Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cf8f7df-2946-370f-9e1b-cc4ffc2cc744.roa
File: 9cf8f7df-2946-370f-9e1b-cc4ffc2cc744.roa (raw, json)
Hash identifier: rkOtXbfJypP5w6cd1Iw1xsqHxyxRfn/A4cCDFbK5uGY=
Subject key identifier: 7D:BC:12:F2:E1:BF:2E:1F:6A:8D:FC:E5:BA:0C:4D:5C:1D:CA:1D:42
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584C93D21192A799CF45AA0CF600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cf8f7df-2946-370f-9e1b-cc4ffc2cc744.roa
Signing time: Mon 19 Jan 2026 14:00:38 +0000
ROA not before: Mon 19 Jan 2026 14:00:38 +0000
ROA not after: Sun 19 Apr 2026 13:00:38 +0000
asID: 401152
IP address blocks: 166.0.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jan 2026 23:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:93:d2:11:92:a7:99:cf:45:aa:0c:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 19 14:00:38 2026 GMT
Not After : Apr 19 13:00:38 2026 GMT
Subject: CN=380e075b-d93e-48fc-860d-914090aea790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:71:5c:2c:90:95:3a:71:d8:6a:7e:71:6a:
13:30:36:3c:da:c4:ed:14:40:f0:4a:56:a6:1d:78:
81:43:ff:18:fc:71:74:9a:14:76:b6:35:5f:4c:38:
86:e6:45:86:6d:36:e0:c7:42:03:93:d1:85:3d:c6:
59:cf:ed:87:06:a0:69:e0:d7:cf:6b:ae:be:54:cf:
f6:38:ff:08:cc:0d:79:c1:2c:3c:cf:1b:08:4c:07:
f3:3b:5e:f1:1d:81:75:c6:3e:94:44:0d:f5:6e:0c:
b4:59:63:33:0d:41:b8:8c:c7:c1:fe:78:ff:f4:33:
40:0c:33:46:25:cf:72:45:65:84:c3:11:56:ce:a6:
77:e0:ba:61:82:54:68:42:f6:38:98:59:15:3d:51:
e6:2e:50:db:47:47:58:4a:b2:8e:dd:97:f5:8d:cb:
22:70:93:26:3d:8f:ff:60:55:61:bb:57:70:91:fd:
f0:a4:9b:33:8c:86:ce:dc:60:05:ae:cb:16:fe:88:
02:b6:c0:35:70:06:9f:94:13:e9:7b:65:f9:b4:d2:
2b:09:94:29:ac:fd:9b:01:95:88:71:bb:2c:8e:8b:
b1:28:2a:bf:9e:05:69:8c:57:da:3a:3b:fd:e4:f1:
ff:61:71:6d:0c:5b:e4:41:5a:d0:2b:25:64:68:b9:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:12:F2:E1:BF:2E:1F:6A:8D:FC:E5:BA:0C:4D:5C:1D:CA:1D:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cf8f7df-2946-370f-9e1b-cc4ffc2cc744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:f3:a9:9f:02:80:4a:fc:0f:b5:e7:63:75:68:90:86:cd:e4:
5e:85:31:46:bd:2b:bd:c6:cd:fe:ef:02:9c:68:e6:e8:7b:80:
c6:74:c0:ea:0c:3b:ca:8a:a9:0a:3f:84:9d:eb:7c:90:2a:2a:
71:02:79:3f:b1:0d:01:b2:c2:43:51:d4:2c:0f:69:12:c5:b8:
e6:6f:53:99:1c:45:21:bc:dd:c5:99:42:50:17:98:8e:56:00:
cc:a9:26:8d:8a:f5:25:34:af:00:56:c4:41:46:9f:36:34:54:
a3:c0:1e:5e:f5:dc:da:40:0a:76:fc:6d:61:98:50:cd:37:7d:
0d:ac:3a:27:90:3f:ea:2b:fa:d4:46:de:df:1c:fc:d1:40:3d:
bd:57:ca:8e:a9:34:5f:a1:b7:d6:be:0a:b6:1b:ef:37:c2:39:
9c:2e:b2:ea:de:e3:29:30:29:ac:f3:5a:4c:b4:e0:d4:cc:b2:
ee:7b:c9:7b:2e:e7:9c:26:38:93:1f:cd:9a:e3:9a:ac:ee:68:
f3:05:da:93:d5:ce:10:66:6b:d6:60:88:57:c3:4a:be:75:ef:
e4:f2:2c:4c:ba:07:d6:2c:13:31:3b:17:f6:fc:01:69:cf:67:
d5:b0:a4:69:f8:a8:c1:c6:bb:1c:93:69:ef:ba:a5:1a:83:cf:
96:15:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 10:29:01 2026 by rpki-client