Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa
File: 5256def5-4931-3d31-9c86-b0f630cdf8a0.roa (raw, json)
Hash identifier: +xH3wJSpn4klJFBafcGBrFitkjC3ABZvwqYZX/JVCUQ=
Subject key identifier: 11:D1:CC:03:49:0D:A6:8A:ED:D1:DE:3F:2D:1B:E4:05:D1:25:B7:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F66C2C0C9485AD5DE1A480000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 396542
IP address blocks: 2001:502:cbe4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Oct 2026 15:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:c0:c9:48:5a:d5:de:1a:48:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=0558d527-dcb4-4879-a6b1-5b13ec4d3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:f9:19:2b:a6:15:77:05:c9:a4:08:a1:49:
4d:6a:df:4a:f1:f3:45:f3:38:5b:6d:97:69:69:c4:
7d:c5:3e:d6:2c:01:0a:3a:94:4f:12:9d:d3:a3:38:
30:f9:28:49:50:c4:97:7e:06:a8:73:61:a2:17:6f:
f0:6a:dc:0d:51:b2:c4:e7:87:03:5b:53:b3:ac:66:
41:06:22:aa:66:70:d3:a9:f0:a8:9f:f8:ff:d8:97:
ec:11:f0:b6:37:90:38:f8:2d:30:6d:84:f9:c2:06:
0c:da:07:70:98:b4:20:66:2a:df:a5:a2:67:13:79:
2e:f8:d3:b0:e1:2f:6f:9b:9c:53:95:ae:af:7a:ce:
a9:89:9c:0c:f6:ed:06:f2:81:16:c1:31:3c:4e:31:
68:cd:72:54:b0:ad:1d:86:c2:24:6b:9b:53:b9:f7:
82:f5:04:d1:42:da:0c:4f:67:0f:5d:9c:6c:aa:44:
9f:35:f9:ef:c0:02:9f:18:12:6f:1d:39:0f:0b:7a:
36:69:1a:4c:53:68:04:e4:8b:9f:49:a7:56:7f:7d:
d5:b6:ca:4a:5e:b3:c9:d8:38:9c:cb:a1:2c:71:46:
0a:95:61:b9:7e:a0:28:c8:cb:fa:23:55:5d:62:cb:
fb:b2:60:90:76:3a:db:a0:eb:f1:76:24:f4:76:b4:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:CC:03:49:0D:A6:8A:ED:D1:DE:3F:2D:1B:E4:05:D1:25:B7:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:02:4c:7d:15:d0:b2:c6:72:f4:70:ba:e7:d1:46:f8:a9:99:
f1:30:6c:36:43:02:48:84:1d:96:66:f0:8a:2a:16:85:ee:28:
c5:28:51:88:79:a6:9c:02:f9:65:dc:61:fc:72:e4:96:11:c4:
ad:f9:7a:e5:18:2d:61:13:33:2d:a8:a3:d5:8a:c5:95:5b:e7:
21:87:9e:68:5c:76:2f:e0:01:6c:ea:65:dc:13:29:85:3b:2a:
4f:66:18:c1:e0:5a:c0:39:23:17:db:19:74:e4:32:fe:1b:1d:
a4:c4:52:14:61:de:29:69:f3:34:a5:2b:a1:57:0b:30:4e:bf:
56:aa:3f:5d:60:5e:03:21:a8:00:cc:ef:e9:9f:7f:2e:61:ce:
f4:33:60:ee:9e:19:e4:27:a3:72:d5:ab:de:ca:16:8f:62:99:
2f:92:1c:bf:39:86:a2:20:86:b0:c4:db:5e:49:79:af:7c:ac:
26:35:36:ec:96:56:29:3e:99:a7:5c:32:6b:af:fd:5d:d6:bd:
02:74:f8:c5:82:74:1d:aa:b9:45:4a:b4:ad:d3:fd:ec:07:1c:
bb:63:e2:94:08:25:ae:c1:3d:96:29:82:52:1a:f4:26:95:13:
2b:51:27:4a:e5:01:52:aa:48:5e:ac:d0:94:73:a5:4b:aa:f3:
a8:c0:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:19:40 2026 by rpki-client