Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f68b4cff-5a66-31ea-9f49-7ff911d92a3d.roa
File: f68b4cff-5a66-31ea-9f49-7ff911d92a3d.roa (raw, json)
Hash identifier: ooeQ5p+VTs83xq88HynO2sOw16y8t3Z+IuhaEu23xYk=
Subject key identifier: 34:01:95:67:5E:60:DB:B5:8D:11:F7:3C:4B:04:0C:84:98:7B:80:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49867B4D861C0702CEAD3E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f68b4cff-5a66-31ea-9f49-7ff911d92a3d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397209
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Oct 2026 15:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:7b:4d:86:1c:07:02:ce:ad:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=92f6a112-16ad-4783-aff3-4ebcc2610715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:c6:63:60:2d:cd:f2:b4:5d:10:66:00:f1:
37:0b:7c:21:a6:c1:36:4c:76:b4:ae:5c:ce:40:a8:
ca:67:eb:dd:84:cb:6c:2a:1e:25:7d:78:f3:f6:da:
1b:b0:a6:57:53:e9:c5:79:e0:6f:65:f6:c0:1d:a0:
b3:47:6b:85:c6:cf:f2:e8:29:74:59:52:4e:b6:4f:
89:7a:b6:35:3f:d2:9c:49:3c:cf:67:d8:38:c3:61:
7f:59:a7:67:c4:d3:89:33:db:8a:7b:42:f9:5c:e4:
c1:de:5f:a4:d5:44:d1:72:61:44:1c:3a:9a:22:2e:
d1:5d:b9:79:27:b7:de:a0:fb:62:6d:a0:c7:65:2f:
02:90:41:3c:74:75:c1:2f:0a:b1:6d:5f:c7:1c:9c:
50:54:76:f0:83:90:4c:5d:48:db:8b:7f:69:61:8f:
0b:3d:c3:e4:51:d7:23:3f:44:36:cc:38:de:0b:df:
8b:32:c7:d7:76:9b:3a:99:d0:51:b5:aa:fb:f9:9e:
a8:49:68:d6:1a:80:fc:9f:32:58:1e:8e:88:36:e0:
14:be:2d:1e:05:70:63:40:70:97:47:4f:7f:7c:26:
2e:9e:18:cb:1f:0f:4b:d6:87:c5:de:c9:77:af:72:
7c:3b:bc:d0:b5:d9:5b:0d:36:b7:0d:7a:0f:c4:72:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:95:67:5E:60:DB:B5:8D:11:F7:3C:4B:04:0C:84:98:7B:80:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f68b4cff-5a66-31ea-9f49-7ff911d92a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:54:3b:1f:f2:19:f1:d5:70:ef:01:a8:d5:5a:a9:22:7e:df:
26:39:1e:ef:1a:e0:13:0e:24:2f:e2:b1:b1:f9:e7:cd:76:0f:
1c:0b:db:2e:5b:4e:0d:39:14:26:f6:59:68:bf:a1:a8:53:6f:
d0:a1:ff:7f:7b:39:5e:bf:43:db:56:2f:83:60:8f:dc:4d:36:
cf:c6:da:d6:7b:df:5d:f8:15:71:18:fe:84:91:d3:f4:c5:1a:
6d:0d:75:7c:62:2c:77:06:2c:c3:47:f2:df:56:5a:88:1e:ee:
1d:ce:58:a6:24:30:92:5e:18:84:79:76:b4:69:8a:dc:b8:50:
e0:a0:ca:f3:bf:0a:16:f3:0f:d7:ab:1b:52:3d:99:11:91:b5:
82:2d:f3:7f:2c:4c:1c:17:e4:33:eb:b9:9f:40:c5:68:02:51:
b1:2b:4c:f2:24:a4:f1:c0:6c:e6:93:75:ac:6e:74:11:45:46:
d7:01:98:a2:57:9e:48:e1:5d:3b:e7:27:24:b8:6d:61:89:64:
97:f8:7e:a1:70:b6:a6:df:c5:fc:37:12:8c:b3:8a:6f:ad:14:
62:eb:cf:d4:35:bb:c1:83:33:36:a1:1d:f1:bf:7a:62:86:4b:
fe:17:f1:bc:56:db:53:2a:4e:15:ac:87:a9:38:68:44:49:86:
a0:b4:50:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:20:34 2026 by rpki-client