Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/37d056a6-4d28-31df-99ee-7caea6c07b9d.roa
File: 37d056a6-4d28-31df-99ee-7caea6c07b9d.roa (raw, json)
Hash identifier: mxrg326H2IBveHvRyZKZCCWXJEPf7hViYckviVsTYkM=
Subject key identifier: BC:17:D5:38:3B:D5:37:79:EE:74:9A:85:4F:CA:88:AE:0B:78:D2:37
Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial: 010D0C9F4328584F2ABD07432D87A19DA9073800
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/37d056a6-4d28-31df-99ee-7caea6c07b9d.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 213257
IP address blocks: 64.74.118.0/24 maxlen: 24
64.95.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 18:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:07:43:2d:87:a1:9d:a9:07:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=0a21d324-6c9f-4014-a522-d674c9783dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:61:78:42:81:4e:57:eb:ad:2b:4a:4c:92:
09:a8:6d:6c:dd:5a:0c:0d:36:52:24:45:66:c5:05:
6c:b2:0a:60:21:99:e1:e2:e8:b2:cd:0e:a8:a7:98:
43:87:e6:d5:e8:b7:e4:10:b6:77:d2:be:65:f4:1f:
95:b8:23:90:1c:4b:b3:f0:e3:44:65:7e:1d:db:3b:
ea:47:b3:44:e6:cf:da:e8:fc:1b:4b:30:d1:78:2c:
7c:41:fb:09:dd:97:ac:09:7b:59:9a:15:7d:00:d5:
c0:9c:99:d5:18:39:2a:79:7b:ed:2e:87:c5:10:8b:
98:3b:16:cd:15:03:30:8f:ba:5b:d4:0a:3c:a8:48:
02:e6:15:8c:4f:85:c1:5a:40:b3:ef:35:d3:03:8c:
0c:cc:be:a2:90:bd:61:43:1f:eb:2d:16:e7:09:24:
3e:71:e0:17:46:32:e5:ba:b1:b8:c5:24:90:67:a2:
43:24:04:1a:13:24:e7:9e:b4:5a:43:fc:08:f8:33:
29:60:e8:57:f4:22:51:d2:92:fa:3b:3a:4b:11:2c:
72:61:e2:02:9a:01:6f:13:37:8b:24:5f:5a:8d:c1:
28:68:c7:43:74:56:cb:39:26:b5:dd:45:ae:33:3e:
45:d3:4f:21:b5:a3:91:5a:37:f8:8a:38:0c:09:ea:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:D5:38:3B:D5:37:79:EE:74:9A:85:4F:CA:88:AE:0B:78:D2:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/37d056a6-4d28-31df-99ee-7caea6c07b9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
X509v3 Authority Key Identifier:
keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.74.118.0/24
64.95.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:02:4d:b6:ba:1c:aa:ee:bc:fd:8a:64:bd:47:ed:38:af:4a:
2c:bf:94:9c:14:fb:cb:3d:c9:4e:9c:2a:58:eb:e5:73:c6:b9:
f6:ff:98:20:1d:d4:4d:cd:a9:e1:f7:23:56:6d:1f:0c:a6:9c:
cc:4e:3e:b3:8e:15:eb:67:96:82:61:0f:fc:55:1a:93:39:4a:
a3:f6:4a:85:5b:0e:da:26:e9:0f:12:93:2d:c5:1e:27:52:33:
d9:63:ae:3d:d2:4c:01:32:8d:e4:d0:cf:34:b7:94:f3:cb:b8:
65:da:d3:b1:93:c1:bc:a9:44:a2:92:f9:3c:ba:20:00:cd:48:
1a:74:1a:9b:4b:7c:57:51:41:3d:ae:5e:45:7b:37:92:60:77:
5b:6d:70:65:1c:1c:64:c0:29:2f:b6:75:36:a8:72:f6:37:de:
0a:6e:58:14:b6:a7:83:e2:8e:6a:88:3f:87:b7:98:33:1b:2c:
f0:d7:87:e5:c5:e5:9d:52:f6:f3:19:60:1c:9b:19:03:b3:25:
53:4c:04:4f:94:de:b7:e8:4c:3e:a5:fc:20:a0:71:2b:99:69:
63:62:a1:79:bc:c3:dd:f6:da:eb:bc:8e:8d:98:95:10:87:98:
38:f4:16:7b:69:ad:3d:b5:1f:eb:30:18:d0:93:1e:1d:29:c5:
2e:e9:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:19:05 2026 by rpki-client