Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa
File: b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa (raw, json)
Hash identifier: 4038ZkNPTL7n8vAnH56yialNTaipcWVs41FxXNLOp9c=
Subject key identifier: EF:88:6A:66:A7:36:8A:8D:84:09:9A:CD:8F:DC:6F:54:52:8D:DB:B6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4176821F5CA0D3B1F2FD4880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.22.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Dec 2025 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:82:1f:5c:a0:d3:b1:f2:fd:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=7e8e403f-b7d5-4551-874d-26e866c1b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:eb:53:c2:89:f0:19:a1:4f:73:b1:a5:f5:
1c:db:80:15:b6:a0:a3:59:7b:41:88:15:d4:70:ce:
3a:f0:5e:81:0b:1f:4a:d9:3f:61:f3:8e:60:27:98:
c0:c0:7c:61:46:ca:2b:8b:3b:6e:c6:c9:30:38:42:
1d:cb:94:dd:91:d8:d2:59:68:4e:e9:01:35:f3:73:
b5:26:9e:ea:f2:88:fd:ec:5f:75:10:bc:66:d1:55:
91:cc:2c:5b:14:e5:2b:6d:49:2e:dc:28:0c:93:93:
eb:fb:c2:d9:58:fb:d3:68:e8:e8:91:e6:7b:a8:58:
68:9a:70:be:4c:99:b9:52:32:ca:2c:6c:37:6e:70:
1d:a0:b8:ce:35:f1:91:a0:7c:b8:cc:50:90:75:b0:
b8:7a:cc:cb:19:c7:66:0c:08:6d:93:a2:c1:06:ae:
e8:1a:cf:4b:27:86:00:f1:81:3e:83:3a:92:05:54:
f9:06:f3:4f:94:ae:80:5d:c8:39:a7:94:39:34:15:
20:e2:c1:5d:0b:86:52:01:28:2f:fd:0c:c4:80:97:
31:c3:52:22:6f:4a:4e:cd:5e:51:83:c1:01:31:55:
59:e4:98:ea:c2:b8:ff:4c:f8:5d:fa:32:af:3c:99:
70:28:df:5b:e5:d5:5c:81:75:5f:c2:d6:a2:10:8e:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:6A:66:A7:36:8A:8D:84:09:9A:CD:8F:DC:6F:54:52:8D:DB:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:29:14:1b:6f:9c:d4:ee:a9:19:bc:e7:19:dd:5b:cb:c7:dd:
70:02:b9:fa:b8:d2:83:d3:c3:5f:41:33:0b:3f:0e:06:fd:f2:
d3:8e:97:b9:61:65:e7:b7:fa:15:2a:89:b3:5b:53:08:67:ff:
6b:83:79:3b:f7:a7:fc:96:1d:b4:7d:08:48:f0:b6:92:67:0f:
69:37:4c:cf:ee:de:78:7e:0d:dd:3c:c0:fe:ee:81:b7:6e:70:
a3:87:ac:3f:dd:ae:65:2b:41:e5:6f:19:40:87:b4:39:52:f6:
94:b0:3c:b1:e5:ab:c2:e4:b4:c8:e6:a5:39:52:9a:f8:19:8b:
0f:94:12:54:48:7d:86:f4:56:ed:0b:33:d5:ed:37:72:38:84:
3b:9b:16:6d:5f:32:ba:76:ff:ff:67:77:4f:59:b1:41:93:3e:
34:90:be:6f:52:b8:7f:65:fe:be:cf:d8:08:f8:4c:33:df:b8:
9d:bf:3f:a1:32:2e:00:bd:9a:32:f0:e5:39:c3:ed:be:ba:31:
20:41:57:aa:e1:9d:e6:d6:38:42:c9:02:f7:d5:96:3f:f5:82:
0c:ac:52:07:7a:34:d7:3a:8a:5e:49:66:80:65:8d:c2:c0:f4:
46:ae:f4:9b:b8:48:21:c1:e8:fe:c9:86:6b:29:68:e4:27:04:
af:8c:d1:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdoIfXKDTsfL9SIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk
N2U4ZTQwM2YtYjdkNS00NTUxLTg3NGQtMjZlODY2YzFiMjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY7rU8KJ8BmhT3OxpfUc24AVtqCjWXtBiBXU
cM468F6BCx9K2T9h845gJ5jAwHxhRsoriztuxskwOEIdy5TdkdjSWWhO6QE183O1
Jp7q8oj97F91ELxm0VWRzCxbFOUrbUku3CgMk5Pr+8LZWPvTaOjokeZ7qFhomnC+
TJm5UjLKLGw3bnAdoLjONfGRoHy4zFCQdbC4eszLGcdmDAhtk6LBBq7oGs9LJ4YA
8YE+gzqSBVT5BvNPlK6AXcg5p5Q5NBUg4sFdC4ZSASgv/QzEgJcxw1Iib0pOzV5R
g8EBMVVZ5Jjqwrj/TPhd+jKvPJlwKN9b5dVcgXVfwtaiEI6HXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+IamanNoqNhAmazY/cb1RSjdu2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjE0OWZlNWItMzJmOC0z
MTBmLTlkZTMtMDFjYWYwYzJkNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMpFBtvnNTuqRm85xndW8vH3XACufq40oPTw19BMws/Dgb98tOOl7lh
Zee3+hUqibNbUwhn/2uDeTv3p/yWHbR9CEjwtpJnD2k3TM/u3nh+Dd08wP7ugbdu
cKOHrD/drmUrQeVvGUCHtDlS9pSwPLHlq8LktMjmpTlSmvgZiw+UElRIfYb0Vu0L
M9XtN3I4hDubFm1fMrp2//9nd09ZsUGTPjSQvm9SuH9l/r7P2Aj4TDPfuJ2/P6Ey
LgC9mjLw5TnD7b66MSBBV6rhnebWOELJAvfVlj/1ggysUgd6NNc6il5JZoBljcLA
9Eau9Ju4SCHB6P7JhmspaOQnBK+M0TU=
-----END CERTIFICATE-----
Generated at Sat Mar 14 16:50:52 2026 by rpki-client