Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
File: d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa (raw, json)
Hash identifier: a7BqIIp0MfkC/ZDYnG8JUq1GD/EDJy7baH6h0ynweiA=
Subject key identifier: D0:D8:DE:7A:3C:03:09:C2:F7:ED:C9:9D:40:B9:FD:B3:43:75:94:3E
Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial: 010D0C9F4328584F2EED1261D23F7D42BFFE6D40
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 43685
IP address blocks: 199.91.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Oct 2026 11:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:12:61:d2:3f:7d:42:bf:fe:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=32e1c8c3-15e1-4dd3-88ea-92b5cc29ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:f2:47:44:20:04:41:38:ec:da:ae:fd:38:
ec:13:04:8d:c3:f7:3d:c3:36:17:81:82:e4:17:20:
1b:0c:d9:25:f3:2b:e6:85:d9:bd:b0:ab:d9:37:f3:
19:9d:c6:ce:11:9e:b1:25:c3:86:6d:21:a4:ff:c0:
9b:ea:9b:a6:7a:1d:ce:d7:c4:1c:8c:3a:81:7b:24:
3a:32:3d:c1:2b:e1:6c:08:13:19:82:bc:43:fd:ed:
92:da:71:ef:1d:8d:fc:72:ab:bb:61:56:84:e2:d6:
28:fe:95:31:fd:39:10:4c:5b:f2:e7:8b:30:c7:3f:
3f:92:e9:bb:48:d7:a2:ec:a8:df:0c:40:ae:bc:dd:
ba:ef:54:d9:2a:b7:c3:b1:59:ef:83:54:85:82:ed:
5c:c3:d4:3a:2e:3b:b5:66:67:61:d5:88:af:5b:9a:
f9:ed:75:bf:c1:2d:37:c8:7d:5b:3e:37:ef:f2:1c:
a6:28:f1:eb:9b:cb:8e:62:6a:c9:14:86:78:d9:c0:
01:85:28:59:d8:bd:3b:6c:1b:5a:92:f7:5c:6b:fb:
a1:e6:16:b7:ba:48:21:72:ba:f7:98:15:39:e4:9a:
8f:ea:cf:dc:76:3c:e5:f5:a8:96:14:95:3d:0f:73:
90:aa:fe:c7:42:62:39:e7:07:d6:e0:7b:81:b4:17:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:DE:7A:3C:03:09:C2:F7:ED:C9:9D:40:B9:FD:B3:43:75:94:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
X509v3 Authority Key Identifier:
keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:fe:9d:bd:bd:f7:bb:0f:79:ee:16:48:1f:aa:6c:dd:28:35:
15:be:b0:72:9a:5a:1b:58:2a:6e:01:03:5d:93:a3:da:ca:19:
b3:b5:37:b9:a5:30:6b:69:b8:48:19:95:49:d2:7f:7a:dd:7f:
11:b0:90:f8:6c:b7:29:17:2c:34:10:c6:be:6f:9c:1b:b5:b0:
0b:62:6b:8a:91:31:85:77:6b:54:ac:2b:83:69:84:05:8a:95:
e2:13:14:f5:03:8f:90:84:a7:7e:ee:b9:87:73:9b:6c:fb:5b:
ed:c0:9c:e3:75:4f:c5:aa:bf:f1:c0:7e:48:d7:ea:15:6d:8e:
69:b6:91:84:8d:7f:7b:d1:28:9b:c1:88:e8:d9:89:ee:90:e3:
83:88:a6:67:6a:53:ce:e3:64:b6:60:7c:cf:1d:5f:f3:10:8e:
12:49:da:e1:54:cf:ae:55:03:68:6d:c0:18:5d:20:b8:5d:a1:
6b:2f:66:7b:4a:30:78:fe:70:86:cc:72:3c:ef:8c:4b:d2:10:
78:a6:ed:4b:ba:4a:73:df:49:c0:9b:90:f7:38:2f:42:6a:8c:
24:56:d1:72:2a:5b:62:03:3a:6d:42:19:52:8b:b3:4e:88:59:
20:68:5e:3b:6c:93:f4:13:cc:d1:7f:74:ff:69:a3:7b:42:ae:
4d:eb:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:44:25 2026 by rpki-client