Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4974ea75-ec5c-3b1a-8f6a-ef3cf1bba715.roa
File: 4974ea75-ec5c-3b1a-8f6a-ef3cf1bba715.roa (raw, json)
Hash identifier: MxcTWLeXn9XPC2/GmJMWYr8qkbjkSLjbZg5mCuIwE8w=
Subject key identifier: E6:26:6C:B3:B2:9C:7B:48:8C:6E:33:6F:88:EE:EA:87:C2:5C:69:2F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C417681A78C49510CCF227500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4974ea75-ec5c-3b1a-8f6a-ef3cf1bba715.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.17.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Dec 2025 20:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:81:a7:8c:49:51:0c:cf:22:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=e59ffa45-d984-4a08-b3e7-b80cbbaa9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:69:3c:6f:09:13:fc:3d:21:89:45:e2:46:
dd:5b:af:4b:fe:1c:db:fd:c0:8f:ae:71:c7:95:6d:
0a:0b:0a:c7:5b:65:d2:04:47:ba:bf:2c:76:2a:fa:
c7:2b:1c:bd:c5:95:20:c6:93:c2:ca:7b:c8:2d:d0:
16:0e:88:f9:da:cb:41:e2:39:c7:d5:90:62:c7:26:
3d:fd:81:b6:a8:b3:b3:05:5a:00:97:ac:45:67:40:
0b:08:2e:c2:42:d8:b5:79:79:7f:6b:5a:8d:f0:22:
f2:37:7a:18:18:2e:0f:7e:79:39:f8:4f:90:c0:a8:
bf:c6:fc:3b:13:7d:8f:d9:16:9c:35:80:e8:00:0a:
2d:5f:15:d4:b4:0b:1b:bf:b6:e8:24:f7:3a:06:4e:
86:ce:36:cb:65:b7:cb:71:2a:6e:4b:9c:7a:30:b3:
ce:ba:cd:c0:ca:e8:6e:ca:c5:c0:34:d2:b2:17:ac:
1b:52:86:a4:40:84:98:0b:c6:07:02:30:b3:8a:c5:
8f:01:a7:e8:d4:71:bc:cf:1b:e3:a3:69:dc:55:ca:
42:22:55:0a:f0:0d:d7:3a:77:04:9d:e0:d5:57:87:
2b:23:ca:72:e1:19:5e:d8:23:53:65:d2:10:6f:d8:
6b:5c:63:44:ee:db:43:6c:43:76:91:88:f7:8a:ae:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:6C:B3:B2:9C:7B:48:8C:6E:33:6F:88:EE:EA:87:C2:5C:69:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4974ea75-ec5c-3b1a-8f6a-ef3cf1bba715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b1:20:da:56:b6:eb:4b:c2:37:84:fa:58:d4:00:27:80:9e:
30:9f:a6:dc:0d:98:17:ee:05:0c:04:e3:f4:f0:8a:08:db:6c:
40:55:9e:0b:45:9b:61:b7:c1:a1:9a:66:67:a9:fc:66:4c:ca:
01:11:8b:11:b3:02:03:da:da:dd:57:78:46:a0:a0:e6:93:b9:
62:12:e6:1a:7c:91:2f:aa:ae:75:b2:ca:54:e0:da:40:0b:d5:
78:96:33:03:df:29:e2:af:84:47:09:3c:48:08:36:68:44:b4:
02:d5:17:37:9e:32:9c:08:ee:10:83:94:45:5d:d7:73:63:c7:
61:ff:ed:d9:bc:40:92:01:a2:4e:b5:18:06:e2:88:2b:88:7d:
23:bd:91:05:fa:bd:72:cf:8d:be:af:d6:d1:f8:cf:be:cf:f4:
46:6b:12:0a:a7:fc:0a:8c:18:5f:88:1e:59:b8:6d:d2:31:8c:
0a:ea:b3:28:b0:58:e6:a8:ba:92:36:27:5a:75:42:b1:d1:3a:
53:51:8b:71:6e:d5:0b:e3:5d:c3:22:68:21:e6:d0:ed:9b:59:
c8:09:a9:3d:c0:db:88:b9:74:fa:ed:57:1c:01:74:37:81:b2:
07:2b:31:3d:be:5b:16:83:87:74:2d:ae:85:73:98:d3:76:89:
a0:11:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:54:54 2026 by rpki-client