Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/625871ee-8e0c-369e-9613-3dba49598174.roa
File: 625871ee-8e0c-369e-9613-3dba49598174.roa (raw, json)
Hash identifier: Nwufkj0NCpxd/cKAtl9gmGcJLpfmbM7q2ojcCwrQZBM=
Subject key identifier: BD:03:61:B1:A7:C7:8E:F2:69:EA:6D:58:DA:0B:0E:83:14:E5:DF:7F
Certificate issuer: /CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
Certificate serial: 010D0C9F4328584F85784A6A258413FE6DC9C388
Authority key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/625871ee-8e0c-369e-9613-3dba49598174.roa
Signing time: Fri 16 Oct 2026 13:00:12 +0000
ROA not before: Fri 16 Oct 2026 13:00:12 +0000
ROA not after: Thu 14 Jan 2027 14:00:12 +0000
asID: 396982
IP address blocks: 167.254.176.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:85:78:4a:6a:25:84:13:fe:6d:c9:c3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
Validity
Not Before: Oct 16 13:00:12 2026 GMT
Not After : Jan 14 14:00:12 2027 GMT
Subject: CN=a10fb51a-1883-44a2-8af1-5b7a39bc1dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:d1:7b:bc:16:91:ac:eb:26:a4:c4:fe:16:
e3:ce:a7:c7:93:62:87:6e:5c:84:4c:c4:52:a0:72:
c6:fd:74:5f:d6:e7:e8:65:8c:ac:ac:af:bd:f4:3b:
67:7c:88:1c:16:41:6e:fa:3d:f6:e3:82:81:bb:80:
f1:94:0a:39:52:98:2f:4c:1d:20:6f:0f:65:ea:cc:
fe:43:5d:8f:f0:ce:ab:6b:6b:e8:d8:b2:25:ec:ce:
20:d9:c9:36:5e:0c:bd:95:f4:12:9c:66:72:a4:79:
5a:d4:43:32:77:94:38:30:8e:75:ae:de:e3:96:2f:
cc:30:a2:9b:82:be:17:b8:c3:26:39:94:ec:0c:b3:
df:b0:35:36:bd:32:4c:09:23:ff:3a:a9:83:13:0f:
a8:d8:46:d1:7a:61:ae:08:67:9b:2b:8b:b1:ea:f6:
e5:a8:ad:d3:5c:65:18:bc:06:7d:f8:ec:3f:85:fc:
9c:c1:33:63:18:60:dc:22:70:15:fd:e8:3c:75:f5:
21:6d:6b:8e:ba:db:97:91:06:7d:6e:4e:fd:90:63:
6b:14:4e:09:d9:18:f8:7f:5d:86:7e:e8:b4:0b:02:
48:0e:e9:1c:f8:4e:1c:36:28:27:06:a3:d5:13:84:
dd:80:a7:78:e0:4c:99:89:04:82:4b:37:a3:c2:0b:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:03:61:B1:A7:C7:8E:F2:69:EA:6D:58:DA:0B:0E:83:14:E5:DF:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/625871ee-8e0c-369e-9613-3dba49598174.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl
X509v3 Authority Key Identifier:
keyid:4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
sbgp-ipAddrBlock: critical
IPv4:
167.254.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a0:f6:61:c7:af:10:13:67:75:a1:a6:85:06:6d:30:06:c8:
0c:fb:1f:ea:39:2a:37:e1:f2:2c:43:24:b4:70:dd:ca:3d:8e:
32:5b:ff:ac:52:a7:f4:cb:ab:7e:3d:1f:7c:72:07:51:c8:e8:
08:32:de:03:fc:5a:3a:3f:1b:dc:65:66:22:91:fa:d1:b0:a3:
f3:00:46:5f:54:3a:9c:35:e2:b6:5f:5e:bc:09:52:d0:ef:ff:
0b:50:39:14:38:e6:20:50:b7:11:6c:4a:c1:96:9a:1d:0e:5b:
2b:d4:9e:81:a6:fc:8f:36:2a:51:e4:78:9f:20:01:1d:5a:83:
3d:85:f4:85:1f:e4:ee:b4:b8:b1:18:90:2c:fc:0b:d6:07:98:
0b:84:8f:e2:f0:38:45:58:f6:b8:c7:20:be:44:f8:09:f7:2e:
90:90:55:33:f3:20:2f:96:79:59:74:8c:9d:05:8c:a1:54:6f:
10:af:b7:08:a2:56:45:82:b2:a7:68:de:8a:d6:5c:2e:eb:a7:
17:0f:6d:df:cf:b5:1f:88:9e:42:60:03:b6:e8:d7:13:df:a8:
3f:d8:9c:14:63:72:4d:82:91:ea:e6:c4:75:d1:12:6c:3b:f3:
cd:08:b7:2d:57:7d:2f:cd:93:be:f4:65:16:a7:29:90:b5:d3:
38:fc:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:58 2026 by rpki-client