Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/e9eaa085-787a-3996-b085-136b59278462.roa
File: e9eaa085-787a-3996-b085-136b59278462.roa (raw, json)
Hash identifier: M/lJVh2L31PbGCZ0JLTdzUg44eSXXKUgTCy/KQb7WUE=
Subject key identifier: 89:0E:22:A2:12:99:AB:F2:0B:98:98:2F:5E:38:AC:62:CB:D5:B9:5A
Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72
Certificate serial: 010D0C9F4328584EF5CFD925DCDFE15523DFC300
Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/e9eaa085-787a-3996-b085-136b59278462.roa
Signing time: Wed 26 Aug 2026 02:00:21 +0000
ROA not before: Wed 26 Aug 2026 02:00:21 +0000
ROA not after: Tue 24 Nov 2026 03:00:21 +0000
asID: 142240
IP address blocks: 172.98.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Sep 2026 02:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:cf:d9:25:dc:df:e1:55:23:df:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72
Validity
Not Before: Aug 26 02:00:21 2026 GMT
Not After : Nov 24 03:00:21 2026 GMT
Subject: CN=238a4fd8-e170-438c-8a6d-983838eb95a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:2b:36:ac:4b:39:cf:d3:b7:fa:1f:4a:9b:
72:76:ff:2a:96:0d:a0:a8:c4:e6:02:a9:db:96:93:
5b:99:f0:8e:61:62:01:e9:f7:07:af:35:66:73:47:
5a:72:8a:d9:dc:9a:c1:34:74:9d:d7:e0:bd:db:b4:
fc:e6:fb:81:21:53:68:a4:0b:17:a1:06:5a:29:cd:
4b:17:4e:b7:3b:9e:c3:b0:59:8a:90:09:51:bb:a3:
31:26:7b:58:7c:4a:44:a2:4b:0e:b8:1c:d8:79:ea:
7b:b3:dd:84:bd:43:e6:ec:80:22:b3:28:3c:5f:bd:
39:04:b1:4e:e6:a1:09:74:79:2c:d7:77:a9:ef:88:
42:56:df:d6:b3:b9:e6:30:af:ef:cb:ff:03:69:dc:
24:9e:44:4a:48:db:f8:a2:3a:78:d0:c6:d0:2e:43:
be:8e:97:29:ca:12:1a:96:05:6f:a6:7c:c6:00:45:
21:db:ab:6e:52:a9:00:61:9a:85:46:4b:26:a5:23:
8a:a2:4f:25:e9:19:ba:21:e8:d2:1d:85:22:0d:d4:
57:f3:2b:89:b7:da:85:45:13:98:ff:ae:f5:cd:18:
0b:cb:fc:6c:c9:e9:7d:40:d4:7c:62:0e:3e:3c:02:
96:3c:0a:69:73:b8:ad:c7:fd:ed:76:e4:b0:cc:d3:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:22:A2:12:99:AB:F2:0B:98:98:2F:5E:38:AC:62:CB:D5:B9:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/e9eaa085-787a-3996-b085-136b59278462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
X509v3 Authority Key Identifier:
keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:bd:58:c9:28:74:d3:05:ad:e6:d8:d6:6a:b6:69:3f:0a:b8:
e7:20:c8:b0:df:71:36:26:8d:0b:d1:7a:01:fb:38:86:62:6d:
61:54:03:3e:2e:3a:78:ce:ca:f4:81:e8:92:3c:30:78:f9:27:
22:79:af:28:6e:14:54:80:d7:9c:fd:44:66:6a:e0:2b:c2:d6:
f2:5d:cf:39:9d:00:b2:98:ac:58:e4:ac:79:0d:bb:52:95:63:
d7:cb:01:4b:28:eb:82:67:67:e0:b0:fa:1b:1d:1d:d0:11:66:
77:c4:ef:94:18:77:eb:08:80:8c:90:ee:e6:ea:4f:7c:3c:e7:
f2:41:b7:b4:16:e1:22:cc:1a:a7:cd:d6:59:83:dd:e6:15:8e:
e5:11:64:a2:82:f1:10:55:61:fa:92:66:d1:b7:54:ed:78:ec:
c6:9d:34:ad:0a:a1:98:cc:fb:75:28:0e:53:fa:34:23:56:1b:
f7:fd:d4:d2:93:b8:1d:6b:5b:fc:f3:f8:ac:73:2a:d9:81:95:
4a:05:aa:d8:70:74:db:3b:ae:8e:9a:87:02:d4:e6:3c:56:a1:
46:50:b8:65:83:81:67:19:bc:f8:cd:69:f4:e1:54:72:3c:8b:
e5:70:83:55:c5:d9:80:12:b5:e8:7c:25:a4:76:0f:cd:23:bc:
99:b8:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:02:08 2026 by rpki-client