Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa
File: 4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa (raw, json)
Hash identifier: Jd4GvWd3uBdo26x1eEh7KpqEuOhazOSwqorWmNU4RNM=
Subject key identifier: AC:41:29:63:B2:93:71:2E:E6:31:C9:1B:2D:6B:F9:BC:98:8E:7D:FB
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584C95370E81C8C46069C0870E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa
Signing time: Tue 20 Jan 2026 02:00:29 +0000
ROA not before: Tue 20 Jan 2026 02:00:29 +0000
ROA not after: Mon 20 Apr 2026 01:00:29 +0000
asID: 401152
IP address blocks: 198.20.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jan 2026 23:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:95:37:0e:81:c8:c4:60:69:c0:87:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 20 02:00:29 2026 GMT
Not After : Apr 20 01:00:29 2026 GMT
Subject: CN=766a7645-93eb-4654-a190-8c2f0684b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:2a:58:39:57:6b:00:f8:0e:2a:c5:ec:29:
ff:f2:a2:c3:4a:6b:a6:15:f2:c2:53:13:e1:a8:ef:
f8:c6:b5:d2:cd:35:c7:93:03:72:1b:a2:cb:1f:03:
2f:fa:11:23:eb:fb:ca:67:36:93:05:3c:a0:66:74:
fa:bc:ea:16:cb:fe:07:23:99:64:46:52:ad:57:bf:
e9:3e:66:4a:80:47:85:f4:b2:9d:72:54:07:da:85:
aa:96:00:62:d4:8b:3c:0b:7c:93:a7:45:92:1b:85:
5d:82:f1:e6:05:67:74:5b:99:a8:38:bd:fa:24:fb:
ee:51:f9:b5:b0:90:48:db:df:5d:0a:28:81:37:f4:
f9:91:4a:bd:8c:b0:c9:d6:57:74:45:3f:59:98:61:
96:ad:5f:2a:2e:57:93:fa:f1:fe:f7:2d:e5:c7:c9:
3f:69:89:7a:51:b9:1e:4e:2a:69:5d:34:07:f7:38:
6f:e7:76:46:3d:d2:99:39:08:95:ab:a4:72:7a:fa:
cb:fb:56:1d:42:8e:a4:2e:bf:9f:e6:26:23:9f:a3:
b0:38:15:86:f0:c2:a1:00:5b:bc:57:20:2f:a3:ec:
99:d1:5b:9f:bb:63:36:18:10:79:f5:6c:cc:c0:bf:
4b:40:3c:04:e8:3a:d6:56:5d:1e:ba:11:27:d0:7e:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:29:63:B2:93:71:2E:E6:31:C9:1B:2D:6B:F9:BC:98:8E:7D:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a2c35e9-e541-31fc-b4bb-eee0ffc56a59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.20.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ba:45:9c:dd:0a:33:34:b6:9e:05:36:e2:72:ed:98:e9:80:
e6:81:17:52:28:f6:99:77:4f:d5:79:37:77:27:be:67:55:92:
32:86:67:7d:d2:27:9d:55:1a:c6:ac:56:12:f3:c2:b1:dd:93:
b5:2d:a6:12:25:e6:a4:27:0c:ed:6d:3a:9b:36:ff:17:c1:6c:
43:b6:b2:7f:8d:dc:49:2b:d4:4e:20:f9:59:bf:05:60:c6:d2:
33:f5:32:53:e2:86:a5:3f:ba:6e:2e:29:d7:d7:e7:69:53:91:
4c:27:03:cd:a3:02:38:18:36:d0:f7:a1:17:c6:27:f8:9d:e9:
3c:f5:1f:a3:33:ae:4f:86:2e:28:f8:7a:df:7b:36:57:a9:74:
20:e1:e4:16:65:5e:3c:7c:fe:fe:5c:10:dd:1b:c1:57:2f:90:
35:f4:2b:29:e4:28:66:f6:4c:dd:b9:33:d5:3d:67:f0:10:45:
c2:9b:d0:d5:bd:ad:47:9e:6d:9e:30:fe:8f:33:98:18:2a:8d:
30:f8:9d:92:07:f2:26:53:ed:ca:80:0e:7a:48:fc:45:1b:61:
0d:94:1b:69:04:8c:bc:08:b6:c9:65:a6:75:8a:04:b1:ce:bb:
84:d2:f4:a4:5e:e8:a9:a2:a0:ce:0e:88:43:ab:a0:8b:c6:eb:
93:d8:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 10:28:05 2026 by rpki-client