Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f470bb3-e4f5-3e8b-bb6e-1205fd3717d9.roa
File: 5f470bb3-e4f5-3e8b-bb6e-1205fd3717d9.roa (raw, json)
Hash identifier: 7Pp+NB8Kmf95Yf5Gj+Oyz/ENbfzMjbC9G0j3W0a8L3c=
Subject key identifier: 2A:EF:FE:73:C4:5D:D3:22:73:4B:54:98:29:49:19:D2:B8:F1:CF:F6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584C62F68CB785E7A6C83608B500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f470bb3-e4f5-3e8b-bb6e-1205fd3717d9.roa
Signing time: Fri 02 Jan 2026 02:00:30 +0000
ROA not before: Fri 02 Jan 2026 02:00:30 +0000
ROA not after: Thu 02 Apr 2026 01:00:30 +0000
asID: 401152
IP address blocks: 166.0.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jan 2026 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:62:f6:8c:b7:85:e7:a6:c8:36:08:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 02:00:30 2026 GMT
Not After : Apr 2 01:00:30 2026 GMT
Subject: CN=c407852c-eb05-47b5-9edd-3217e5dd67b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:16:c5:02:65:c7:b1:d4:e8:80:8d:6d:86:
80:0c:2d:dc:41:f1:02:39:ba:8f:93:27:89:fa:e1:
ab:71:94:b2:eb:09:5d:70:b5:fd:50:e6:57:e9:c2:
86:f8:57:c0:1e:a0:c2:80:01:1b:85:8b:1f:9c:89:
38:1f:76:57:f9:93:2b:61:0b:e1:31:bc:cf:f6:1b:
27:89:4a:ca:e3:b2:fd:a6:73:ee:ff:e1:83:7f:b4:
0c:23:77:f6:ed:aa:71:da:0c:0a:5f:5f:d7:88:a9:
cd:df:0f:f2:3a:aa:38:a8:19:50:cb:a2:89:c9:8e:
31:8a:12:52:11:d0:8c:c1:31:a3:79:64:77:82:32:
a3:87:6c:22:65:46:3d:d7:c2:10:f8:d5:a5:74:dd:
81:d1:9f:6c:7d:e9:b7:1b:e6:b8:0b:57:06:14:e7:
69:ac:4a:88:65:24:3b:ac:c8:d8:4b:30:31:21:8d:
90:34:d9:0e:25:8c:6c:f5:fa:a4:d9:05:82:47:41:
8a:81:c2:13:83:ae:fd:f1:a1:b9:75:d4:b2:96:11:
d3:63:07:2f:de:66:ee:0b:3a:64:7c:4e:37:bc:89:
e4:1f:ff:a5:fa:32:b2:66:82:00:c3:0e:83:83:93:
d1:17:a0:0a:5e:74:65:d9:3d:42:5b:40:24:a7:d6:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EF:FE:73:C4:5D:D3:22:73:4B:54:98:29:49:19:D2:B8:F1:CF:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f470bb3-e4f5-3e8b-bb6e-1205fd3717d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:61:17:54:65:44:af:0f:45:73:2c:ae:b4:c2:76:d5:9b:b4:
3f:fd:27:1f:0a:0b:25:63:58:6d:2d:4f:a3:2e:05:71:8e:fa:
85:7c:64:2f:30:68:bb:ea:37:89:ed:32:c5:dc:c4:95:c8:cf:
16:f9:83:85:f9:ae:25:d1:33:75:35:24:b6:54:9d:67:84:46:
b5:20:b1:f4:30:69:37:67:2a:89:d9:8e:e5:c4:4a:81:21:42:
60:75:49:89:16:79:3f:20:8a:72:bd:4e:75:2f:3f:ee:93:dc:
27:fe:b0:d5:bf:33:b5:b4:fe:cb:21:35:b2:c2:61:e4:09:42:
1d:ee:9e:51:a2:0d:b9:97:3e:cf:c9:0c:e7:89:e6:28:4d:87:
ab:fc:e6:cd:c7:e4:30:ff:bd:29:db:3f:14:69:e3:9a:81:8b:
4d:84:b5:da:4c:78:a7:e9:1d:32:de:87:65:4f:86:96:f9:1c:
7c:b0:e1:30:9e:39:21:93:ed:1f:c1:30:ef:14:df:e7:38:2b:
36:7d:7f:b3:85:59:cd:3e:60:97:0d:a9:7b:34:69:20:7d:9e:
b7:e6:e0:35:a0:9f:f2:5a:42:77:ca:fb:e1:7c:f1:b6:a2:91:
79:a6:15:25:68:44:d2:03:f1:2e:af:28:cb:61:e0:ab:7a:8d:
3f:64:10:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExi9oy3heemyDYItQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDEwMjAyMDAzMFoXDTI2MDQwMjAxMDAzMFowLzEtMCsGA1UEAxMk
YzQwNzg1MmMtZWIwNS00N2I1LTllZGQtMzIxN2U1ZGQ2N2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD4WxQJlx7HU6ICNbYaADC3cQfECObqPkyeJ
+uGrcZSy6wldcLX9UOZX6cKG+FfAHqDCgAEbhYsfnIk4H3ZX+ZMrYQvhMbzP9hsn
iUrK47L9pnPu/+GDf7QMI3f27apx2gwKX1/XiKnN3w/yOqo4qBlQy6KJyY4xihJS
EdCMwTGjeWR3gjKjh2wiZUY918IQ+NWldN2B0Z9sfem3G+a4C1cGFOdprEqIZSQ7
rMjYSzAxIY2QNNkOJYxs9fqk2QWCR0GKgcITg6798aG5ddSylhHTYwcv3mbuCzpk
fE43vInkH/+l+jKyZoIAww6Dg5PRF6AKXnRl2T1CW0Akp9Y5WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrv/nPEXdMic0tUmClJGdK48c/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWY0NzBiYjMtZTRmNS0z
ZThiLWJiNmUtMTIwNWZkMzcxN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENhF1RlRK8PRXMsrrTCdtWbtD/9Jx8KCyVjWG0tT6MuBXGO+oV8ZC8w
aLvqN4ntMsXcxJXIzxb5g4X5riXRM3U1JLZUnWeERrUgsfQwaTdnKonZjuXESoEh
QmB1SYkWeT8ginK9TnUvP+6T3Cf+sNW/M7W0/sshNbLCYeQJQh3unlGiDbmXPs/J
DOeJ5ihNh6v85s3H5DD/vSnbPxRp45qBi02EtdpMeKfpHTLeh2VPhpb5HHyw4TCe
OSGT7R/BMO8U3+c4KzZ9f7OFWc0+YJcNqXs0aSB9nrfm4DWgn/JaQnfK++F88bai
kXmmFSVoRNID8S6vKMth4Kt6jT9kEAo=
-----END CERTIFICATE-----
Generated at Tue Mar 17 10:28:30 2026 by rpki-client