Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/158239e6-d1b1-39af-a4e2-2176950980a0.roa
File: 158239e6-d1b1-39af-a4e2-2176950980a0.roa (raw, json)
Hash identifier: q6Ynxd2IK/l/3NP9pSiUHXXRZsqoNMvdwXmNH/BhD58=
Subject key identifier: 40:74:33:77:87:63:2B:9F:87:1B:AD:43:52:47:1E:27:93:3E:F6:10
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C417681B6BC4C6D96DB32EE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/158239e6-d1b1-39af-a4e2-2176950980a0.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.18.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Dec 2025 20:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:81:b6:bc:4c:6d:96:db:32:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=cf3f325c-961e-4098-823a-dbcdc4e53dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:07:be:99:62:08:eb:e4:c0:3a:57:43:07:
9a:ae:5f:03:18:b4:c1:14:61:9f:4e:e0:02:50:ac:
55:86:22:5a:27:3f:9f:96:32:8b:df:fc:7c:58:b0:
1f:95:66:f8:e0:06:d9:da:47:46:92:e2:de:af:6b:
1d:52:2a:25:74:40:b1:03:bf:0f:0b:23:a8:3c:b3:
0a:36:93:e1:89:c1:45:a4:e1:cd:16:00:47:e1:42:
ad:b7:e3:35:0e:6c:3e:30:0d:b1:e1:d5:97:69:1e:
0e:b7:76:37:c4:d1:ae:56:e0:4b:a6:70:aa:19:79:
0f:25:35:f9:75:5b:80:94:7e:e2:2d:5a:b1:62:3a:
ce:01:4d:d2:73:53:f9:05:fa:42:a1:df:a8:ae:f1:
b8:11:f4:3a:4b:89:7b:6c:8d:81:3b:3e:60:bc:00:
31:59:58:ef:51:1a:ac:6a:af:66:71:74:7e:b2:fc:
85:99:b4:44:23:55:44:02:4d:b6:21:d2:15:68:81:
72:6d:85:a3:e6:57:c4:8b:1f:35:f0:fc:6a:10:12:
8f:5e:a7:e9:8b:59:1a:33:34:bf:10:33:15:9b:71:
15:cf:44:d2:64:a7:a3:39:56:55:42:34:e9:9b:7d:
4f:e9:01:b4:00:90:f9:4b:7f:2d:fe:37:a6:d1:cb:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:33:77:87:63:2B:9F:87:1B:AD:43:52:47:1E:27:93:3E:F6:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/158239e6-d1b1-39af-a4e2-2176950980a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:bf:51:60:09:e9:20:ce:1b:87:24:34:32:4a:33:c3:12:29:
50:77:51:c2:cf:aa:51:1f:62:b6:55:d6:25:33:f4:cc:e6:ae:
52:cd:43:79:8f:e8:6a:82:3b:a8:81:67:e5:34:92:5d:b7:15:
00:af:ee:f1:f2:8f:be:00:71:87:78:0d:69:20:6d:a0:a9:14:
6c:c6:4f:4b:49:d0:ed:39:25:72:9b:88:f2:2d:e0:c1:28:46:
be:77:97:de:79:a3:2e:d2:ef:13:ff:6f:d8:f0:22:61:7f:68:
93:4a:55:c2:78:96:d4:3c:fc:72:ba:4b:20:3b:bf:14:cf:6c:
6e:b3:a3:5d:2f:0a:4b:9d:a2:4d:a1:ee:2b:2a:ff:d8:67:e1:
43:3f:7d:37:d9:67:b0:08:42:30:97:52:37:78:95:5b:41:3f:
07:a8:e7:01:9e:88:a3:16:b7:99:aa:df:7f:e2:86:15:8c:57:
cc:8f:fa:55:57:16:9d:7f:ab:ce:f4:8f:b6:dc:e8:ce:83:4f:
0d:98:44:de:ab:9f:8b:05:81:35:c3:20:43:98:a0:17:be:67:
25:28:e8:53:02:32:09:b3:9e:0c:c3:b7:b4:58:94:83:ac:fa:
ee:6b:65:aa:92:24:02:94:76:93:8f:c4:5f:76:93:8d:40:f8:
b4:8a:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:53:31 2026 by rpki-client