Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9db6ee1-6c64-34f2-9d06-2e718a4f9330.roa
File: c9db6ee1-6c64-34f2-9d06-2e718a4f9330.roa (raw, json)
Hash identifier: uIms+8e0k8AgMZfYPkcy2JXVrKc7WLjmGBi0hAtwLyg=
Subject key identifier: FC:A2:8D:38:73:CD:7A:81:B9:46:93:B7:2B:AC:3E:AC:79:DD:E3:02
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584C3EABD975D45B6EC91F8E5580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9db6ee1-6c64-34f2-9d06-2e718a4f9330.roa
Signing time: Sat 20 Dec 2025 02:00:31 +0000
ROA not before: Sat 20 Dec 2025 02:00:31 +0000
ROA not after: Fri 20 Mar 2026 01:00:31 +0000
asID: 401152
IP address blocks: 23.26.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jan 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3e:ab:d9:75:d4:5b:6e:c9:1f:8e:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 20 02:00:31 2025 GMT
Not After : Mar 20 01:00:31 2026 GMT
Subject: CN=115e3356-c79a-4a9d-906d-360be5ddd8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:8e:63:0d:11:bd:3f:33:04:55:69:84:0c:
9d:0a:cb:8c:77:9f:0c:9d:37:83:6a:c6:86:d8:07:
e4:40:d2:7f:e6:f2:6f:af:a6:dc:3c:49:0e:76:aa:
38:63:93:18:23:ae:ba:39:20:20:f0:71:56:70:02:
31:24:aa:f7:07:9a:11:88:2d:07:1b:db:52:9d:3f:
e1:45:36:e0:1c:e6:a7:d2:94:dd:3f:8d:f6:aa:d4:
94:4a:be:e0:4c:20:85:58:9e:37:0e:f7:75:99:9b:
ae:86:a3:50:b4:30:37:9e:24:c4:9f:d7:c7:97:65:
b8:44:e5:95:a8:5c:0e:02:16:7b:a2:54:b0:0f:4a:
e8:fe:d9:fc:d3:9c:68:2b:41:f8:aa:a0:14:43:fb:
71:60:63:57:82:69:a2:1d:42:4e:c8:dc:a7:8b:05:
be:fe:41:1c:b4:90:7f:dc:b0:0a:be:9b:43:51:b9:
b4:b8:2f:ef:be:3b:78:e9:da:02:d6:03:bb:06:fc:
9e:3e:d6:f2:dd:5c:de:ff:96:7b:d9:d4:f0:ea:71:
1f:2c:47:ac:6b:fc:5b:aa:19:40:ea:f5:f6:ac:f3:
1a:ef:fd:f3:ea:23:63:b1:25:1f:1b:4b:68:b7:a0:
02:b6:95:5e:c9:3e:67:78:04:44:ab:f8:ea:c9:87:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A2:8D:38:73:CD:7A:81:B9:46:93:B7:2B:AC:3E:AC:79:DD:E3:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9db6ee1-6c64-34f2-9d06-2e718a4f9330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:99:e0:d9:b1:4b:2b:4b:97:44:4d:31:b6:e3:00:7c:04:b8:
ba:e3:cd:97:7e:7d:67:92:46:55:c8:93:b6:78:3d:cc:9d:06:
67:25:b6:0f:99:f1:5e:34:c4:44:87:e1:c4:3b:68:ea:a3:cc:
3b:a0:6c:63:c7:d6:44:49:05:d1:70:79:9a:10:b8:3d:71:a4:
36:b2:b1:e7:ec:1c:d0:93:6f:c9:01:03:39:28:70:13:e4:48:
86:64:75:8e:c6:66:c9:8e:09:69:e6:f4:a7:f8:1f:5a:47:b8:
46:31:2e:6a:a6:01:79:4f:57:00:24:99:64:3d:5e:62:37:7c:
70:d3:a6:1b:ee:37:99:97:20:d8:11:78:0b:96:61:2f:38:95:
4c:09:7f:c9:21:c2:95:68:23:80:de:de:fb:d3:af:be:85:00:
49:1c:de:23:8b:93:e5:0d:97:a9:02:22:7e:9a:7a:9e:18:a9:
0d:14:a1:f2:44:fd:23:88:3e:72:af:49:6b:fc:8a:fd:45:ab:
31:33:8d:78:84:31:89:12:a1:26:bc:12:9b:3f:af:de:98:b4:
33:6b:34:c9:08:c5:2a:f5:83:3f:67:80:67:1b:e1:40:fe:87:
62:75:22:42:c6:f7:cf:41:65:6f:ff:81:7a:d6:27:34:85:94:
1f:54:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 10:30:07 2026 by rpki-client