Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91a41f72-9ea4-373d-8a20-501be09194f5.roa
File: 91a41f72-9ea4-373d-8a20-501be09194f5.roa (raw, json)
Hash identifier: I59o8wkZXpm7RiqIJBcaS2V9KgQuwSwZAnr2+wI7YKU=
Subject key identifier: E1:64:FD:31:DE:33:A2:1F:7F:88:D7:22:36:D6:D8:AA:9D:80:AA:B7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584C3EABD99A25F43C18CE9CD500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91a41f72-9ea4-373d-8a20-501be09194f5.roa
Signing time: Sat 20 Dec 2025 02:00:31 +0000
ROA not before: Sat 20 Dec 2025 02:00:31 +0000
ROA not after: Fri 20 Mar 2026 01:00:31 +0000
asID: 401152
IP address blocks: 108.165.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jan 2026 21:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3e:ab:d9:9a:25:f4:3c:18:ce:9c:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 20 02:00:31 2025 GMT
Not After : Mar 20 01:00:31 2026 GMT
Subject: CN=723fb1ea-4b84-4830-ad44-45f675d00cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:e4:18:7b:b9:dc:9d:06:8f:c7:cd:d1:d0:
55:85:24:35:f0:eb:80:ac:d9:8a:e1:28:73:53:4d:
66:a7:92:1b:03:ab:8c:81:85:ea:82:d3:2e:fd:a1:
6a:f4:bd:78:e7:e6:96:b0:23:d8:f0:db:ec:fb:e7:
7a:bd:39:27:cc:79:47:3e:54:ca:fe:b2:8b:b2:e6:
71:97:c7:30:af:cb:52:e1:60:3d:be:cb:32:1b:c3:
93:f9:2b:7e:0b:28:d6:e3:a0:e7:87:5e:89:82:04:
d6:72:e1:2f:bb:42:50:1c:4f:1e:2b:32:56:85:db:
37:e9:d5:e0:8c:cd:c0:91:6b:39:b6:59:8a:04:96:
64:c3:27:e8:20:d2:fe:c7:c2:d0:54:4d:3a:0d:d1:
ab:47:81:42:24:8c:96:49:f2:82:25:8d:2e:f6:30:
cd:40:fa:1d:97:ba:16:1e:6e:5b:63:24:6e:33:da:
f3:e6:9f:da:10:45:48:b7:95:f1:b5:c9:64:4e:64:
37:ad:cb:51:a3:90:db:a6:ba:b4:c8:c8:94:6d:8e:
0d:c8:c8:99:ad:25:a3:22:c1:0a:7f:5d:08:e3:d2:
76:15:32:9f:26:06:90:7c:af:68:b3:ef:77:35:48:
97:59:66:da:7a:0d:ff:a2:8b:87:6b:ac:d6:ca:1c:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:FD:31:DE:33:A2:1F:7F:88:D7:22:36:D6:D8:AA:9D:80:AA:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91a41f72-9ea4-373d-8a20-501be09194f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:65:03:bd:dc:b8:bc:bd:72:7e:58:39:9a:04:9d:10:37:dc:
40:31:d7:dc:37:f3:ab:05:e2:2d:df:86:0b:83:53:d7:e4:1a:
28:6d:08:ec:82:39:c4:35:84:ff:13:82:24:d1:a3:78:5c:4e:
e0:45:9b:b1:c8:ea:6a:6c:3c:0e:3d:c9:e9:f0:2f:cd:34:0c:
d6:42:f2:63:3b:47:92:41:3f:61:44:94:99:de:28:38:94:ec:
f6:17:dd:7e:8d:0c:2f:14:73:7f:88:a8:d8:97:e3:d4:b2:30:
38:00:7c:77:e3:de:4d:5d:d4:38:0c:e6:be:27:ec:e9:ea:2f:
90:70:47:c8:0d:c7:82:bd:e9:23:0f:59:9a:7f:5e:13:56:93:
74:39:36:cd:d1:3d:8d:6c:05:38:cc:4b:aa:83:63:ff:38:8c:
b1:95:b7:07:ef:82:bd:0c:73:48:4e:26:02:5a:a2:b1:c0:91:
77:96:b6:19:fd:21:da:bd:7b:7d:9f:02:66:45:68:00:41:9d:
f8:87:c2:e3:c0:e2:4b:59:c8:70:7a:e3:1f:9e:b6:5a:dd:a2:
e5:34:27:71:31:db:1b:88:cc:1c:1d:2d:c3:5c:6b:a8:0a:67:
41:25:5f:4c:73:10:fb:a5:25:63:90:de:92:1b:a3:41:12:77:
df:79:04:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q9maJfQ8GM6c1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzIzZmIxZWEtNGI4NC00ODMwLWFkNDQtNDVmNjc1ZDAwY2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdzkGHu53J0Gj8fN0dBVhSQ18OuArNmK4Shz
U01mp5IbA6uMgYXqgtMu/aFq9L145+aWsCPY8Nvs++d6vTknzHlHPlTK/rKLsuZx
l8cwr8tS4WA9vssyG8OT+St+CyjW46Dnh16JggTWcuEvu0JQHE8eKzJWhds36dXg
jM3AkWs5tlmKBJZkwyfoINL+x8LQVE06DdGrR4FCJIyWSfKCJY0u9jDNQPodl7oW
Hm5bYyRuM9rz5p/aEEVIt5XxtclkTmQ3rctRo5Dbprq0yMiUbY4NyMiZrSWjIsEK
f10I49J2FTKfJgaQfK9os+93NUiXWWbaeg3/oouHa6zWyhxM0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFk/THeM6Iff4jXIjbW2KqdgKq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFhNDFmNzItOWVhNC0z
NzNkLThhMjAtNTAxYmUwOTE5NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNlA73cuLy9cn5YOZoEnRA33EAx19w386sF4i3fhguDU9fkGihtCOyC
OcQ1hP8TgiTRo3hcTuBFm7HI6mpsPA49yenwL800DNZC8mM7R5JBP2FElJneKDiU
7PYX3X6NDC8Uc3+IqNiX49SyMDgAfHfj3k1d1DgM5r4n7OnqL5BwR8gNx4K96SMP
WZp/XhNWk3Q5Ns3RPY1sBTjMS6qDY/84jLGVtwfvgr0Mc0hOJgJaorHAkXeWthn9
Idq9e32fAmZFaABBnfiHwuPA4ktZyHB64x+etlrdouU0J3Ex2xuIzBwdLcNca6gK
Z0ElX0xzEPulJWOQ3pIbo0ESd995BIw=
-----END CERTIFICATE-----
Generated at Tue Mar 17 10:30:10 2026 by rpki-client