Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/652dc436-d851-3a10-b979-407e1f131d40.roa
File: 652dc436-d851-3a10-b979-407e1f131d40.roa (raw, json)
Hash identifier: DH1n3IUcYE5XEKSvM9bCZol24C46nnM9PfiL77cw7uU=
Subject key identifier: D8:97:3B:BF:9C:6D:AF:7A:DB:EA:AB:3F:4E:60:40:13:C4:5F:82:4F
Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial: 010D0C9F4328584F2ABD0725E544E5127F5AB300
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/652dc436-d851-3a10-b979-407e1f131d40.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 213257
IP address blocks: 64.95.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 18:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:07:25:e5:44:e5:12:7f:5a:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=c4b57dcd-1c8a-462c-8c13-5d70c20b6232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:e5:1d:fa:c5:fd:6f:1a:1f:fd:35:2e:62:
30:fc:2a:d2:65:60:9e:eb:60:0b:00:50:ee:37:4f:
c2:51:9d:05:1c:fe:68:4a:21:74:ca:5a:f2:d2:8c:
8b:5c:0a:9f:6f:48:47:f1:7b:b0:98:38:1d:d1:8b:
e5:26:01:bc:05:93:29:fa:c1:b8:d3:c7:cb:1e:c5:
a6:3f:86:85:f3:a5:f3:ac:c6:f9:a3:53:d2:79:ec:
fd:de:3e:d5:89:b9:38:25:5c:6e:3e:7a:2c:3b:a7:
3a:90:11:41:f0:fa:b7:0a:36:4b:59:32:bb:bd:44:
b5:23:11:26:48:23:2a:6c:27:6d:21:11:42:ac:fd:
41:76:0a:d5:6a:f2:d4:72:cb:32:61:ff:ba:e9:fd:
64:d0:07:ef:01:71:c6:27:91:a4:4f:26:cc:56:8a:
6a:a5:e8:d4:0a:4a:cc:e8:5a:5f:92:33:59:90:bc:
d0:ba:e7:40:5b:f7:09:05:75:4d:19:a2:11:c3:3c:
12:fd:ae:e7:61:1f:d0:72:a7:34:c0:3d:7c:dc:db:
36:11:3b:b9:1e:95:be:75:24:ae:1b:ac:d0:8a:98:
63:4f:ee:f9:0d:a5:6f:15:55:e6:ac:33:fc:8a:3e:
d2:c5:d7:f5:ee:1b:9d:45:0d:3b:22:9c:51:f8:02:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:3B:BF:9C:6D:AF:7A:DB:EA:AB:3F:4E:60:40:13:C4:5F:82:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/652dc436-d851-3a10-b979-407e1f131d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
X509v3 Authority Key Identifier:
keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:08:b7:bc:2e:df:26:ac:7c:e8:11:ca:5a:ed:be:ff:33:88:
c3:d8:51:98:f0:86:9c:4c:cc:8d:b4:99:15:12:4f:d3:96:3d:
30:6a:22:d5:f6:75:57:82:f1:64:33:e9:75:a5:97:ea:80:09:
fd:dd:38:12:03:e4:01:72:88:37:ae:ee:f5:0f:5f:7b:f2:89:
c4:e7:1d:01:23:4b:f8:5f:bc:d7:98:88:0a:a3:70:b6:b7:4a:
82:fa:2a:15:2f:41:f9:3c:54:cd:44:4b:7e:2f:69:ee:67:1c:
ea:07:83:56:49:5e:37:7d:22:e3:b9:5f:3d:7d:44:8f:2a:ad:
f1:f2:f2:ea:39:59:48:6b:7f:36:d5:8e:1a:a9:81:0c:d6:46:
52:72:68:46:9a:53:a7:9f:95:0b:17:f4:9c:b9:70:61:e9:1e:
4b:48:e4:21:db:3d:51:0b:e5:2d:06:68:f7:93:a6:9c:49:20:
a7:56:78:cb:17:91:b6:3a:1f:e5:73:d6:1c:b2:7a:46:51:a0:
91:80:cb:26:af:d9:ec:c9:5f:54:d3:7d:14:20:14:9a:cb:3b:
d1:76:67:37:9e:bb:ea:56:fe:4b:ba:e7:0e:c6:c2:26:7d:0c:
cf:a2:93:db:7f:6e:df:d7:e7:45:1f:d3:ba:3b:89:b1:ae:d6:
4d:dc:80:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQcl5UTlEn9aswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni
M2U4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
YzRiNTdkY2QtMWM4YS00NjJjLThjMTMtNWQ3MGMyMGI2MjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggLlHfrF/W8aH/01LmIw/CrSZWCe62ALAFDu
N0/CUZ0FHP5oSiF0ylry0oyLXAqfb0hH8XuwmDgd0YvlJgG8BZMp+sG408fLHsWm
P4aF86XzrMb5o1PSeez93j7Vibk4JVxuPnosO6c6kBFB8Pq3CjZLWTK7vUS1IxEm
SCMqbCdtIRFCrP1BdgrVavLUcssyYf+66f1k0AfvAXHGJ5GkTybMVopqpejUCkrM
6FpfkjNZkLzQuudAW/cJBXVNGaIRwzwS/a7nYR/Qcqc0wD183Ns2ETu5HpW+dSSu
G6zQiphjT+75DaVvFVXmrDP8ij7Sxdf17hudRQ07IpxR+AKjkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiXO7+cba962+qrP05gQBPEX4JPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1
YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvNjUyZGM0MzYtZDg1MS0z
YTEwLWI5NzktNDA3ZTFmMTMxZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5
MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj
YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm
OWQ3Y2IzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEIt7wu3yasfOgRylrtvv8ziMPYUZjwhpxMzI20mRUST9OWPTBqItX2
dVeC8WQz6XWll+qACf3dOBID5AFyiDeu7vUPX3vyicTnHQEjS/hfvNeYiAqjcLa3
SoL6KhUvQfk8VM1ES34vae5nHOoHg1ZJXjd9IuO5Xz19RI8qrfHy8uo5WUhrfzbV
jhqpgQzWRlJyaEaaU6eflQsX9Jy5cGHpHktI5CHbPVEL5S0GaPeTppxJIKdWeMsX
kbY6H+Vz1hyyekZRoJGAyyav2ezJX1TTfRQgFJrLO9F2Zzeeu+pW/ku65w7GwiZ9
DM+ik9t/bt/X50Uf07o7ibGu1k3cgLQ=
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:34:18 2026 by rpki-client