Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/c862d0d8-22ea-354a-a9d4-832f5692fe93.roa
File: c862d0d8-22ea-354a-a9d4-832f5692fe93.roa (raw, json)
Hash identifier: /YkpBJ7lfWJbAAI2GG1QnYPzt1eirYqUs/VmWmNcLhw=
Subject key identifier: F8:8E:D7:12:CF:C1:1A:48:A0:26:7C:37:CE:B4:9F:43:4D:14:C5:32
Certificate issuer: /CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575
Certificate serial: 010D0C9F4328584D105A3318A71FB3F216CF6B50
Authority key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/c862d0d8-22ea-354a-a9d4-832f5692fe93.roa
Signing time: Thu 05 Mar 2026 04:36:15 +0000
ROA not before: Thu 05 Mar 2026 04:36:15 +0000
ROA not after: Wed 03 Jun 2026 03:36:15 +0000
asID: 398284
IP address blocks: 168.158.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:10:5a:33:18:a7:1f:b3:f2:16:cf:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575
Validity
Not Before: Mar 5 04:36:15 2026 GMT
Not After : Jun 3 03:36:15 2026 GMT
Subject: CN=b2955631-cbe0-4e70-b36d-9e469b37a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:0a:a6:b2:16:8a:94:6b:dd:76:60:4b:99:
98:19:5a:0a:ac:9e:10:2a:ed:51:ee:29:71:df:bb:
96:88:31:61:46:bc:06:89:4d:10:68:ee:00:51:e0:
b0:a5:6d:6a:86:37:69:6d:62:45:18:2d:f9:3c:5f:
c1:40:b7:82:e6:87:b0:5c:1c:76:06:60:ca:09:45:
8e:0b:16:fe:03:ea:94:f8:b9:b8:91:c8:76:8a:ea:
98:3d:0c:51:8b:11:15:07:28:bb:e3:f5:f7:10:f3:
0f:ab:a0:df:c6:5b:5e:3c:f3:a9:f6:4b:db:f4:f9:
ea:e3:fe:2a:4d:27:23:97:93:3f:7d:7f:b8:ec:a4:
50:9c:7f:8c:99:56:cb:48:40:6b:e8:62:aa:3f:3d:
23:77:fb:0c:2f:65:55:be:2f:60:e1:01:73:06:c6:
1f:1c:68:a8:ca:e6:7a:9a:ef:2d:e9:7e:a3:f3:81:
c6:0e:13:a7:5f:e8:6f:22:48:f3:1c:cf:7a:a8:a8:
8d:19:6a:1e:ef:16:37:dc:75:96:cd:0f:89:65:5c:
1b:39:43:0d:8b:fb:45:d9:a6:89:18:32:34:e9:1a:
4c:9c:86:ae:13:57:31:69:46:e1:e2:8b:b7:a8:a6:
31:92:5d:9e:fd:9d:35:cf:04:c3:41:d8:13:e8:ce:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:D7:12:CF:C1:1A:48:A0:26:7C:37:CE:B4:9F:43:4D:14:C5:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/c862d0d8-22ea-354a-a9d4-832f5692fe93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl
X509v3 Authority Key Identifier:
keyid:DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
sbgp-ipAddrBlock: critical
IPv4:
168.158.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:49:42:bd:3a:d0:6a:fb:5a:00:fd:68:84:98:dc:fc:d3:55:
df:32:1a:e5:61:4f:0c:cb:e6:05:35:71:35:e2:3f:14:ed:cb:
fa:aa:47:58:ac:ca:56:c9:40:9e:b8:de:20:d5:ad:3c:9e:6c:
41:a7:87:cb:22:f9:bb:c0:0d:5e:5a:58:53:66:25:59:50:12:
81:0b:39:c8:7e:e2:91:01:25:c2:ab:23:66:2c:f2:53:17:c3:
b6:fa:a9:18:ed:3c:a4:95:e1:76:d5:31:5d:4d:6a:9d:0b:73:
08:d2:6e:eb:00:3d:a5:aa:27:ee:13:4e:8f:02:3e:b3:30:94:
9e:ea:bb:e0:6f:24:84:87:a3:9d:6a:85:d5:f7:bc:68:93:e0:
83:d1:7d:f6:9e:a8:78:e6:8b:9c:d3:9b:fd:ce:cf:57:d6:25:
e6:4d:17:63:56:e7:8d:aa:1c:ac:bf:ad:b1:0e:9c:15:6d:49:
d1:d7:6e:70:2c:ed:b7:f3:1d:1f:56:1f:cc:de:2f:0a:15:07:
1c:b6:e3:96:07:f0:62:85:0a:4f:14:47:3f:97:09:80:e9:75:
a0:20:bd:f1:a5:55:85:20:ce:eb:cf:b3:b8:ac:b8:f4:52:bf:
72:9a:c8:a5:f3:86:5a:10:c9:6c:4c:d0:66:81:61:49:a6:44:
58:9a:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 12:35:16 2026 by rpki-client