Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5e57c8b0-3581-3b31-ac54-1d3e89781710.roa
File: 5e57c8b0-3581-3b31-ac54-1d3e89781710.roa (raw, json)
Hash identifier: EFU4veDn6gcA2qp6bJ53l49FgpO8dWSwz7MaMWtz0yE=
Subject key identifier: D4:74:2B:1E:97:8C:67:A4:3C:05:88:16:BF:24:A5:A7:14:92:35:8D
Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial: 010D0C9F4328584F2ABD06ED8545D3E7549BBFC0
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5e57c8b0-3581-3b31-ac54-1d3e89781710.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 213257
IP address blocks: 209.191.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 18:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:06:ed:85:45:d3:e7:54:9b:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=d6f9537a-9df1-4871-a585-de0f0360bcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:6f:c5:aa:14:0d:5c:7e:dd:cd:6e:37:69:
e6:23:08:67:3e:1a:24:23:17:15:86:9c:c8:8d:85:
9c:b7:a0:ce:87:57:9b:c5:e8:91:9d:82:35:bf:54:
d4:6f:3c:4f:2a:c2:93:3a:5c:29:30:90:eb:a4:f1:
40:31:49:60:d3:30:18:74:05:2b:13:f6:d9:4e:40:
a7:56:a7:f8:01:a6:3c:69:4b:10:c7:ca:55:a1:b8:
e6:91:b0:55:97:73:08:44:bb:51:9c:bb:ce:81:c7:
11:99:a1:bb:2b:17:39:5d:72:0e:58:77:94:62:60:
b4:99:c5:ab:d1:0d:bd:2b:99:27:fd:d4:17:9a:1d:
a7:93:26:d0:d5:a4:fb:88:5a:62:75:33:aa:4c:c5:
be:90:31:5c:33:bc:ac:5b:a7:f5:67:87:c7:ca:6c:
8c:cf:9d:77:75:a9:80:3a:6c:d3:51:16:ad:6b:4a:
d6:83:11:a9:6d:55:31:7e:ae:73:ab:b1:a2:6a:6f:
10:40:d8:6c:d3:22:33:8a:b2:65:40:79:00:cb:b2:
e7:82:10:af:dc:4d:63:39:ec:c9:7c:b6:be:72:80:
92:f9:e4:25:40:61:50:02:4c:34:0b:49:0c:f8:ce:
47:54:68:76:c5:f5:16:f8:0c:e5:29:ed:aa:65:b0:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:2B:1E:97:8C:67:A4:3C:05:88:16:BF:24:A5:A7:14:92:35:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/5e57c8b0-3581-3b31-ac54-1d3e89781710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
X509v3 Authority Key Identifier:
keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
sbgp-ipAddrBlock: critical
IPv4:
209.191.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:0b:92:19:10:e2:1a:2a:a4:47:af:ad:75:d4:be:7f:45:0d:
27:21:ab:b8:47:21:7e:14:81:57:3c:6b:aa:a6:da:83:99:95:
79:9b:81:6a:35:91:98:8e:b7:d5:55:09:b6:1a:9a:38:f6:4d:
7f:24:4c:19:5d:15:af:ad:04:29:61:94:7f:13:8b:7e:50:6c:
34:7a:c3:85:a0:7b:99:41:20:fa:0a:f3:85:2f:c4:8b:aa:43:
6b:70:bc:ea:09:a4:8f:0e:96:b2:56:3f:86:3f:68:ed:30:a5:
b9:ec:9d:68:d8:d4:83:10:2f:f2:9f:a4:e8:a1:80:73:d6:83:
98:63:5b:9c:68:ce:9f:92:a1:70:9f:e6:d5:1d:c2:ce:fe:a0:
62:4e:ed:4d:a7:37:8f:7e:71:58:df:b3:16:ca:fa:ae:58:f2:
95:a9:bb:8e:16:1a:52:e9:48:fd:6f:24:bb:8d:05:e9:d1:0e:
8c:5c:81:5b:35:df:fc:ef:42:aa:2f:3a:f2:d7:45:4c:27:f2:
a8:56:cb:b9:11:9b:23:b8:03:46:69:a8:6a:c5:b4:c0:4c:f1:
90:10:2c:58:19:4b:3a:ed:1b:5b:20:33:d9:f3:d8:75:4e:13:
b5:1a:11:a0:45:dc:f5:bf:d6:c3:f8:13:50:70:51:ab:2e:a4:
6d:f3:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:05 2026 by rpki-client