Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3136302e302f31392d3234203d3e20383334.roa
File: 3139392e3233352e3136302e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: u0ux7Vpk24YXqWlkLkneDr12eoGLASDHMriIxRORlJE=
Subject key identifier: 3F:C4:17:EA:CD:12:25:3A:C6:95:DA:A7:08:C7:4E:6F:61:26:EF:F7
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 3F2285F027BD211C44C8D2F67BEB63484721BAB7
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3136302e302f31392d3234203d3e20383334.roa
Signing time: Sun 27 Sep 2026 07:33:31 +0000
ROA not before: Sun 27 Sep 2026 07:28:31 +0000
ROA not after: Sun 26 Sep 2027 07:33:31 +0000
asID: 834
IP address blocks: 199.235.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Oct 2026 12:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:22:85:f0:27:bd:21:1c:44:c8:d2:f6:7b:eb:63:48:47:21:ba:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Sep 27 07:28:31 2026 GMT
Not After : Sep 26 07:33:31 2027 GMT
Subject: CN=3FC417EACD12253AC695DAA708C74E6F6126EFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:02:62:84:7b:aa:01:41:38:3e:40:5e:e9:
e8:df:65:01:f6:f7:94:4b:be:25:13:1b:9c:ef:21:
d7:33:a3:bf:fc:b4:2d:73:8f:16:4f:e1:9f:b0:7c:
4f:86:09:79:16:5c:6e:90:c2:97:a8:76:47:41:fa:
fd:ab:a4:1c:cf:22:29:fe:5a:d0:9b:6a:4b:63:10:
96:5f:ac:75:5b:20:34:03:29:3a:aa:f9:f7:70:6d:
e7:35:bf:e7:6c:b1:d9:59:20:2c:40:04:31:94:c0:
77:72:e7:ac:d6:5a:eb:b7:4b:69:82:be:83:64:1f:
76:25:4c:bc:cd:b1:64:c9:ae:a6:15:c5:77:76:58:
cd:14:fb:d5:67:e8:89:e9:51:31:6f:4b:c7:09:a2:
46:c0:34:ed:64:db:4b:b6:74:18:1c:02:bc:8b:e7:
7a:64:8c:6b:bd:4d:0f:73:d9:39:eb:c4:a2:81:5c:
eb:9f:e8:6b:8d:9f:2a:49:88:18:59:6c:b6:e6:48:
50:50:e8:d7:93:1e:bd:51:e3:6a:d7:34:eb:0c:96:
16:95:39:53:62:08:1f:03:04:65:49:c3:f1:d5:a8:
ff:e5:ad:30:da:a5:00:66:3f:6d:3b:7e:37:cd:58:
fc:11:4e:82:26:82:ac:fe:c1:7f:8c:1e:9c:78:d6:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:17:EA:CD:12:25:3A:C6:95:DA:A7:08:C7:4E:6F:61:26:EF:F7
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3136302e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.160.0/19
Signature Algorithm: sha256WithRSAEncryption
d0:34:e7:f1:cb:b0:b1:49:2f:1e:5e:c2:fc:00:4f:a4:37:9c:
43:ff:7e:3e:b7:e9:be:d0:4d:fe:ca:74:75:dd:fe:2c:4f:8f:
e4:39:95:b5:a7:0d:4a:ad:9b:85:74:cb:d2:31:b0:ed:4e:5d:
37:c7:ef:3a:a3:f0:bb:2a:c2:6e:87:0a:83:50:28:65:01:64:
78:e9:55:9d:c0:89:0a:ac:38:01:c4:32:29:97:e7:12:e3:87:
a5:46:cb:5b:7a:7c:31:e3:17:de:21:f4:b8:86:c0:c5:e8:bd:
94:7c:da:87:53:8a:e0:cf:bf:a5:1b:a1:87:48:6b:f5:89:76:
be:d2:9b:ee:18:7c:e1:c7:e7:e1:56:ad:30:9e:f3:f2:6b:ca:
08:cc:af:25:8d:7f:85:6a:7a:ee:ed:10:46:94:e9:d4:70:25:
24:38:e8:97:5b:6a:b1:b0:42:a1:31:14:6a:c1:17:67:01:6d:
ef:3f:79:31:40:fb:05:e9:53:ec:0a:bd:e2:cb:eb:fd:7f:4a:
1f:76:ef:18:0b:0f:cd:e6:04:6f:fd:33:39:ad:55:a0:8b:c6:
f9:16:35:7d:95:39:65:0d:4e:62:e2:57:8f:5d:8a:ef:27:d1:
6b:c9:44:6c:46:49:97:8d:88:20:96:ef:15:86:cf:71:99:53:
58:2c:37:27
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUPyKF8Ce9IRxEyNL2e+tjSEchurcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTI3MDcyODMxWhcNMjcwOTI2MDczMzMx
WjAzMTEwLwYDVQQDEygzRkM0MTdFQUNEMTIyNTNBQzY5NURBQTcwOEM3NEU2RjYx
MjZFRkY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0UCYoR7qgFB
OD5AXuno32UB9veUS74lExuc7yHXM6O//LQtc48WT+GfsHxPhgl5FlxukMKXqHZH
Qfr9q6QczyIp/lrQm2pLYxCWX6x1WyA0Ayk6qvn3cG3nNb/nbLHZWSAsQAQxlMB3
cues1lrrt0tpgr6DZB92JUy8zbFkya6mFcV3dljNFPvVZ+iJ6VExb0vHCaJGwDTt
ZNtLtnQYHAK8i+d6ZIxrvU0Pc9k568SigVzrn+hrjZ8qSYgYWWy25khQUOjXkx69
UeNq1zTrDJYWlTlTYggfAwRlScPx1aj/5a0w2qUAZj9tO343zVj8EU6CJoKs/sF/
jB6ceNZd7wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFD/EF+rNEiU6xpXapwjHTm9h
Ju/3MB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTM2MzAyZTMwMmYzMTM5MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXH66AwDQYJKoZIhvcNAQELBQAD
ggEBANA05/HLsLFJLx5ewvwAT6Q3nEP/fj636b7QTf7KdHXd/ixPj+Q5lbWnDUqt
m4V0y9IxsO1OXTfH7zqj8Lsqwm6HCoNQKGUBZHjpVZ3AiQqsOAHEMimX5xLjh6VG
y1t6fDHjF94h9LiGwMXovZR82odTiuDPv6UboYdIa/WJdr7Sm+4YfOHH5+FWrTCe
8/JrygjMryWNf4Vqeu7tEEaU6dRwJSQ46JdbarGwQqExFGrBF2cBbe8/eTFA+wXp
U+wKveLL6/1/Sh927xgLD83mBG/9MzmtVaCLxvkWNX2VOWUNTmLiV49diu8n0WvJ
RGxGSZeNiCCW7xWGz3GZU1gsNyc=
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:23 2026 by rpki-client