Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d3677a-32a3-352c-842e-e56dad181b26.roa
File: a6d3677a-32a3-352c-842e-e56dad181b26.roa (raw, json)
Hash identifier: Ih/4sVrYoz2+TQvxmvNwuNaxneJ0UkRUIEkW3NIqpBc=
Subject key identifier: FA:74:08:39:9A:65:DD:44:D4:19:E4:71:4D:AB:EF:D3:B2:CD:5F:0C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584AB4ECA7AF4065BD4AEB2F9CA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d3677a-32a3-352c-842e-e56dad181b26.roa
Signing time: Fri 01 Aug 2025 01:00:31 +0000
ROA not before: Fri 01 Aug 2025 01:00:31 +0000
ROA not after: Thu 30 Oct 2025 01:00:31 +0000
asID: 33668
IP address blocks: 68.43.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Oct 2025 13:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:b4:ec:a7:af:40:65:bd:4a:eb:2f:9c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 1 01:00:31 2025 GMT
Not After : Oct 30 01:00:31 2025 GMT
Subject: CN=b2f46183-0ffe-42a7-8a65-d077827bc976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:8c:23:19:c9:b9:56:b4:a3:d9:34:1e:5a:
99:a1:b4:67:52:e6:32:0e:28:bb:9d:72:bd:40:90:
f0:47:ce:0b:79:48:a2:ad:02:93:10:f7:29:95:b1:
7c:f7:26:85:dd:82:f8:7d:6b:f9:3a:4e:ad:31:11:
0e:f5:c3:62:f5:64:04:e9:77:19:1f:0e:c8:35:85:
17:e3:ca:90:34:f1:bc:a2:ff:83:92:4a:1b:cf:76:
6d:ae:56:35:cf:ed:c3:21:ce:3b:3f:eb:25:96:87:
81:5a:12:b9:e5:70:2e:27:5d:f3:4f:19:88:4f:11:
9f:e3:dc:58:b3:3e:0a:41:10:be:55:88:8e:53:2d:
22:ce:22:d1:33:75:58:73:9c:a3:c6:95:30:7c:ca:
0c:a8:96:66:d0:e2:b4:de:8a:4d:49:b4:f7:00:27:
13:35:d8:c2:ad:a8:db:00:c8:84:77:b4:8c:10:ba:
ac:1b:ba:55:79:c6:00:99:1b:c3:0f:39:79:7d:12:
88:61:eb:b3:30:f7:bb:7f:e8:ea:c9:06:a3:bc:c0:
c2:e5:10:a8:d9:e3:de:46:99:fb:00:4a:c1:9f:ce:
ca:89:74:2e:6a:46:03:ab:c5:ea:6a:98:d1:8c:0b:
43:08:d7:11:fa:18:b6:28:8e:e1:05:f8:4c:d7:67:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:08:39:9A:65:DD:44:D4:19:E4:71:4D:AB:EF:D3:B2:CD:5F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d3677a-32a3-352c-842e-e56dad181b26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ba:b9:70:05:ae:dd:fd:04:73:22:83:bf:22:22:5c:24:57:
2f:fa:3a:36:c1:83:2c:88:ab:dc:2e:69:81:c4:ba:eb:5f:83:
20:dd:29:63:98:34:73:df:c9:43:07:11:1b:e3:3b:14:e0:94:
28:48:f6:ce:b9:22:2b:90:96:a0:73:ce:a3:3e:8d:3e:f2:42:
7f:35:15:58:e8:b6:1a:15:83:51:56:62:c9:c8:ca:5c:f3:dd:
a9:e6:ad:58:be:d7:74:6f:cc:81:5b:1e:28:df:28:32:87:d3:
7e:f4:53:fd:6e:63:d0:0e:93:d6:05:bd:99:2b:27:75:8e:51:
23:26:82:14:c1:54:13:d2:51:09:89:12:c7:c1:b5:b5:ac:e8:
f7:8e:24:b6:15:a1:cc:62:d5:18:28:9d:eb:38:e0:27:c1:13:
f5:f8:01:75:c6:35:3f:8b:d4:34:c4:bb:29:af:15:d3:53:53:
7f:30:f6:16:40:ce:5c:b4:bd:93:78:f8:a4:30:5f:e3:7d:f7:
11:d1:3b:54:a4:0b:5b:45:26:d7:94:33:6c:18:c6:94:1a:4b:
9b:71:87:f4:bc:b0:cc:9b:d1:7b:ac:2f:ad:11:4f:8b:18:b5:
6a:f0:c1:3d:9c:71:f3:d1:d3:d7:ec:76:f7:7f:49:77:03:7a:
e2:2f:14:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07KevQGW9SusvnKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YjJmNDYxODMtMGZmZS00MmE3LThhNjUtZDA3NzgyN2JjOTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ6MIxnJuVa0o9k0HlqZobRnUuYyDii7nXK9
QJDwR84LeUiirQKTEPcplbF89yaF3YL4fWv5Ok6tMREO9cNi9WQE6XcZHw7INYUX
48qQNPG8ov+Dkkobz3ZtrlY1z+3DIc47P+slloeBWhK55XAuJ13zTxmITxGf49xY
sz4KQRC+VYiOUy0iziLRM3VYc5yjxpUwfMoMqJZm0OK03opNSbT3ACcTNdjCrajb
AMiEd7SMELqsG7pVecYAmRvDDzl5fRKIYeuzMPe7f+jqyQajvMDC5RCo2ePeRpn7
AErBn87KiXQuakYDq8XqapjRjAtDCNcR+hi2KI7hBfhM12deDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPp0CDmaZd1E1BnkcU2r79OyzV8MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTZkMzY3N2EtMzJhMy0z
NTJjLTg0MmUtZTU2ZGFkMTgxYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCvzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADm6uXAFrt39BHMig78iIlwkVy/6OjbBgyyIq9wuaYHEuutfgyDdKWOY
NHPfyUMHERvjOxTglChI9s65IiuQlqBzzqM+jT7yQn81FVjothoVg1FWYsnIylzz
3anmrVi+13RvzIFbHijfKDKH0370U/1uY9AOk9YFvZkrJ3WOUSMmghTBVBPSUQmJ
EsfBtbWs6PeOJLYVocxi1Rgones44CfBE/X4AXXGNT+L1DTEuymvFdNTU38w9hZA
zly0vZN4+KQwX+N99xHRO1SkC1tFJteUM2wYxpQaS5txh/S8sMyb0XusL60RT4sY
tWrwwT2ccfPR09fsdvd/SXcDeuIvFJ0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:46 2025 by rpki-client