Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04829ef5-0674-3912-8916-bde1753f46f8.roa
File: 04829ef5-0674-3912-8916-bde1753f46f8.roa (raw, json)
Hash identifier: Q2r6FellVAfO+uziHaGwJn0YGYv75F/7nYgP7R/Q1rg=
Subject key identifier: 51:46:DD:04:1C:A0:41:89:F7:AF:46:C6:2C:19:CF:BB:2C:C4:88:FA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F4972FCCB5D3D783811318000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04829ef5-0674-3912-8916-bde1753f46f8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401152
IP address blocks: 108.165.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Oct 2026 17:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:fc:cb:5d:3d:78:38:11:31:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b883501c-8a7a-4ce0-ad33-cfe7950f87c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:35:de:b9:2d:a4:e8:72:67:da:58:5c:79:
a7:d7:ed:1e:f3:51:ec:42:6e:cd:4e:bc:f0:80:b9:
25:aa:68:6e:02:a9:57:97:d6:5d:17:bd:33:6b:4b:
eb:2c:8b:7e:63:f3:0d:b3:be:3b:d5:53:fa:fe:72:
a9:c3:f4:38:a2:96:a2:b0:a0:26:0b:93:db:73:39:
7b:07:6a:56:67:47:60:71:7b:bd:b6:ee:ee:03:de:
da:65:8b:8c:58:48:e5:63:0d:05:53:5c:a0:44:3c:
c8:3b:b5:27:2f:e1:9e:93:fd:c9:09:31:e4:12:80:
bb:83:c4:f2:44:e2:0b:a9:d9:40:10:26:6d:c4:98:
dd:ca:3b:55:7d:d1:fd:aa:04:fd:b1:a2:e6:5d:d2:
8e:09:3a:14:cf:81:ce:f2:3d:3b:1b:d3:e1:40:4f:
67:3c:d9:b3:63:f5:ff:7c:a5:86:55:db:3d:ed:06:
3b:e4:43:f5:55:13:6d:86:85:d6:35:20:da:f2:b0:
ad:04:e7:57:fa:c7:35:f7:32:20:fa:0c:34:77:ab:
7d:b9:74:aa:ea:a1:ac:53:ee:52:23:ec:b1:0a:86:
9c:13:92:c3:ec:6f:53:40:4b:1f:cc:ba:44:ad:b2:
2f:ae:10:0f:36:d3:30:32:c1:f5:54:93:05:68:73:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:46:DD:04:1C:A0:41:89:F7:AF:46:C6:2C:19:CF:BB:2C:C4:88:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04829ef5-0674-3912-8916-bde1753f46f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:5b:fe:3e:ad:18:45:c9:f1:1d:0a:fa:19:7d:57:99:6e:91:
b8:b7:8b:19:23:ba:75:e0:df:a2:45:d5:f0:19:45:fd:57:3a:
d4:e5:34:a8:4f:36:ae:a5:f1:ea:bf:e8:9b:29:df:f2:9d:b1:
55:57:d8:86:97:8f:ad:aa:9d:52:28:14:01:25:4c:6a:55:a8:
4f:9e:88:7c:cc:5e:d1:ad:99:0c:f3:33:70:39:5e:25:aa:e9:
81:59:50:3d:89:a0:c7:c3:e9:e3:c3:5b:70:b4:7e:99:c3:d7:
fc:24:7e:81:89:64:38:46:3d:71:a2:61:fa:e4:3e:8a:06:e4:
bb:ad:6d:a9:f4:e7:a3:7b:2a:c8:cb:cb:ad:cb:83:19:93:95:
ed:7c:31:85:aa:08:96:44:c5:22:e4:8c:7c:b7:29:81:10:3a:
8f:d6:bf:38:e6:8a:49:46:9f:80:a2:f6:7c:be:0f:c1:20:95:
c0:20:18:dd:d3:51:4e:7e:de:e2:e2:d8:b4:36:e5:02:89:66:
c7:a1:51:0c:59:31:cd:af:d6:52:0f:5e:5d:a5:79:89:d9:a2:
ac:ff:f7:7b:df:62:ed:03:11:18:64:cd:88:13:72:4d:aa:0b:
5a:ee:94:dd:e0:25:6c:a8:fa:71:bf:fd:63:42:40:b5:df:ce:
fd:81:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:48:07 2026 by rpki-client