:29:a6:4d:8e:86:31:50:c6:0b:14:0c:44:
0e:c8:14:ac:b1:c4:55:c9:97:27:1d:64:3f:31:25:3e:ba:2f:
19:c4:67:68:16:f5:04:4d:95:5a:06:6f:2b:ec:3e:7d:79:b1:
e9:14:51:ad:7b:bb:d2:61:7f:c8:30:99:18:5e:28:15:23:4f:
d4:0f:f4:c3:89:06:c4:16:9a:56:b2:3d:2e:4c:b6:00:1e:8a:
b5:64:06:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9GJ8I7XD+xAon/jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDkyMzIwNDIwOVoXDTI2MTIyMjIxNDIwOVowLzEtMCsGA1UEAxMk
N2ZhYWQ2MTktZTRkZi00MTQxLTgwYzYtYmU3Nzg4MjNmNDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC/8il3OVZcEVF8eM/rVNIZtl4N984rfEvbJ
PLEkmyXXhRY5yqpazO7MsCuMdHV8+7BYQpi03Zfw4ad1fUmjUDg0oYQp1LxpmHGO
5MY4qRZYyM0Wzr/4/uevWpg2FIGKp/ymH2aAYy5SD5wCSPQBjudUQtmtSZhyVoIb
cNBHHRircncRdiDammfdNiwhuIy23JLpQPS/RIALQRFkRxcGdrwb2Q2Qmi7bFvfU
gEkiiqFjrrVakcK4HFC0v9llxJfUM8taAIoZK33dgZQY6ckzKrJkG92jQxSYDnFK
Q9QOpyBI9PhAHXjt/9CNViZVlKbe1rFw9zXAhuOFLxbkvDWpoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwgO1w36VgaDfv7sECaef0wfV4LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvMzY2OTQwODQtMTMxNy0z
NzQ5LTgyYzgtMGM1ZWUxOTk1OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvRkHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGj3KAQb+nocHpJFclfKbPwdseCO0oGL4AeH9z1io7xfKPVxqs3ppLU
WHkUB5YXk0ztTIY/dVvNVyO4bBbiJjkmrJN9N5XfmBikOymvnmmAGBOrPZ7lDUXC
1R8im6bYTrpJ+MOyEFsN97QdM7vGNg6uk2a5fVj/2D2HCdnQEYXec9oMNlEkGYeo
D4DOfc7bqQ1vkuET88HBp0BTmJdpDYZRqggCa1w65ymmTY6GMVDGCxQMRA7IFKyx
xFXJlycdZD8xJT66LxnEZ2gW9QRNlVoGbyvsPn15sekUUa17u9Jhf8gwmRheKBUj
T9QP9MOJBsQWmlayPS5MtgAeirVkBtk=
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:30:19 2026 by rpki-client