Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa
File: 1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa (raw, json)
Hash identifier: mUbODQfXlHT++Yj8XgwfHPn8/Y9N/RmClxjDVvwmAP0=
Subject key identifier: 3E:18:CA:BF:23:F6:FB:8D:5E:A2:B4:95:D9:5E:0E:F6:E7:F0:A0:E0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4176848843A5E7554EC7FE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.23.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jan 2026 08:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:84:88:43:a5:e7:55:4e:c7:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=8faaf2b8-6e01-4a7d-b82c-a5a766f72e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:39:3b:6e:ae:df:ed:61:eb:d5:f8:6d:64:
3c:3a:f5:0f:93:bd:f8:ba:3d:49:2b:36:c7:a2:5a:
c5:f4:c8:57:e0:32:08:de:63:af:4e:94:38:3a:19:
57:39:67:fb:f0:08:94:4b:02:e9:d7:7f:ea:90:7d:
b5:b9:40:39:2d:1f:de:99:06:6e:49:14:f5:88:92:
c1:7a:44:34:b2:33:95:05:e2:8d:49:4e:a2:1e:44:
f0:b7:18:f2:01:68:52:5c:19:25:e2:6a:e8:42:59:
c1:d0:d7:12:46:f3:d6:ac:34:f2:9d:d6:21:55:42:
e3:80:d8:8a:3a:eb:7c:94:b0:e9:4c:a4:3f:b8:48:
24:0c:eb:7c:0a:4c:78:03:af:99:cb:83:79:38:ae:
47:94:d9:14:91:2b:62:10:af:2f:01:3d:47:9f:14:
a2:f6:3b:93:45:4d:87:26:26:c3:f1:a8:d2:89:ab:
dd:61:1a:8d:e7:36:93:9c:b0:e3:3e:c9:f2:cc:21:
53:c5:a6:19:bf:01:01:d6:c2:72:b9:24:cd:eb:bf:
1a:7c:bf:cd:7a:1e:96:77:37:75:f3:11:be:f9:2f:
b8:f5:78:59:55:36:d3:ea:05:f2:c1:41:7c:3c:c1:
e1:cf:ea:26:56:d4:a6:e5:69:bd:24:c1:dc:d5:1b:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:18:CA:BF:23:F6:FB:8D:5E:A2:B4:95:D9:5E:0E:F6:E7:F0:A0:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:54:45:3a:65:83:3f:21:c5:a9:60:da:50:e0:c7:96:76:1d:
fd:7e:c3:48:a7:20:65:46:8f:1f:c7:44:89:c8:5b:dd:b0:c7:
ff:9d:8c:5b:38:ea:f6:94:e6:d7:ff:64:3f:84:c6:20:77:67:
36:a5:4f:9a:dc:fc:a4:93:e8:3f:b7:92:30:91:c6:c8:e9:af:
10:23:cb:17:95:84:7e:6c:a6:5d:37:39:68:5a:56:e3:b6:be:
10:b0:56:0f:a7:76:b7:ff:f6:3f:7a:2a:91:31:ee:d5:8b:af:
84:2c:bc:a2:2e:1e:ff:22:ce:1e:43:79:de:d0:5d:cb:bf:20:
1f:0c:18:5e:3b:33:81:b3:b4:7b:23:a0:bc:8a:d7:bf:d3:3a:
59:73:e9:e5:11:c7:5f:80:19:8c:e3:4c:09:31:37:cb:7c:07:
88:22:e8:8e:84:82:7c:cc:31:a7:48:0d:11:02:36:7c:d8:32:
ff:33:0a:2b:50:1b:f0:63:f3:2c:2d:9c:a4:f1:aa:82:57:4d:
09:20:e8:04:4a:76:72:42:62:d3:f2:03:ba:20:51:c0:82:52:
c5:99:31:f5:c7:10:f9:84:c3:26:9b:b9:0c:6e:50:84:e0:76:
d2:53:6a:d5:38:70:02:fd:c1:6e:9f:c0:c9:57:74:91:c2:1e:
1c:61:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:52:40 2026 by rpki-client