Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce7434b1-29fe-301b-babf-18ad95243504.roa
File: ce7434b1-29fe-301b-babf-18ad95243504.roa (raw, json)
Hash identifier: +0BmMfM2AtwyIp1kWEZDFtpStxCjR0QDI3TqJDh0r3A=
Subject key identifier: F2:8F:7E:4A:60:6B:52:A3:F6:22:97:81:D3:38:1E:12:0C:B2:1E:E6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4176820DFE36AE44FBC03740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce7434b1-29fe-301b-babf-18ad95243504.roa
Signing time: Sun 21 Dec 2025 02:00:30 +0000
ROA not before: Sun 21 Dec 2025 02:00:30 +0000
ROA not after: Sat 21 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.22.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Dec 2025 20:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:76:82:0d:fe:36:ae:44:fb:c0:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 02:00:30 2025 GMT
Not After : Mar 21 01:00:30 2026 GMT
Subject: CN=2763377d-70a9-4f21-8cc9-008bdf91faee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:9c:0f:04:5c:d2:cd:41:23:26:9f:e4:0b:
d0:d1:91:22:bc:90:24:ac:fb:0f:a5:95:13:a9:66:
d6:8a:37:9c:05:5c:5d:b8:4e:48:f5:1f:74:53:43:
80:c4:7f:eb:f1:b8:04:07:b8:86:78:04:63:5f:ec:
6e:aa:35:a5:f1:f9:5e:cf:be:d2:84:17:18:f8:8e:
bf:5c:8b:13:dd:d7:b7:c9:5c:67:32:c9:9b:ae:cd:
cd:91:ed:e1:72:fc:b2:c2:f9:e7:ce:bb:c7:93:f7:
b4:a0:9c:e4:07:ad:b4:7b:92:6a:6c:1b:ee:a7:0c:
9b:ee:a1:fd:b5:b3:13:f0:35:14:bc:2c:9e:57:aa:
44:50:d4:49:24:ab:57:e6:eb:c4:e6:b6:bf:7c:28:
9b:97:9c:84:71:25:ed:bb:32:dc:ca:98:98:e6:e5:
31:28:f5:aa:2a:8e:07:24:6e:dd:a4:52:be:3b:9b:
78:ff:02:1f:28:35:88:22:33:ed:43:16:fc:96:1a:
7b:81:4e:a0:c3:fa:0f:dc:b0:e4:c9:69:a2:67:28:
2b:ab:41:87:e9:5a:3e:bf:a9:10:b1:57:29:6f:ab:
44:43:66:1e:06:7e:75:ec:4f:57:a2:07:aa:5e:9f:
b4:c0:9b:ee:8a:30:17:97:1d:85:6f:9f:12:a0:27:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:7E:4A:60:6B:52:A3:F6:22:97:81:D3:38:1E:12:0C:B2:1E:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce7434b1-29fe-301b-babf-18ad95243504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:a4:ae:db:fd:77:7b:34:04:ca:eb:f3:e0:29:97:15:37:6e:
d6:20:45:10:aa:ce:72:cb:fd:01:62:65:0f:f0:6f:03:26:49:
51:d0:f2:71:43:af:9d:a0:a6:35:12:dc:68:7c:49:9c:4a:e4:
cb:54:36:f4:8b:db:bf:43:b3:3b:f4:a7:65:10:57:5d:0f:c9:
23:47:97:79:3e:30:9d:b7:7a:ab:9f:c8:76:2b:c4:5d:3c:f2:
31:93:be:11:11:21:f7:bb:f2:31:f2:fb:94:ea:2a:65:c5:63:
27:67:a7:72:ae:ce:94:83:c3:8e:7e:6c:ff:fe:52:4a:0d:7e:
6d:ac:0e:51:eb:81:4d:d2:ff:ab:bf:0e:61:38:9c:1e:82:c9:
69:23:cd:14:6e:66:79:42:6d:fb:9c:9c:d2:3e:46:f7:5f:64:
9b:29:62:8e:b2:3c:47:53:31:fe:17:db:c4:09:45:76:9d:35:
c4:a0:2e:d5:73:36:a4:a6:1a:30:96:b9:8e:f8:4e:b2:9c:70:
74:02:57:e7:d4:8a:0a:92:e9:22:7f:a1:ee:78:09:72:32:d0:
69:ce:3f:20:ad:c6:20:07:6d:c7:dd:1c:31:05:66:54:88:62:
4c:c3:91:dc:39:ea:ee:58:43:f3:44:2d:74:2d:6a:92:da:3b:
55:b6:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:52:41 2026 by rpki-client