Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1d2ce714-f444-352c-8832-dd4233a256aa.roa
File: 1d2ce714-f444-352c-8832-dd4233a256aa.roa (raw, json)
Hash identifier: d9SpXUvxANKhozPVzS8AuTpEqnZm7RcvhYOWd35KINA=
Subject key identifier: 7B:84:AF:EA:D2:F4:1F:58:A2:54:C1:1C:27:28:67:75:FF:72:F7:FA
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584C1E93F6C7F1320AA3DFDBA938
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1d2ce714-f444-352c-8832-dd4233a256aa.roa
Signing time: Mon 08 Dec 2025 14:00:38 +0000
ROA not before: Mon 08 Dec 2025 14:00:38 +0000
ROA not after: Sun 08 Mar 2026 13:00:38 +0000
asID: 25198
IP address blocks: 72.244.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Dec 2025 06:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1e:93:f6:c7:f1:32:0a:a3:df:db:a9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Dec 8 14:00:38 2025 GMT
Not After : Mar 8 13:00:38 2026 GMT
Subject: CN=cf8d7b60-6c5f-47b1-8077-660137d9c6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:8d:0d:18:c4:6b:fa:58:9a:9c:c2:84:6c:
e6:f4:8d:07:16:6a:de:b8:50:33:ae:f1:b4:7d:6c:
af:2b:f3:9d:ad:59:37:fd:a7:c9:93:24:3e:6d:f2:
28:3e:83:1a:8c:6e:79:f3:0e:c0:3b:b9:19:87:90:
7a:84:55:5d:d1:31:4a:61:0d:77:57:3d:0a:c7:13:
8e:3e:75:f1:ec:4f:a2:59:1c:a5:85:72:77:09:d9:
ed:64:32:a0:e2:96:13:ca:cc:3a:06:69:4e:54:72:
b5:9f:91:9c:7a:fc:57:77:4f:54:e4:f8:90:da:5e:
68:e3:82:2e:95:c5:1e:8e:c1:d7:4a:4f:4f:0f:c0:
49:47:f9:b3:d1:9c:31:90:20:36:c6:05:fe:5b:b2:
12:e7:69:39:75:51:e8:1c:1e:62:c8:ff:64:f0:c4:
e8:ea:3d:48:02:d4:ca:fe:12:e5:1c:57:95:ef:18:
d9:db:99:80:b6:d5:f2:0d:2a:4f:60:c3:af:8a:41:
db:3b:b0:79:29:30:6c:ae:3d:68:ed:d1:73:c9:b8:
7f:77:ec:2e:d5:9e:f4:7c:9b:a1:d1:a3:70:86:90:
56:28:90:c2:64:60:ab:96:e3:72:6c:9f:12:2f:e3:
a2:89:fe:74:1a:bf:92:b3:db:f8:47:cb:28:c2:4b:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:AF:EA:D2:F4:1F:58:A2:54:C1:1C:27:28:67:75:FF:72:F7:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1d2ce714-f444-352c-8832-dd4233a256aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.244.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:3d:af:53:fb:cc:4c:d4:e9:65:fe:34:dd:7d:5e:cd:79:5c:
c9:9c:3c:ac:dd:ad:1d:e2:b0:a3:e8:a0:17:85:ec:c8:74:84:
6a:29:3c:95:e6:37:7b:c6:e9:f3:f6:ca:6e:06:a6:2e:b3:d1:
ec:e5:d2:24:3c:bf:8b:de:cc:06:fa:01:ee:55:22:e8:2a:af:
c6:1a:6b:57:5a:17:45:0b:5d:a3:ca:e3:dc:26:c6:b2:3d:c9:
9d:52:8b:33:72:c3:53:b8:9f:07:19:51:13:f6:dd:cf:1c:41:
26:88:8f:fa:9e:5f:9d:66:84:6b:c9:06:cd:82:af:22:77:0d:
20:d9:1a:50:04:8b:40:45:08:8c:75:0a:03:2a:90:5b:51:4f:
9f:38:98:74:91:99:ef:06:b7:05:42:71:7a:58:50:f1:db:66:
bf:78:bf:51:a7:fe:ed:1a:45:99:0c:77:3d:44:6b:c7:a7:49:
0e:54:ad:cb:4d:2d:b4:68:a2:0b:43:18:52:88:95:e3:a0:2e:
0f:9c:37:6e:a6:27:d2:05:e8:c9:31:f3:1a:b6:4b:e2:84:5a:
27:db:d8:c2:c7:97:ac:42:7c:50:ae:b7:06:f8:59:6c:20:5d:
dd:66:9c:c3:ac:82:81:c5:8d:56:f0:01:df:b6:f0:9e:aa:00:
ef:41:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 08:50:49 2026 by rpki-client