Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/f1e14e13-91c7-37bd-9d89-6bef689b85f3.roa
File: f1e14e13-91c7-37bd-9d89-6bef689b85f3.roa (raw, json)
Hash identifier: Tt0QkodzgSi37PvD7CJHLkvyxaHJ8c7v7X09Z8sDJrw=
Subject key identifier: BB:CA:D7:88:F5:02:97:63:13:DF:67:B7:7D:65:0F:0C:25:C0:13:DF
Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial: 010D0C9F4328584D1DE48FFBDE92E18BD6E100FC
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/f1e14e13-91c7-37bd-9d89-6bef689b85f3.roa
Signing time: Tue 10 Mar 2026 01:00:31 +0000
ROA not before: Tue 10 Mar 2026 01:00:31 +0000
ROA not after: Mon 08 Jun 2026 01:00:31 +0000
asID: 20326
IP address blocks: 142.214.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Mar 2026 20:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1d:e4:8f:fb:de:92:e1:8b:d6:e1:00:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Validity
Not Before: Mar 10 01:00:31 2026 GMT
Not After : Jun 8 01:00:31 2026 GMT
Subject: CN=26fd605c-a542-46f5-b9bd-9ffe92d0f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b9:75:14:08:72:9a:d5:37:2b:66:13:99:bd:
95:36:08:79:7c:24:59:10:7d:43:7d:37:a6:02:0b:
75:f3:a0:52:78:27:fc:54:0a:66:3e:48:02:b1:c1:
60:74:e1:7b:40:d4:dc:29:a7:58:73:50:63:72:fb:
c6:79:6a:38:c1:47:50:db:ad:a3:b5:45:4d:6e:ae:
ba:5c:36:33:6a:20:b6:c9:73:45:19:16:d4:b0:9e:
47:8b:e1:51:3b:71:aa:5e:34:24:12:68:c4:2c:52:
30:7d:64:0c:46:e7:00:d1:b1:d2:35:51:ad:7f:b0:
60:70:47:df:a0:08:f2:8f:9f:7f:16:e5:1f:13:f3:
08:d9:a6:61:d9:52:a3:f0:a8:22:d6:bf:27:88:19:
88:6a:1e:0f:02:55:4b:04:df:89:e0:95:43:00:bf:
77:22:06:7d:30:76:16:2d:e5:ea:6b:df:be:49:53:
94:f9:04:61:4d:16:3f:6e:2a:91:40:75:03:aa:2b:
eb:ad:cc:61:91:83:1f:4a:d5:37:54:72:de:98:26:
d8:18:f9:89:02:5c:0a:31:87:6e:26:d9:b4:97:48:
0c:9b:db:dc:4a:f4:fe:39:7e:f5:91:3a:35:3b:0a:
d9:ec:42:24:5e:94:5f:f3:9e:79:d3:aa:07:90:df:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:D7:88:F5:02:97:63:13:DF:67:B7:7D:65:0F:0C:25:C0:13:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/f1e14e13-91c7-37bd-9d89-6bef689b85f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
X509v3 Authority Key Identifier:
keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
sbgp-ipAddrBlock: critical
IPv4:
142.214.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:3b:77:e8:86:86:ac:7c:d1:46:a3:16:50:a3:22:6e:bb:15:
31:ca:3a:36:a7:5c:46:0d:4e:8d:97:91:4e:aa:11:86:ba:26:
e8:ca:e7:2e:9d:ff:8e:c5:58:64:db:04:bc:79:c7:91:b3:4b:
b7:6e:cd:1e:5a:8b:9b:73:94:c0:3a:4f:2d:6d:c2:24:47:15:
75:3a:42:e9:ef:0e:45:b0:38:d1:b5:6e:5d:be:0d:f5:17:17:
52:0c:00:58:8c:8d:c8:37:02:cd:ca:de:94:82:65:90:8e:e4:
f7:1a:69:95:91:48:2c:1f:84:81:8a:2a:52:db:69:64:85:69:
2a:4e:57:94:18:b7:39:b4:6c:5c:5b:14:ac:e8:78:ba:94:70:
85:94:c2:51:ab:b7:a7:48:17:f7:56:c0:d0:73:48:19:e4:4c:
da:87:e9:51:54:db:d8:22:de:d3:50:6d:23:6d:d7:9d:ca:c8:
27:91:cb:0d:62:f8:2e:21:27:12:20:ab:48:cd:2b:2a:e6:f2:
08:2c:f9:f9:0d:20:d6:b1:95:63:33:bd:23:e9:71:97:4b:03:
08:66:9a:fe:cb:be:56:7a:e1:de:8f:79:50:58:7e:af:cf:bd:
66:c2:59:a8:fb:08:90:41:59:6c:74:fc:a4:fa:06:d9:be:9a:
8a:4a:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 22:08:55 2026 by rpki-client