Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb6990b-f055-3be2-949b-f6055130bc1f.roa
File: bfb6990b-f055-3be2-949b-f6055130bc1f.roa (raw, json)
Hash identifier: aAk5XXJWyvnEGYGOoRf4V/BLJ0Bs0C8E/tylx+pxGCE=
Subject key identifier: AF:45:D3:27:4D:15:55:A1:23:3E:59:DE:FB:0A:46:F0:A7:6F:2F:09
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F62931DDC2AB9858FB3725D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb6990b-f055-3be2-949b-f6055130bc1f.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 396540
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Oct 2026 15:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:93:1d:dc:2a:b9:85:8f:b3:72:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=8639552b-90ea-4f2c-9dd4-6298e6af64e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:61:a5:43:5a:b6:75:ad:67:03:e2:7e:b6:
46:7e:ca:25:16:f2:80:6a:10:89:bd:9d:2a:e1:37:
5f:b4:4f:2e:c6:90:c5:e4:f5:cb:f3:74:97:f4:86:
fa:e8:f5:bb:20:7d:4a:eb:59:ce:7d:03:0b:d4:90:
e2:19:ae:0f:cf:da:87:da:b1:bf:e9:cf:60:2d:df:
8b:ad:0a:a7:2a:21:10:9d:02:f3:27:a4:f1:6a:d4:
ea:bd:f4:a5:1a:03:76:f9:11:95:11:80:4b:22:7b:
71:9e:dc:93:ba:63:15:54:28:4b:d5:64:4b:94:a2:
96:43:33:eb:1f:b0:44:20:75:1a:d6:7c:fd:27:41:
c6:27:4e:50:01:96:0a:4d:a8:fd:59:4a:ad:f8:48:
03:4f:05:c1:88:09:b8:e2:f9:a5:9d:83:91:1c:59:
1e:57:f0:f3:fa:14:37:15:c2:87:29:cc:7d:10:5e:
02:24:d2:27:fb:3e:79:33:d8:cd:74:f1:7f:f6:89:
6d:31:2a:07:13:bc:79:58:b2:f6:44:8f:c4:6d:5a:
92:2c:89:a6:b4:6a:77:bb:ff:6b:29:33:f1:69:27:
fb:72:72:46:fb:42:8b:8a:fe:58:27:e8:ae:e0:3a:
a0:41:fe:28:6c:31:17:4b:3b:a6:b1:52:ce:b7:15:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:D3:27:4D:15:55:A1:23:3E:59:DE:FB:0A:46:F0:A7:6F:2F:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb6990b-f055-3be2-949b-f6055130bc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:77:39:de:b8:4b:97:47:c9:95:d4:0d:13:a8:2a:bc:e7:9b:
9d:ae:30:e3:b5:ac:58:b6:63:a8:6a:ef:5b:5a:56:8d:11:12:
83:cd:3f:d0:26:4c:26:9a:72:57:83:54:9f:c2:03:53:d5:ef:
78:16:b6:9c:b2:e0:52:c7:bd:0c:46:01:77:1c:e7:b2:23:d7:
e2:b9:d2:70:72:14:9d:07:4e:a0:f8:cb:a5:a8:33:f4:4a:2f:
a2:6b:06:d8:14:5a:ef:ce:43:b4:ce:86:f9:2f:9b:04:26:81:
9f:1b:74:af:3c:fe:03:bc:20:27:6a:58:5e:1b:b3:95:42:e4:
79:9c:3a:ed:70:1b:09:f4:2b:a0:5a:19:fe:5e:34:7a:6e:0f:
50:e0:6c:ba:5c:e2:ad:72:b8:f5:bd:30:0c:ec:45:a3:fb:3c:
e9:81:6a:d7:d1:cc:1a:e2:b5:0d:f0:87:c5:d2:46:9d:2d:23:
33:6d:5b:33:7b:bd:97:70:63:64:cc:d4:e3:d4:c1:2f:6c:31:
1a:4d:aa:ea:13:27:38:53:8a:11:4e:45:0f:6b:d3:c8:4a:aa:
8b:ab:e2:04:f9:bf:4a:c5:7e:6f:82:5d:cd:00:41:f7:fc:9a:
70:f5:cf:ea:46:19:17:59:43:82:98:67:70:6a:11:9f:e3:dd:
d3:6a:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:34:20 2026 by rpki-client