Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa
File: 8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa (raw, json)
Hash identifier: GHFf9AMqmABVLXrn/dhwysOZ++50+EBBZEP1Gc4p8WQ=
Subject key identifier: 03:D0:4D:15:E4:73:33:3C:EA:C8:59:9B:16:27:FF:E3:60:DD:4A:57
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D15A24C6D695F7D3EFD5C1180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 153523
IP address blocks: 38.86.230.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 24 Mar 2026 17:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:4c:6d:69:5f:7d:3e:fd:5c:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=96465d31-b8e3-44f0-bc61-dcda311170de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:59:85:cf:d1:52:89:63:c8:01:8c:80:e4:
e8:1b:e1:f2:a0:b8:46:e3:c3:ac:69:74:34:6e:be:
a4:2e:18:4a:d3:b1:f7:17:f0:8f:d2:5e:88:a6:00:
19:4e:79:e6:52:4c:b7:8d:26:1b:d2:9e:7c:a0:9b:
4e:22:db:6b:bc:83:1c:14:b0:4b:ed:45:67:03:8a:
c4:91:25:a6:14:54:4a:55:99:45:90:90:fb:94:04:
b9:fe:c6:78:80:7a:6a:4a:18:c6:06:4e:40:30:ec:
9e:8b:bc:17:fc:1a:d0:47:9d:41:f8:8d:31:fd:d3:
b8:70:ec:65:3b:cf:75:6b:14:38:9f:c5:8e:b9:c5:
91:1f:ae:16:b6:71:c8:72:f1:1c:7b:0f:23:13:f8:
02:07:48:c0:0c:1c:bf:a6:04:c7:5d:28:08:9b:6d:
6b:1e:39:cb:ad:b0:0e:cb:21:74:73:2a:93:3e:43:
4f:ff:1f:0c:d8:82:7b:cf:d6:70:e5:91:32:68:bd:
a1:dc:52:32:5c:68:ac:e1:fb:9c:8c:1b:3d:f8:21:
6d:85:06:05:f3:e8:7c:cc:ff:0a:66:e7:38:8d:82:
d9:06:ac:4b:05:f3:6e:53:b0:cf:9c:b5:07:5c:41:
15:f0:d8:79:39:4d:e4:7d:60:ac:8a:3e:ce:86:c6:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:4D:15:E4:73:33:3C:EA:C8:59:9B:16:27:FF:E3:60:DD:4A:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fce5f71-e7d3-3f16-ba5e-9559b5ddb033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.86.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:2f:cb:d1:28:8b:74:45:97:b4:d7:3a:d2:76:05:94:62:41:
a1:81:34:68:14:f6:a4:a1:61:71:99:ad:69:90:e9:72:63:70:
2b:2a:c3:a5:7a:b3:cd:9c:2a:8e:27:aa:a7:ca:23:f8:36:d0:
d2:78:ac:e6:ae:b6:19:09:0c:6e:d2:cc:c2:96:48:e3:60:29:
d6:fe:10:b0:4a:06:6d:7c:74:0f:14:02:96:22:85:e7:9b:81:
28:d8:84:cb:63:24:da:06:4f:a4:0b:d2:7a:40:07:b6:fe:cb:
68:bf:37:db:c3:d8:19:92:60:ef:31:c6:b2:04:8b:b1:1c:db:
57:ff:86:52:38:b1:08:18:f4:f3:13:96:70:7f:13:0f:f2:2c:
6c:2d:30:56:bf:fb:d0:58:cb:8e:e2:82:53:60:62:e5:c7:cb:
a5:a6:90:e8:8a:09:90:0b:c9:3e:92:50:ec:6d:5d:35:81:d7:
8b:34:3c:45:b2:f4:b7:94:6b:be:fd:df:fc:d5:d7:2e:0d:bc:
e9:0b:d0:16:ee:d6:ed:de:0a:bb:8f:29:e6:8c:2f:cd:93:8f:
9b:2d:7f:3a:60:a6:86:7f:4c:4d:16:f3:66:73:46:e7:5a:a2:
8b:9a:3f:eb:f1:e2:95:21:ca:b3:26:76:17:34:c7:23:01:79:
e1:2d:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:43 2026 by rpki-client