Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d9a4908-4885-3acf-938c-390b2b730ed0.roa
File: 9d9a4908-4885-3acf-938c-390b2b730ed0.roa (raw, json)
Hash identifier: zj4VujTdue4yVJmu1M3KVnDTVuRlqhZPjdGKlXtocRs=
Subject key identifier: 1C:E3:52:6E:43:B8:93:BC:24:64:8F:2E:83:B0:E9:F3:BE:9F:01:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F6D209A2B2F787DC91B9F4E10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d9a4908-4885-3acf-938c-390b2b730ed0.roa
Signing time: Wed 07 Oct 2026 19:44:15 +0000
ROA not before: Wed 07 Oct 2026 19:44:15 +0000
ROA not after: Tue 05 Jan 2027 20:44:15 +0000
asID: 401152
IP address blocks: 108.165.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Oct 2026 17:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6d:20:9a:2b:2f:78:7d:c9:1b:9f:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 7 19:44:15 2026 GMT
Not After : Jan 5 20:44:15 2027 GMT
Subject: CN=b33df04c-1bda-4a05-b5e4-2bb9c47603fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:a6:f8:77:af:30:d0:5b:bc:99:57:da:23:
4f:ed:70:b7:d7:a7:23:1a:fe:10:49:41:0c:6f:89:
14:c2:17:33:1c:5e:67:9a:31:66:57:8a:f1:b8:b6:
96:77:09:7e:ba:d1:f2:07:38:86:a7:7e:bc:91:d9:
2c:34:45:b1:7d:3c:cf:c1:4f:d5:df:0c:43:8a:3f:
81:df:61:0b:f0:7f:87:57:2f:12:a9:80:be:6e:b5:
51:6e:1d:ed:74:24:ec:53:a2:1e:e2:89:bc:aa:cc:
76:ce:a8:99:40:07:07:0c:be:71:27:8e:fa:22:02:
f8:fe:50:ca:3c:5d:70:72:26:d9:7f:ee:0c:84:d1:
de:d8:c0:a1:be:72:ab:78:98:e6:0f:fa:b1:77:86:
9a:4d:62:1c:91:04:a2:86:2b:99:aa:d6:6f:a0:18:
1a:9a:83:41:0b:b5:15:81:f8:0a:63:52:ee:04:9c:
87:99:dd:03:3f:77:36:08:ab:1d:52:62:5c:e9:cf:
a9:ae:df:51:2c:02:5b:e5:9f:5b:21:cc:6b:1b:0d:
58:38:da:a9:0a:a4:7e:42:4d:3d:01:aa:9b:19:77:
ab:9d:e1:ca:02:3f:7e:e4:04:f1:93:4c:31:ac:0f:
c1:e9:0e:3b:14:f7:26:d9:b1:22:09:7d:cd:21:51:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E3:52:6E:43:B8:93:BC:24:64:8F:2E:83:B0:E9:F3:BE:9F:01:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d9a4908-4885-3acf-938c-390b2b730ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a3:3f:e2:aa:f1:a6:b7:79:bd:2d:26:77:9f:9f:7b:5d:8e:
70:e6:6d:fc:15:24:90:f0:cc:0a:ed:26:13:83:3d:c9:5b:11:
b1:79:43:f8:a9:50:31:dc:e2:e8:bd:45:c6:b5:34:3e:ee:29:
07:41:53:67:9b:60:03:83:d5:57:52:8f:73:e8:f4:64:47:78:
0f:b2:2f:00:de:8f:e7:e7:82:2d:b0:6e:21:cb:56:5f:cd:99:
0b:f8:21:f7:47:d2:8e:ce:b3:00:6b:d5:9c:30:92:de:5b:44:
98:0c:ca:5f:75:06:26:13:13:d1:b5:2a:06:9a:6a:e6:5e:c7:
d7:ad:10:e0:87:9b:7c:a0:f8:3b:f2:88:45:ee:85:fd:83:8f:
2d:df:ca:e1:93:59:34:89:08:ec:2e:c1:77:f6:30:09:2e:6e:
4f:82:b6:01:cb:1f:2f:4b:40:85:4b:dd:37:06:3c:16:c3:8c:
43:67:10:ce:29:4f:b1:9b:e7:f1:16:ca:65:43:0b:5b:a0:2d:
9f:28:f1:57:b3:1b:9c:13:61:26:ad:fb:6a:12:1b:12:b5:53:
c0:7f:c9:ef:ef:d7:69:ce:07:2c:34:95:ae:30:52:b5:86:b4:
8f:af:f4:ff:e5:e2:a3:66:51:90:ae:2e:08:04:a8:ff:cb:bd:
cd:65:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:39:08 2026 by rpki-client