Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa
File: 4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa (raw, json)
Hash identifier: nZsDgHbjb8dVHlS1OjT8/aQuKI+p/jZCVc+nPRdljTY=
Subject key identifier: 5F:29:E4:77:2D:68:67:BF:FC:C6:86:7B:08:9C:9A:02:D6:3B:F9:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F6F22D5FE9265DFCEF4D0F240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 36626
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Oct 2026 15:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:22:d5:fe:92:65:df:ce:f4:d0:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=759fc6e1-638f-463f-925f-65a6c0b4a78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:6e:1f:d1:38:e1:95:08:63:45:b8:34:72:
0c:f8:ef:12:5b:31:71:86:86:8a:22:55:7c:ca:86:
fd:18:ed:0f:bc:5b:6e:6b:10:7f:a9:da:1b:a3:78:
0d:08:b9:c2:e0:29:85:67:81:5f:19:f9:06:3b:91:
1b:b9:83:f8:b3:90:fe:63:02:05:47:4d:77:ae:75:
1f:43:b2:54:e7:9b:53:e0:ee:89:aa:9d:34:52:1b:
5c:41:ab:38:d5:b0:a3:79:22:74:60:d7:34:f6:ec:
a1:14:c9:e5:7a:48:a2:16:33:b4:f9:44:9f:3c:73:
d9:37:18:04:c3:d3:6a:e7:6a:44:e3:0d:3a:52:77:
a4:c0:d7:c5:88:e8:01:e2:f5:54:51:eb:cd:0a:1a:
2d:01:c3:cb:88:f2:e7:f9:66:4b:be:cc:ea:18:5e:
3b:68:52:80:4b:a2:a7:0f:7b:58:b2:80:bc:3f:de:
7a:c8:af:a2:ed:2c:b5:35:5b:18:ee:b5:da:58:e7:
06:fa:bf:8d:4d:ec:0a:01:51:c3:99:c0:10:ab:1e:
54:3e:83:3a:b6:5d:d4:97:00:4b:d2:ee:f8:32:19:
7d:38:1a:c4:3f:fc:cb:53:64:71:39:73:50:8c:32:
86:d3:d3:6b:91:d4:15:4f:1f:ca:d3:cf:b6:7d:4c:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:E4:77:2D:68:67:BF:FC:C6:86:7B:08:9C:9A:02:D6:3B:F9:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:c7:6e:6b:46:49:6e:8b:4d:d9:f6:48:f6:b9:01:cf:fb:e2:
a4:b4:0c:f3:41:cf:ee:59:d6:bc:37:ef:be:6e:f5:0d:c4:d8:
24:92:b2:84:b0:1d:cd:0a:4a:d6:53:69:4a:35:cd:c8:0e:a0:
ca:6c:49:2d:3b:7e:b4:63:e6:a8:d9:ff:6c:f1:1f:7e:db:dd:
c3:7c:3f:bf:e6:d4:2b:ea:eb:fb:b0:fb:99:de:29:12:05:21:
d0:46:25:76:89:5d:81:dc:cf:4e:d4:8c:b1:2c:82:1b:01:c5:
1d:6d:32:ad:7e:c3:85:82:15:64:d1:aa:f4:5c:cf:e2:91:bd:
6c:61:3c:72:75:b9:d9:ff:7d:49:86:ea:90:80:0a:a2:4b:79:
0e:2f:54:02:83:19:4a:39:aa:b5:1d:03:50:5f:c0:bc:03:ff:
e6:7f:cc:49:4d:73:ab:77:9e:45:e7:ca:c6:7e:6d:b9:62:17:
04:b0:59:55:a7:d0:c8:1d:90:3b:c9:e4:d8:eb:aa:2f:aa:34:
59:8d:9e:34:75:9c:1e:47:1f:74:e6:7e:43:81:0e:9b:7e:7e:
3f:8b:7f:de:e0:e2:d6:ee:ae:9b:5e:79:ce:46:88:e2:f5:90:
7d:38:4a:ab:21:72:e1:4b:79:83:8a:5d:16:1e:e9:bc:45:a1:
db:ef:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:55:46 2026 by rpki-client