Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/3b664665-6354-39d3-bc9e-5b98d6c33af6.roa
File: 3b664665-6354-39d3-bc9e-5b98d6c33af6.roa (raw, json)
Hash identifier: XEkinzfCRHL62Ey8h8hDL0PSxJp7xy63UOIWjAhScOI=
Subject key identifier: A9:C0:56:2F:4F:7C:E6:23:B4:D9:04:3B:2D:CE:51:6A:C7:A4:0D:DE
Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Certificate serial: 010D0C9F4328584F4550B2FF86F831D38891DBC0
Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/3b664665-6354-39d3-bc9e-5b98d6c33af6.roa
Signing time: Wed 23 Sep 2026 13:28:49 +0000
ROA not before: Wed 23 Sep 2026 13:28:49 +0000
ROA not after: Tue 22 Dec 2026 14:28:49 +0000
asID: 0
IP address blocks: 68.68.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 18:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:45:50:b2:ff:86:f8:31:d3:88:91:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Validity
Not Before: Sep 23 13:28:49 2026 GMT
Not After : Dec 22 14:28:49 2026 GMT
Subject: CN=03d36918-5887-4f6e-b670-9faa0f47f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:4e:41:98:46:ee:ce:a7:03:f7:48:b8:40:
0e:31:fd:74:95:68:f1:51:e3:8e:55:50:3a:44:76:
ff:47:9e:33:64:f7:5d:f2:af:4c:a3:6b:30:7f:a8:
a2:ba:4f:71:6c:fe:ed:14:53:68:27:79:f1:59:9a:
1f:de:4e:42:2c:92:50:42:2d:15:2e:84:08:b9:22:
f1:8b:2b:28:32:69:e9:a5:b3:43:05:8f:93:ff:b0:
76:03:41:7e:45:a6:fc:90:30:fa:69:5e:51:7c:93:
5b:92:52:6e:9b:93:2a:95:a4:7c:51:06:ac:ef:e6:
64:f2:34:e6:5c:e3:8f:cf:7b:98:91:1c:a7:9b:49:
a8:80:0c:e7:b3:b1:e3:ce:fd:14:6e:69:35:58:1e:
40:4e:d8:54:ae:c6:99:bd:37:a6:43:5d:31:5b:3b:
d0:92:03:f9:6d:ff:78:30:b3:51:f4:0e:80:22:46:
eb:9f:47:b1:a6:72:8a:f3:fd:5d:8c:4f:9d:94:2f:
f3:f1:3b:3a:d6:8e:83:8a:ef:87:e5:cd:42:1e:4a:
ab:c3:23:94:30:63:4e:f6:7d:e4:de:cc:8e:01:a0:
32:e5:87:7c:92:36:14:ea:ef:e9:80:44:db:68:53:
74:60:ee:8f:22:9c:df:dc:23:ce:17:b5:a7:6a:af:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C0:56:2F:4F:7C:E6:23:B4:D9:04:3B:2D:CE:51:6A:C7:A4:0D:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/3b664665-6354-39d3-bc9e-5b98d6c33af6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl
X509v3 Authority Key Identifier:
keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:ba:11:9b:11:2d:7c:c8:86:bd:43:b9:7b:2e:c9:8a:59:56:
10:82:2c:8a:00:a6:6f:b5:5c:49:64:dc:73:4d:dc:eb:a1:b1:
26:e8:5b:ec:61:9e:b5:81:7c:05:eb:76:62:87:58:b4:ab:f9:
95:7a:8d:89:6f:22:9c:28:39:d9:2d:cc:2b:af:cb:2f:31:e0:
1f:0e:bf:74:75:d5:d7:4e:31:c4:86:5e:f7:dd:a6:b0:45:06:
cb:79:98:9b:df:67:dd:8a:dd:b4:e1:be:14:24:97:7a:93:91:
98:e0:94:c4:a7:b6:01:c2:fa:f4:3c:a1:30:71:af:b5:65:46:
a9:fb:7d:85:3a:1c:58:61:cd:39:c0:ea:d1:56:2d:85:b7:67:
4a:6d:56:4f:7f:bf:95:0c:30:f2:73:7c:44:15:90:a8:2a:8e:
26:b0:ad:d6:d9:40:6d:fb:f1:57:d2:78:87:d2:6f:4a:f6:bc:
73:71:fe:6f:59:49:94:7e:34:1c:df:c6:15:ee:f1:51:f8:1f:
52:08:d3:02:9c:2f:5d:22:92:27:50:ff:cb:81:37:53:64:30:
cc:2d:bd:2a:ac:15:29:b0:8e:a5:63:4b:8e:bb:68:f3:95:b8:
df:be:93:cf:48:43:c5:eb:ad:70:e6:39:c8:17:ee:ad:01:89:
8a:87:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:28 2026 by rpki-client