Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ed52910-2823-38d3-80cc-ab0252a3f8c0.roa
File: 1ed52910-2823-38d3-80cc-ab0252a3f8c0.roa (raw, json)
Hash identifier: 12gFvQ4xqN3ALVnR0ogM75nLnauKBRt+Lwdv56P68JA=
Subject key identifier: B0:76:4C:AB:B6:B9:7F:94:9E:E9:9B:2D:22:CC:BE:36:94:8C:33:7B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C417681D8E117E4074FC4C900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ed52910-2823-38d3-80cc-ab0252a3f8c0.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.20.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Dec 2025 20:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:81:d8:e1:17:e4:07:4f:c4:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=573a6a2e-858b-4080-95b6-6a1f8174b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:77:ea:37:bc:c4:da:af:6b:32:77:a0:3b:
e5:46:d2:e3:d2:c3:d2:47:54:e5:d5:c5:f7:81:50:
7b:b3:49:28:00:3a:40:f8:56:6e:23:6c:e4:a7:72:
33:1e:2b:4c:bc:5d:92:21:8d:93:dd:55:fc:a3:b1:
d1:bf:73:5d:32:dd:98:d2:46:27:54:aa:4b:20:d4:
dc:d8:3f:a8:67:f6:dd:25:65:58:f5:1f:7b:87:56:
2a:8c:2b:a3:9a:e6:7d:12:0c:61:64:d5:fb:37:bc:
7c:be:26:82:5f:5b:aa:2a:f7:e0:b9:ce:b4:c6:14:
2d:88:07:14:4b:4d:97:b2:01:f5:5b:4a:ab:0a:22:
b4:4d:ec:c3:b1:ef:db:2d:84:42:a6:93:9d:8e:eb:
b7:58:a6:b1:1c:a8:a4:19:34:01:26:38:89:8e:df:
0b:c0:eb:0c:6e:1e:e2:d1:b0:fb:f5:2d:ca:64:af:
b2:61:59:d6:e0:cd:09:06:14:9d:f9:2a:c1:ab:9d:
27:bd:ec:ce:8d:f0:ef:11:9f:9f:2a:c8:ef:37:04:
27:19:2e:52:b4:a0:ae:bc:73:17:52:97:d2:d8:d6:
4c:a7:8f:41:46:bb:1a:6c:a3:7b:c0:94:9a:bd:5f:
4c:99:d3:65:c0:d1:bc:40:66:e3:19:15:17:05:5a:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:4C:AB:B6:B9:7F:94:9E:E9:9B:2D:22:CC:BE:36:94:8C:33:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ed52910-2823-38d3-80cc-ab0252a3f8c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:8d:dc:ec:6e:c7:38:31:c0:16:6d:bc:03:74:c0:fb:da:4a:
e3:03:1c:fd:4a:d5:35:97:97:d6:88:53:d9:fe:96:c1:a4:34:
a6:55:27:00:c6:7b:ed:d2:75:35:e5:a2:52:be:89:2d:2b:9d:
fc:f1:b6:da:74:a7:9d:28:25:16:d7:ea:00:24:77:1a:a9:21:
36:ca:e3:2b:ed:69:1b:6a:42:c8:1c:c8:42:4b:e3:01:1e:53:
fa:00:ce:fc:2d:16:d2:85:cd:53:ad:44:fd:0d:25:f4:7c:f3:
46:cc:21:9a:f3:f2:dc:8b:3d:29:11:42:ac:80:80:0b:18:93:
5a:27:62:7a:e1:3b:68:f4:30:33:0a:3d:f1:c5:50:eb:13:fb:
95:46:ed:ac:e4:d3:58:86:eb:dd:db:55:0d:38:2d:5c:5e:0a:
31:43:f1:c7:6c:54:d5:aa:d8:cb:c0:c3:9f:8a:f2:68:a3:66:
19:28:8d:b4:44:59:5f:6d:d9:8c:33:f1:18:1c:a7:25:d9:90:
c9:a9:a8:c7:30:5a:01:4e:84:0e:00:a8:7f:c0:83:5e:b6:f3:
2f:43:df:05:12:ad:97:e1:e8:9f:1c:41:bf:3b:9c:5a:23:3c:
9f:38:35:1e:d3:0c:e0:eb:df:78:7b:aa:2b:bf:db:ef:9c:bf:
5b:3e:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:52:41 2026 by rpki-client