Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa
File: ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa (raw, json)
Hash identifier: Br7rA8htKFT0Cl7K+ExLaQ2WsuX+u5uldPdrvriC6ow=
Subject key identifier: 0E:3D:11:EF:C1:03:A5:51:7F:31:B2:33:DB:5E:30:F7:9B:05:54:6C
Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial: 010D0C9F4328584D1B19E295225D0EFC47AEDFC0
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 20326
IP address blocks: 216.170.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Mar 2026 13:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:19:e2:95:22:5d:0e:fc:47:ae:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=e2b343cd-6a79-44cc-8ba8-ce6c893f5774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0d:23:0f:5f:1d:88:de:e1:03:0b:af:93:78:
34:c2:98:39:f9:26:1c:a3:dc:33:0c:60:ff:77:0f:
db:35:99:66:50:3e:3e:e5:cb:c2:62:b2:29:2f:53:
86:4e:44:c2:14:a7:ff:ec:05:af:5f:8f:a3:c4:b1:
5c:b5:90:cd:11:1e:ef:44:61:ae:05:e2:21:77:e7:
1a:12:9e:52:b3:17:80:d4:84:19:14:36:56:87:46:
77:9a:74:45:97:98:eb:33:1c:87:74:17:16:b7:46:
5e:b3:47:da:b7:54:43:3e:a6:9b:d4:c7:e2:64:a5:
f6:c9:8f:86:72:0d:e2:61:f3:76:dc:77:05:66:8d:
21:9d:82:4d:53:91:e0:2b:71:3c:8c:75:c2:8c:c6:
81:fd:cf:ac:ff:cd:92:9d:72:62:52:db:22:4f:a0:
1d:7f:d2:b1:90:4a:cb:88:c5:91:43:c5:cf:45:21:
bf:5f:37:58:3b:b9:7b:4c:5a:70:82:c0:e4:16:b4:
39:2c:18:19:73:4c:c8:bf:61:9c:fc:e3:e5:fb:63:
45:9d:54:1c:d5:56:16:61:3f:7b:15:fe:f6:c0:69:
95:b0:43:f7:1c:80:aa:06:9d:fa:29:e7:47:f3:bf:
5d:88:af:5d:ca:37:4c:f9:6d:03:b5:ef:8a:94:0a:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:11:EF:C1:03:A5:51:7F:31:B2:33:DB:5E:30:F7:9B:05:54:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl
X509v3 Authority Key Identifier:
keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:68:18:9e:4a:07:72:7b:40:58:b8:a3:db:c0:ff:b2:c0:33:
a9:9a:a5:a1:36:4e:fd:02:ae:4d:1b:37:cc:e6:31:af:47:9c:
57:48:e9:db:8d:bb:62:7f:dd:06:4c:a4:17:a3:80:e1:02:59:
0c:6d:6c:2b:bf:bc:61:f8:d5:8f:22:17:16:de:44:42:3a:9d:
1c:83:d0:fc:44:de:24:6c:6e:20:7f:62:52:42:22:06:04:19:
44:95:81:75:9b:18:56:d0:7f:9c:47:19:6b:99:87:6d:1e:e7:
b1:64:6a:d2:20:78:06:81:37:29:e3:f0:de:fa:f2:41:2d:d2:
9c:2d:c6:9a:f1:38:fc:92:a1:c2:9c:32:ac:2f:a9:71:e5:51:
79:4d:88:d1:4f:41:b2:ef:b1:e1:a4:c1:ea:74:35:c9:3b:5b:
9f:17:21:c8:1e:ed:cd:a8:d7:37:a7:b8:9c:69:e2:96:f2:a2:
e6:9e:6d:a2:aa:46:69:51:f8:47:a5:72:0f:5d:fa:4b:66:f2:
4e:1d:f1:1e:5a:ef:1c:35:63:5a:9d:0c:bf:5f:db:33:2a:fd:
e0:4b:1a:65:4d:ab:81:c4:dc:00:b6:2a:40:15:2f:45:c7:8d:
ba:ce:30:e4:c6:f8:85:2f:6d:05:ee:0f:67:2c:7e:2f:ae:81:
ac:41:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 08:29:33 2026 by rpki-client