Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c5605c7-be29-33d8-bebd-01a1c3646a7f.roa
File: 3c5605c7-be29-33d8-bebd-01a1c3646a7f.roa (raw, json)
Hash identifier: bD1MczYFIhTs1jHPO01GpIVFMsQl55FC3oJOA1ENSRY=
Subject key identifier: 8F:F8:84:09:80:A8:F9:B9:F7:EF:9A:E5:B4:F9:2F:5F:E9:81:5D:4C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C417681844E4420710EF99F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c5605c7-be29-33d8-bebd-01a1c3646a7f.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.17.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Dec 2025 20:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:81:84:4e:44:20:71:0e:f9:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=9539778d-073d-49ef-a2ff-3211293d4174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:79:7f:2e:59:52:60:0e:ac:e2:4a:28:b9:
13:87:86:be:5c:f4:41:bb:33:20:63:cf:2d:67:15:
3c:02:34:45:7a:2d:a5:1b:a3:63:01:11:ef:a2:4b:
9d:2e:1c:96:99:25:1f:a3:54:88:43:44:13:b9:65:
51:be:3e:f5:e1:fc:8c:27:b1:b8:d9:04:29:96:0b:
d1:69:1b:43:89:51:fe:1c:c4:57:d7:2a:6a:68:4f:
81:af:d3:fe:37:54:a8:85:51:04:67:12:47:64:99:
a6:d0:71:c1:ad:d8:b5:3c:30:f3:88:65:45:78:42:
24:e6:14:dc:93:a7:e9:05:ab:50:a4:81:16:c7:3a:
a6:4e:2d:0d:0b:9e:71:77:d9:c5:00:d7:56:74:75:
7e:71:4b:b7:80:37:76:89:27:b3:0c:ae:38:bf:d9:
44:b1:6f:59:79:a2:f2:b3:9c:42:04:83:0e:aa:57:
a7:43:6f:9d:ce:c1:41:47:bf:4a:45:61:a7:77:3d:
22:8a:ce:ed:7b:8d:a2:77:2c:56:6a:5a:f3:36:59:
d0:99:ea:29:f5:d0:2c:e4:59:18:1f:de:7c:9e:7d:
60:a9:7f:a7:49:fd:b8:7d:ab:33:54:6d:59:ba:3f:
e5:c6:d7:ca:87:73:95:a4:39:a8:8a:e4:15:a0:76:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:84:09:80:A8:F9:B9:F7:EF:9A:E5:B4:F9:2F:5F:E9:81:5D:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c5605c7-be29-33d8-bebd-01a1c3646a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:2f:2b:41:cd:4b:34:37:b8:2c:23:bf:46:20:3a:1d:d5:11:
e3:2b:f4:b8:c3:b2:ab:15:2f:3d:ac:15:c2:bd:38:5a:60:e3:
82:47:c8:1a:67:85:6e:a2:ea:93:a9:52:86:c6:fa:11:95:ce:
39:fd:60:36:c1:91:c8:10:d4:af:b0:2a:aa:8d:7b:7c:8b:51:
33:8d:59:b9:c6:62:29:ce:ed:df:90:fc:ac:e5:a9:53:af:91:
8e:e6:24:00:5c:51:af:be:c2:d1:51:5c:cc:86:b4:82:ac:be:
68:d3:70:b0:c0:2e:78:93:40:77:cd:1f:1a:f3:ef:2c:cf:12:
ce:88:fc:e4:95:b3:5a:9c:c9:33:fe:0d:04:e9:8f:1c:13:2c:
66:9b:92:68:92:66:97:f4:f9:a3:a9:24:3a:fa:66:84:41:e2:
37:4c:aa:37:a4:b4:f4:df:9e:3b:91:26:6f:02:8b:46:e1:04:
55:08:ac:5c:fc:dc:f8:21:f3:fc:29:60:1d:b4:9d:c3:8b:ae:
d7:be:74:f1:8c:32:cd:67:de:f3:c4:a0:f0:de:36:c5:f3:9b:
b4:9e:86:ee:16:0c:61:f3:50:f0:15:30:e3:41:38:eb:5b:35:
e7:fe:4f:fa:b2:8a:8d:7d:78:63:43:de:91:36:09:fc:a3:97:
b2:c2:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:52:25 2026 by rpki-client