Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/30aa8e0a-091b-3a08-9297-216f7c4702d6.roa
File: 30aa8e0a-091b-3a08-9297-216f7c4702d6.roa (raw, json)
Hash identifier: zYpP/oCLKB9IeAdYCbyILBzPHJYqQAEWzueSFM7uYeY=
Subject key identifier: 16:49:CA:B4:F8:42:6F:3D:5D:E7:36:D3:30:68:78:FE:E2:A7:A9:4E
Certificate issuer: /CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90
Certificate serial: 010D0C9F4328584F4EC10BFE6A27B8999D4E3780
Authority key identifier: C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/30aa8e0a-091b-3a08-9297-216f7c4702d6.roa
Signing time: Sat 26 Sep 2026 22:37:28 +0000
ROA not before: Sat 26 Sep 2026 22:37:28 +0000
ROA not after: Fri 25 Dec 2026 23:37:28 +0000
asID: 402384
IP address blocks: 74.115.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 28 Sep 2026 21:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4e:c1:0b:fe:6a:27:b8:99:9d:4e:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90
Validity
Not Before: Sep 26 22:37:28 2026 GMT
Not After : Dec 25 23:37:28 2026 GMT
Subject: CN=d6b966ed-0e23-49c9-a528-e71f2d887216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:7e:a7:21:60:de:2f:5c:34:14:72:b6:e6:
74:af:ab:d9:d1:b9:43:75:7b:ba:2c:de:92:90:fd:
62:91:f1:cb:53:81:6e:0e:21:bf:b2:67:06:41:e5:
24:d7:52:65:40:30:71:14:46:dd:57:8b:f5:3f:be:
4d:46:ed:ee:38:83:e5:4f:be:5f:3c:76:d7:93:6c:
bd:d4:ce:44:c4:eb:3d:05:60:32:95:00:64:ee:73:
95:90:ce:0d:b6:bc:f0:16:8c:77:72:83:33:1b:41:
02:90:26:36:29:71:49:63:8f:98:8b:aa:fa:1a:11:
91:11:09:d0:09:fa:4b:49:25:06:d0:91:5b:70:e1:
c2:20:a1:63:68:89:e5:38:81:26:ba:22:56:10:1e:
43:4a:64:42:00:36:d2:7a:60:6e:b8:c7:a8:8d:23:
37:da:e2:83:27:ea:e8:e1:76:28:a5:78:0a:a8:a0:
e0:c3:dc:f0:d7:db:a6:45:16:d3:8b:24:24:0a:7e:
60:3f:92:71:ec:80:1c:5e:e5:ab:73:6e:ae:33:11:
8e:5d:eb:a8:d9:f7:f9:8f:69:d4:ed:0d:49:50:e1:
2f:b5:13:e3:38:30:99:9f:07:56:e4:2c:0b:6a:f4:
33:33:df:86:65:35:6c:ac:44:ef:5c:dd:93:9e:9d:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:CA:B4:F8:42:6F:3D:5D:E7:36:D3:30:68:78:FE:E2:A7:A9:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/30aa8e0a-091b-3a08-9297-216f7c4702d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl
X509v3 Authority Key Identifier:
keyid:C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer
sbgp-ipAddrBlock: critical
IPv4:
74.115.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d9:4a:ce:73:8a:53:5f:fa:cb:39:97:70:e1:fb:60:0c:b1:
2d:1e:ed:7b:92:6b:39:aa:7a:72:0b:c9:1f:90:a0:75:b9:a7:
13:c0:a8:07:23:39:bd:8a:05:5c:f9:2d:7f:3a:c5:f2:e1:62:
c2:0f:16:c5:f7:65:78:8b:d7:3b:20:0e:1f:90:bc:16:5a:4e:
ae:6b:60:69:ab:4c:d7:e0:a1:b5:a8:77:64:3b:0e:cb:bb:f9:
ad:3d:64:aa:25:87:1d:7e:a7:47:d8:ee:d4:ce:55:03:68:60:
84:21:55:c5:ec:2d:6b:98:0d:63:cc:d7:33:0e:aa:27:82:6d:
2b:0b:04:2c:d2:83:56:b1:6e:97:50:19:9e:56:d1:a6:fd:e2:
79:b9:b1:37:f2:3e:c6:d1:62:ac:03:8a:a1:40:c8:a1:e5:51:
3c:51:a2:b6:7b:10:47:95:d6:11:f9:bd:c0:25:65:05:22:4a:
53:0c:6c:a5:cc:02:f0:8c:86:64:59:4b:ca:a9:d1:1e:20:be:
6d:c6:72:55:71:23:9c:b7:be:c7:8c:98:1e:f4:7e:f2:30:5c:
d2:71:9f:69:db:71:9f:23:2d:1d:35:37:71:ea:0f:6a:ff:cf:
dd:b3:8a:9e:aa:71:16:48:f4:01:84:4c:d1:e2:eb:f4:74:c5:
59:9a:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:12:45 2026 by rpki-client