Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b603643-37bf-3492-aabc-d5ae63f723b8.roa
File: 5b603643-37bf-3492-aabc-d5ae63f723b8.roa (raw, json)
Hash identifier: MbnoHjIMKEzRB0XaBjnEetf+zIiokcTvjb15eNIXudg=
Subject key identifier: 86:06:A8:76:74:D1:A2:22:55:2E:E8:A7:FF:7A:6A:6B:BC:E1:52:2A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BA90C388E2E816B848D5B1400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b603643-37bf-3492-aabc-d5ae63f723b8.roa
Signing time: Mon 27 Oct 2025 11:43:56 +0000
ROA not before: Mon 27 Oct 2025 11:43:56 +0000
ROA not after: Sun 25 Jan 2026 12:43:56 +0000
asID: 216378
IP address blocks: 172.94.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Oct 2025 12:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:0c:38:8e:2e:81:6b:84:8d:5b:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 27 11:43:56 2025 GMT
Not After : Jan 25 12:43:56 2026 GMT
Subject: CN=dfd1a204-9965-4a7c-b5b2-e25f963426d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:86:05:69:02:d0:25:57:be:9b:35:d0:fa:
11:dd:7b:d9:8e:b4:6b:86:97:f7:02:4d:bf:9d:dd:
05:b4:83:ab:df:85:fb:ab:d1:71:db:c4:c7:fb:5d:
62:bb:04:c9:6f:f5:cc:4a:4b:7a:78:ed:d2:82:d4:
c2:bd:1e:f1:28:73:70:ba:7d:aa:28:5c:e8:fc:4a:
31:c6:8e:51:66:75:2e:48:84:d2:af:59:9a:8f:85:
51:a5:5a:88:be:65:a9:96:b9:af:5f:a6:a4:be:da:
9e:23:5f:97:58:fe:0f:b4:ae:3e:29:e4:2b:50:e3:
80:1f:e1:98:ed:36:d6:eb:f3:37:45:d0:e7:57:c1:
78:b4:9e:24:ca:34:de:f3:5e:51:00:ef:70:9f:e9:
a3:5e:15:5f:2d:57:b9:be:e8:75:87:08:49:93:67:
32:4b:a7:66:c9:8d:85:27:aa:00:46:b8:7d:1a:be:
31:03:95:9e:6f:60:94:2c:f8:ea:ed:15:1e:91:fe:
0a:db:3e:55:69:be:bb:8e:32:33:1f:f0:a3:89:62:
24:fd:d1:58:dc:45:01:1e:4a:ba:96:d8:fe:a4:f0:
42:f2:ea:f7:f3:8d:c0:42:d6:92:c3:94:25:0c:39:
42:a8:a6:33:fd:a5:3b:8b:81:09:0c:86:b8:f6:87:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:A8:76:74:D1:A2:22:55:2E:E8:A7:FF:7A:6A:6B:BC:E1:52:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b603643-37bf-3492-aabc-d5ae63f723b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:8b:e7:d5:24:87:77:87:fb:bc:a1:54:49:6a:6d:89:54:4a:
a9:03:4b:83:d6:19:4f:1d:5e:33:35:4c:c2:e0:bb:df:06:d4:
96:e5:23:2b:e5:ce:20:04:26:61:31:62:f3:0e:0b:b4:9c:65:
99:b4:21:cc:5f:ce:2c:95:74:a1:be:b8:4a:3f:e6:34:3d:4b:
b0:a0:bc:86:a3:ca:14:f0:bc:de:ae:f4:aa:95:4a:0a:7a:82:
37:51:bd:9b:0f:bb:9d:83:5b:cf:48:5d:2e:e7:09:78:05:cb:
b7:d4:b4:78:d6:ce:7f:bf:25:f5:aa:ce:a9:c3:ac:e9:0a:5d:
71:f2:85:5f:5c:4b:28:07:93:b0:6e:00:33:db:71:24:00:b6:
09:a2:3e:74:bc:c0:9f:a8:8a:18:25:88:24:0e:7b:86:12:57:
d7:ac:06:c9:3c:1e:4e:81:b6:1e:d7:4f:d3:54:cc:0e:56:d4:
38:c5:3e:f9:c6:30:0b:74:09:b0:41:cb:fb:1d:fd:7e:36:2e:
b4:79:c1:fa:55:f1:ab:6d:1b:fd:12:07:b1:1f:28:f0:80:02:
d3:3d:57:89:6f:b3:b8:3d:85:d9:75:43:54:d2:d2:b4:15:78:
e5:c5:d8:1c:2c:0b:19:c3:19:9e:69:14:20:9e:46:ef:86:a7:
e5:c5:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 13:27:06 2025 by rpki-client