Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa
File: 9dc11acf-35bc-346d-b4f0-3b8229536a34.roa (raw, json)
Hash identifier: PHZyab2pShhzAlY+Cm56eraRksC0E4ZcqP3n5oO94Sg=
Subject key identifier: 36:9E:F4:71:6C:3F:60:1D:1B:F4:4E:D5:02:FB:66:EF:B4:05:53:B8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584C602BF2A85C06B8BA97AFFD80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 396356
IP address blocks: 192.253.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jan 2026 11:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:f2:a8:5c:06:b8:ba:97:af:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=ea87521e-289b-4695-93bf-713b24849b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:1f:16:7e:45:90:db:e7:77:ae:70:af:05:
ce:be:7e:96:b8:8a:15:38:2d:2f:a6:b0:f8:4d:d1:
9d:4f:76:c8:d7:b2:44:28:da:cb:fc:36:3b:98:81:
69:5e:f5:c5:f9:a1:73:65:3b:73:03:e0:74:20:80:
17:b6:c2:8b:c0:b2:53:97:7f:f2:84:f4:0a:1f:01:
7b:1d:94:45:94:7e:51:e2:8c:2c:c2:38:d3:39:21:
4b:71:cd:6c:1e:01:8d:76:b3:7f:45:32:27:28:df:
04:01:be:d7:60:0c:5e:06:ed:2b:d2:0d:b9:ad:d6:
fa:c7:2f:e2:72:fd:0d:78:2f:a8:b8:06:64:53:e4:
17:46:11:82:24:12:4a:39:b6:43:8b:1a:72:25:b9:
a6:d7:b8:aa:32:ce:72:de:36:49:99:da:41:61:ea:
01:ab:e4:4a:e5:ce:aa:e9:16:30:0d:f4:62:df:57:
92:e8:d6:ce:2e:f4:b3:1b:16:a4:1a:74:2a:1d:fb:
aa:0f:3b:ad:2a:f8:c4:4d:22:0d:bc:ba:a7:ec:ea:
4d:7e:54:1a:25:6e:c5:35:95:aa:dd:7e:1d:62:d2:
3c:73:f2:c4:6e:6a:91:00:eb:6a:16:4f:bd:2f:e0:
04:cb:ff:26:e5:fa:30:ea:2b:ad:56:73:9a:73:b1:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:F4:71:6C:3F:60:1D:1B:F4:4E:D5:02:FB:66:EF:B4:05:53:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:1a:aa:7f:cf:a9:ca:ad:f1:38:42:a8:a5:05:a5:0f:48:0e:
3e:22:bd:80:7a:ce:bb:f8:69:04:8e:04:cd:70:a0:21:c6:a8:
3a:e9:9b:b6:15:2e:e5:58:da:b6:b2:ef:c0:39:a9:97:88:7b:
f2:c5:d1:60:ec:27:e7:a5:3d:66:0f:68:7b:4f:51:9b:cb:ca:
ed:99:9b:16:da:cb:a1:46:1e:af:e5:89:87:4b:bf:f3:e9:26:
e2:49:36:25:81:a4:9a:79:ae:3b:d7:7f:41:a1:c8:da:73:35:
07:d8:e4:e5:37:d7:46:2e:53:bf:f3:53:72:19:d0:fe:26:1f:
4d:a8:ff:7a:8a:36:9b:3e:ea:b6:01:6d:8b:5b:b0:d5:90:58:
1a:cf:42:31:00:ef:f6:83:b3:05:dc:ba:d2:e1:31:25:66:a9:
20:fb:46:ec:dc:68:c1:e9:2b:54:cf:1a:1a:bc:cc:f3:15:0d:
34:6a:b1:37:69:4a:15:2b:d5:68:b0:0a:54:3e:38:6a:d1:93:
72:21:9b:40:3c:74:13:8d:af:62:6e:45:16:f2:48:2b:bf:8f:
f9:04:d5:30:a3:d0:1a:8b:e7:5d:71:a7:d6:77:ff:c6:e1:d0:
09:85:8c:a2:bc:a1:7f:92:26:1b:bc:7c:21:29:ee:2c:e5:6a:
40:d8:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:26:42 2026 by rpki-client