Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203136353039.roa
File: 3139392e3233312e36362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: QY7gyPxgx61Ws+2oOxq1UFfzaBqg3xmrLnVL8QD/f2o=
Subject key identifier: 07:2A:E7:3C:F8:27:B2:53:D7:B5:9D:69:30:C1:70:39:0B:37:35:80
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 71CD45DE55D6EC192F1B553D9B0ED28D1459A6BE
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203136353039.roa
Signing time: Thu 15 Jan 2026 07:50:46 +0000
ROA not before: Thu 15 Jan 2026 07:45:46 +0000
ROA not after: Thu 14 Jan 2027 07:50:46 +0000
asID: 16509
IP address blocks: 199.231.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Feb 2026 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cd:45:de:55:d6:ec:19:2f:1b:55:3d:9b:0e:d2:8d:14:59:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Jan 15 07:45:46 2026 GMT
Not After : Jan 14 07:50:46 2027 GMT
Subject: CN=072AE73CF827B253D7B59D6930C170390B373580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:32:66:f1:c1:61:c8:22:c4:52:9f:d5:48:
46:5c:4c:65:a8:b4:55:ce:4e:dd:97:39:0a:31:06:
57:e2:78:54:68:79:95:23:3e:78:ef:43:1d:ce:2e:
40:e8:af:1a:7c:a3:23:85:b3:38:64:df:82:67:c0:
a5:95:f4:bd:d0:63:ff:5a:f7:05:75:06:87:a6:87:
9c:47:c3:6e:fd:5c:64:04:d7:0b:3c:d5:ff:88:d7:
35:25:9b:4c:50:1f:dc:6b:1c:b5:3f:85:a3:7b:d3:
b1:3e:5a:a0:1f:72:70:fd:7c:58:dd:d8:bc:11:de:
9a:a5:32:5d:af:33:50:b8:58:8c:ff:a6:e2:71:66:
bc:69:12:7a:f5:be:5a:e2:b0:d7:2c:7d:d3:c7:33:
dc:33:d6:a0:e2:11:eb:3b:38:58:e5:74:aa:3b:1d:
1e:01:cd:f4:c4:5a:ab:90:16:32:1d:c3:69:22:1b:
8f:8a:c1:94:66:c4:4d:46:95:7a:b4:36:a7:80:d3:
01:b2:16:5e:9f:a6:ca:d6:c9:63:a2:94:37:e5:a5:
0e:ad:c7:bf:00:72:ca:e9:18:fd:06:28:0c:a9:cf:
a3:fb:9d:17:8d:65:fd:88:ae:60:82:67:c6:51:a1:
be:2e:ed:a6:b8:95:77:70:14:47:64:c0:ab:00:8c:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:E7:3C:F8:27:B2:53:D7:B5:9D:69:30:C1:70:39:0B:37:35:80
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fb:a0:c2:5e:37:fa:bd:91:1d:b5:3a:2b:f7:58:1a:b0:9b:
e2:5f:c9:0e:73:d0:1d:5f:29:5a:ce:6f:8f:bc:dc:1b:9c:af:
9b:0e:2f:00:fc:9b:24:36:a9:0e:84:99:b6:53:24:da:3f:e4:
32:95:49:85:19:13:72:cd:8d:c3:26:64:85:d0:83:29:f5:ff:
ed:f9:49:57:c3:2b:34:5f:1c:1f:a7:05:64:3c:d6:6e:4d:51:
3b:30:3f:78:68:a4:98:cd:23:8d:63:ae:43:59:e7:bf:a3:d6:
b0:e0:de:75:65:ec:7d:1d:bc:ed:02:39:74:6e:f4:8f:e9:6b:
d2:1e:91:99:ef:f6:73:90:31:d5:03:98:d8:c7:41:bc:b6:04:
2a:70:1c:c5:60:59:71:88:88:b1:75:5c:f1:f5:b1:16:5e:3f:
8d:c2:4f:15:0a:5d:e9:1a:f9:50:77:85:6a:75:d8:1b:4b:7e:
83:cb:77:00:e1:50:0d:c1:55:cf:e8:66:e3:08:e0:9e:08:98:
c2:d6:0f:ed:d9:63:2e:00:94:77:51:7a:91:ad:1d:23:9d:cc:
1d:03:8e:b7:11:8b:7b:a4:5d:98:2f:13:e5:27:cc:cd:64:8b:
d3:86:f9:f3:05:2d:e5:b4:99:0c:d1:48:51:16:83:1d:5a:f3:
0d:a9:69:1d
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUcc1F3lXW7BkvG1U9mw7SjRRZpr4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwMTE1MDc0NTQ2WhcNMjcwMTE0MDc1MDQ2
WjAzMTEwLwYDVQQDEygwNzJBRTczQ0Y4MjdCMjUzRDdCNTlENjkzMEMxNzAzOTBC
MzczNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCYyZvHBYcgi
xFKf1UhGXExlqLRVzk7dlzkKMQZX4nhUaHmVIz5470Mdzi5A6K8afKMjhbM4ZN+C
Z8CllfS90GP/WvcFdQaHpoecR8Nu/VxkBNcLPNX/iNc1JZtMUB/caxy1P4Wje9Ox
PlqgH3Jw/XxY3di8Ed6apTJdrzNQuFiM/6bicWa8aRJ69b5a4rDXLH3TxzPcM9ag
4hHrOzhY5XSqOx0eAc30xFqrkBYyHcNpIhuPisGUZsRNRpV6tDangNMBshZen6bK
1sljopQ35aUOrce/AHLK6Rj9BigMqc+j+50XjWX9iK5ggmfGUaG+Lu2muJV3cBRH
ZMCrAIyfbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAcq5zz4J7JT17WdaTDBcDkL
NzWAMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMfnQjANBgkqhkiG9w0BAQsF
AAOCAQEAr/ugwl43+r2RHbU6K/dYGrCb4l/JDnPQHV8pWs5vj7zcG5yvmw4vAPyb
JDapDoSZtlMk2j/kMpVJhRkTcs2NwyZkhdCDKfX/7flJV8MrNF8cH6cFZDzWbk1R
OzA/eGikmM0jjWOuQ1nnv6PWsODedWXsfR287QI5dG70j+lr0h6Rme/2c5Ax1QOY
2MdBvLYEKnAcxWBZcYiIsXVc8fWxFl4/jcJPFQpd6Rr5UHeFanXYG0t+g8t3AOFQ
DcFVz+hm4wjgngiYwtYP7dljLgCUd1F6ka0dI53MHQOOtxGLe6RdmC8T5SfMzWSL
04b58wUt5bSZDNFIURaDHVrzDalpHQ==
-----END CERTIFICATE-----
Generated at Tue Mar 17 10:31:49 2026 by rpki-client