Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/10da766b-6e6e-3411-b053-fc51cb17b4a3.roa
File: 10da766b-6e6e-3411-b053-fc51cb17b4a3.roa (raw, json)
Hash identifier: dk9PJ0I7A1PiAcxSDP8jtgLD6n9hzm6bqdUa0br+HG4=
Subject key identifier: 5A:DC:35:CE:45:9E:32:66:1B:BB:95:1F:A4:6F:B2:D1:B6:8B:D6:5A
Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial: 010D0C9F4328584F0C077A0FC7F5F790E598B700
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/10da766b-6e6e-3411-b053-fc51cb17b4a3.roa
Signing time: Thu 03 Sep 2026 01:00:12 +0000
ROA not before: Thu 03 Sep 2026 01:00:12 +0000
ROA not after: Wed 02 Dec 2026 02:00:12 +0000
asID: 399864
IP address blocks: 169.128.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Oct 2026 11:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0c:07:7a:0f:c7:f5:f7:90:e5:98:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Validity
Not Before: Sep 3 01:00:12 2026 GMT
Not After : Dec 2 02:00:12 2026 GMT
Subject: CN=fc121913-42d8-4665-b655-da6fe113d4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:97:ae:31:f5:f9:37:e0:87:a9:64:0c:06:
84:0d:8b:af:bc:20:1d:4f:a7:c7:a9:cc:d5:1e:14:
a8:16:5b:7a:47:a1:06:af:7d:3b:27:8b:80:bf:be:
4b:e7:b4:25:91:3f:79:33:26:cd:87:db:6d:01:b1:
2a:77:1b:d1:65:50:d6:4c:78:62:b2:14:a4:b5:7a:
a0:d2:85:f7:84:d0:7e:3e:85:37:92:08:fb:b2:45:
8e:ad:1a:ba:f1:b1:90:9c:83:87:8e:c3:89:f5:a4:
0b:21:08:8b:f4:b9:22:a1:a7:5c:21:51:dc:7b:b9:
a4:2f:f9:32:a7:70:f0:1e:f8:98:99:14:33:67:32:
b3:dd:69:57:1e:27:b1:16:68:ae:72:a2:e6:56:0a:
72:44:7e:76:b0:20:7d:0c:1b:b8:af:66:dd:38:fe:
9a:de:79:1d:1d:f9:44:ad:50:4d:d8:5d:f8:6e:54:
55:e4:4e:18:d7:0c:67:00:0c:82:7f:41:85:88:74:
a2:cf:69:7f:84:d2:32:ff:37:c4:44:20:cd:c2:96:
77:44:f9:b0:7b:68:bc:8c:fc:3b:62:9d:89:f2:4b:
4b:99:6e:64:5f:e5:b7:d5:b9:95:52:5a:45:0b:4b:
44:2b:8e:6d:19:58:2a:ec:e2:eb:87:bf:a2:d8:a8:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:35:CE:45:9E:32:66:1B:BB:95:1F:A4:6F:B2:D1:B6:8B:D6:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/10da766b-6e6e-3411-b053-fc51cb17b4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
X509v3 Authority Key Identifier:
keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
sbgp-ipAddrBlock: critical
IPv4:
169.128.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:f7:ec:51:62:33:71:31:71:cb:ba:ec:d6:d0:0f:08:d0:b5:
eb:d8:89:ba:c1:cd:57:b0:c4:09:c2:72:4c:33:20:4f:31:3b:
ad:29:6a:2a:0c:1a:f6:d8:ce:96:8c:ac:c1:30:4d:e8:21:9f:
d4:be:e0:a4:cd:a4:d2:16:24:c5:93:90:d8:ff:ce:8a:1b:db:
2d:fd:7d:5f:fc:f7:61:4a:e6:df:f4:5b:f6:f3:98:45:e6:dd:
42:f9:1b:77:ac:79:5c:03:de:5d:b3:9b:e8:05:59:cf:66:da:
3d:41:3e:07:90:50:c1:ea:29:40:d6:61:c6:b0:b4:24:97:46:
b6:87:d2:00:ad:24:b7:b5:6e:88:1d:0e:02:cd:cc:e5:e2:c6:
76:4d:fc:ef:50:c0:f6:d3:76:56:c0:9e:d9:f6:33:ab:d6:51:
d1:71:48:af:6b:f8:a7:7f:47:53:43:66:52:bb:25:82:9e:69:
0f:6d:1d:fa:31:41:80:8e:b3:c8:95:2a:7a:e3:88:a6:84:93:
8a:14:d2:74:69:95:46:0b:f2:3b:73:5e:35:11:95:cc:32:bc:
82:50:3b:e0:d1:9b:83:21:ec:1c:df:8a:77:60:b3:97:b7:0d:
0a:99:01:b8:b3:8f:18:26:6b:85:53:97:96:d0:56:8d:12:63:
63:6f:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:27:37 2026 by rpki-client