Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa
File: 22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa (raw, json)
Hash identifier: 43gPi69+1fd0wCGdZMfJcX3Le4Ts/uyKYUuYPoWFheQ=
Subject key identifier: D7:E1:70:F3:EF:76:DD:08:05:CF:69:0F:78:49:E8:01:99:5A:55:65
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4974487BE5AE74A5A36232E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397197
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Oct 2026 15:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:48:7b:e5:ae:74:a5:a3:62:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7147c7cd-2c08-4bcd-b167-e8db424af590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:66:43:e5:a2:05:c8:e9:72:94:3a:2e:06:
71:4b:29:20:f3:d6:94:cb:9b:55:4d:aa:6a:be:ec:
ec:a1:ff:65:85:c0:f4:d1:2d:ec:b3:62:cf:87:04:
86:7b:02:9c:94:31:ba:58:5d:5f:6a:db:7e:9b:55:
cf:46:d8:8f:60:f0:27:8a:13:7f:c1:d1:7a:67:77:
0d:b3:c6:78:b8:05:20:17:95:6e:e2:75:42:15:60:
db:ee:12:79:5f:d8:cc:43:bd:6f:81:33:0a:25:58:
8e:bb:59:0a:cb:90:ae:47:ec:a6:6f:1e:6e:bc:d8:
02:7c:33:74:bb:c4:2d:03:5d:c2:81:16:5e:27:94:
8e:7f:d4:fd:4d:22:d3:5d:38:53:44:48:98:94:46:
4c:ee:c8:b2:5c:50:a9:57:2f:b3:6f:8f:1e:8d:4f:
95:72:92:40:1d:f0:52:eb:4a:35:c5:25:ed:e9:dd:
61:0c:5e:63:64:18:97:4c:3f:fd:c8:fe:c6:d5:d6:
a4:94:ed:2b:3f:ab:ca:95:ab:dd:aa:fe:ac:3b:6e:
b7:69:50:bd:db:f3:5e:2b:d3:9e:d9:4a:3d:f3:36:
60:08:8d:d3:11:6b:ab:45:28:4e:93:9f:ab:6e:39:
ab:68:1a:6d:a7:62:24:08:93:fb:2c:fa:88:8c:25:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:70:F3:EF:76:DD:08:05:CF:69:0F:78:49:E8:01:99:5A:55:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:19:bc:e5:0e:3a:09:a9:3b:15:ae:e2:0f:71:8e:c8:dd:2a:
f3:c8:a2:42:9f:52:90:3b:da:57:b5:3c:ee:80:75:04:03:c6:
51:6c:d6:ec:5c:a3:b6:a1:28:6c:5c:ca:3c:0f:de:3c:5d:05:
d9:78:16:9f:ff:ac:b8:d2:d8:28:d4:23:21:36:6b:6a:c8:a1:
cc:72:0f:f6:2e:3e:b9:52:56:55:8c:75:82:9a:87:c4:9b:18:
8c:48:6e:4d:8c:b2:89:f5:77:3e:2c:4b:73:2c:8b:8f:43:16:
dc:25:f7:ba:c2:b9:54:24:4b:5a:4e:e9:18:24:2e:50:5c:9d:
45:b7:7b:2b:1a:9f:22:53:cf:f3:61:80:14:98:2b:eb:1f:b4:
2d:81:5f:c4:b5:b0:ad:89:83:3f:71:b7:92:02:ed:88:a9:32:
de:53:13:d4:6a:57:57:85:f7:0e:cc:9a:35:b0:c1:bc:dc:3a:
80:1a:91:f4:42:a7:ad:d6:4d:be:b3:86:03:3f:cb:18:2f:b4:
01:be:27:da:3c:68:c6:b7:ac:ce:a7:d1:ca:e8:9e:6d:76:65:
11:cf:13:05:ec:dd:e1:b1:16:6b:10:84:3c:37:eb:16:84:78:
dc:6b:d2:d1:be:a6:a1:75:8c:ac:3a:f2:10:37:82:39:1f:14:
59:92:f7:d8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdEh75a50paNiMuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzE0N2M3Y2QtMmMwOC00YmNkLWIxNjctZThkYjQyNGFmNTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOdmQ+WiBcjpcpQ6LgZxSykg89aUy5tVTapq
vuzsof9lhcD00S3ss2LPhwSGewKclDG6WF1fatt+m1XPRtiPYPAnihN/wdF6Z3cN
s8Z4uAUgF5Vu4nVCFWDb7hJ5X9jMQ71vgTMKJViOu1kKy5CuR+ymbx5uvNgCfDN0
u8QtA13CgRZeJ5SOf9T9TSLTXThTREiYlEZM7siyXFCpVy+zb48ejU+VcpJAHfBS
60o1xSXt6d1hDF5jZBiXTD/9yP7G1daklO0rP6vKlavdqv6sO263aVC92/NeK9Oe
2Uo98zZgCI3TEWurRShOk5+rbjmraBptp2IkCJP7LPqIjCWkPwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNfhcPPvdt0IBc9pD3hJ6AGZWlVlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjI1ODRiMTEtZTJlNy0z
YTFkLWI1NzgtMzE0OTVlYjlkNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB3GbzlDjoJqTsVruIPcY7I3SrzyKJCn1KQO9pX
tTzugHUEA8ZRbNbsXKO2oShsXMo8D948XQXZeBaf/6y40tgo1CMhNmtqyKHMcg/2
Lj65UlZVjHWCmofEmxiMSG5NjLKJ9Xc+LEtzLIuPQxbcJfe6wrlUJEtaTukYJC5Q
XJ1Ft3srGp8iU8/zYYAUmCvrH7QtgV/EtbCtiYM/cbeSAu2IqTLeUxPUaldXhfcO
zJo1sMG83DqAGpH0Qqet1k2+s4YDP8sYL7QBvifaPGjGt6zOp9HK6J5tdmURzxMF
7N3hsRZrEIQ8N+sWhHjca9LRvqahdYysOvIQN4I5HxRZkvfY
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:53:48 2026 by rpki-client