Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51f335a8-a0cc-3292-a3c8-43210c31e5e5.roa
File: 51f335a8-a0cc-3292-a3c8-43210c31e5e5.roa (raw, json)
Hash identifier: /xhAA82Us23wOqwLN4IobbCifHlgcMovdteqPNKEauw=
Subject key identifier: F1:E7:EC:8A:73:9A:83:CD:F4:63:22:F4:4C:24:4E:3A:43:DE:96:61
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7F616BD4184D38A1ACB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51f335a8-a0cc-3292-a3c8-43210c31e5e5.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 48006
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Nov 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:f6:16:bd:41:84:d3:8a:1a:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=5104b604-b7aa-499e-bc57-d4007078def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:50:84:fe:56:f5:77:33:9e:49:e3:18:ef:
6e:ef:40:d4:fa:87:0a:9f:fd:22:cd:73:fe:ef:1a:
94:5a:bf:2d:94:0c:65:8b:de:e6:b8:24:72:21:1f:
22:96:04:82:52:d6:90:d0:cd:3f:50:6d:ff:ae:e7:
aa:bf:cc:c6:c0:ce:f0:6f:cf:03:7f:0f:3d:5c:70:
93:63:76:c5:89:0a:ca:29:eb:aa:88:f0:29:f4:2b:
2f:ea:99:7d:8e:e1:2b:8b:8d:cc:09:ab:2b:05:fa:
dd:9a:8f:25:3e:ca:1e:4d:0d:57:0e:84:ab:88:44:
9e:6b:a3:a3:4e:56:1c:fa:5b:5a:0c:31:95:70:3c:
0e:d4:b1:5d:c1:90:96:15:ac:bb:8d:10:43:d5:20:
6f:35:69:a9:7c:fe:72:9b:8f:ca:44:9e:c6:53:3a:
71:a7:c3:6d:4d:41:94:55:e9:db:91:4f:7c:31:c6:
25:07:a5:56:78:69:90:cf:bb:38:c8:dc:97:59:9f:
66:14:bc:25:7e:e8:1b:1d:05:8e:60:58:22:25:c4:
41:44:9e:6c:21:ea:f2:d6:22:a2:9d:ee:4c:06:d8:
a9:0f:50:d7:2a:5a:47:ec:69:4d:a8:f3:d8:3f:ab:
7e:57:14:15:56:be:00:0f:40:5a:13:2c:21:f0:0e:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E7:EC:8A:73:9A:83:CD:F4:63:22:F4:4C:24:4E:3A:43:DE:96:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51f335a8-a0cc-3292-a3c8-43210c31e5e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:52:c9:eb:a3:73:36:d8:18:c4:7e:14:77:e4:26:ec:22:1d:
ad:ae:7e:7a:f9:c2:53:82:7d:30:89:e8:24:d8:43:b4:bf:52:
9c:96:b1:21:5f:cf:7d:bd:84:d9:24:e5:08:29:78:b9:22:57:
21:79:3b:94:96:a1:6e:76:3f:99:14:3b:57:ca:a7:a0:f6:e2:
3e:2d:32:25:23:cc:62:c6:6f:f9:27:97:d9:24:67:2b:67:71:
e4:ce:1d:65:18:67:bd:3c:f9:18:e3:40:45:52:ac:a1:b4:56:
ed:b7:c4:e2:6b:a9:a2:50:0f:b5:33:0a:58:7c:a9:ba:37:60:
08:8b:0a:2f:24:d4:4d:ee:b3:1e:85:1f:1b:48:25:cf:7c:9d:
66:f7:c8:8b:f8:cb:12:84:26:0f:ef:55:c7:4e:e6:cd:ec:49:
a1:d0:b4:cf:cd:61:2c:75:65:29:02:83:9f:d3:f7:2d:8f:54:
7f:b9:ea:8e:af:83:be:f9:f1:09:a1:fc:a1:3f:d7:45:3b:54:
0a:2b:47:66:a9:ec:19:cb:28:ad:08:3c:79:36:cc:22:7e:a3:
fe:94:e5:b1:47:6b:f6:96:f1:39:9b:2e:b1:17:87:56:a1:48:
f6:12:0b:9b:a0:a3:4a:1b:af:5e:1c:d4:97:fe:d3:89:0c:b4:
78:b1:48:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/YWvUGE04oaywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NTEwNGI2MDQtYjdhYS00OTllLWJjNTctZDQwMDcwNzhkZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM1QhP5W9XcznknjGO9u70DU+ocKn/0izXP+
7xqUWr8tlAxli97muCRyIR8ilgSCUtaQ0M0/UG3/rueqv8zGwM7wb88Dfw89XHCT
Y3bFiQrKKeuqiPAp9Csv6pl9juEri43MCasrBfrdmo8lPsoeTQ1XDoSriESea6Oj
TlYc+ltaDDGVcDwO1LFdwZCWFay7jRBD1SBvNWmpfP5ym4/KRJ7GUzpxp8NtTUGU
VenbkU98McYlB6VWeGmQz7s4yNyXWZ9mFLwlfugbHQWOYFgiJcRBRJ5sIery1iKi
ne5MBtipD1DXKlpH7GlNqPPYP6t+VxQVVr4AD0BaEywh8A4GPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPHn7IpzmoPN9GMi9EwkTjpD3pZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTFmMzM1YTgtYTBjYy0z
MjkyLWEzYzgtNDMyMTBjMzFlNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALtSyeujczbYGMR+FHfkJuwiHa2ufnr5wlOCfTCJ6CTYQ7S/UpyW
sSFfz329hNkk5QgpeLkiVyF5O5SWoW52P5kUO1fKp6D24j4tMiUjzGLGb/knl9kk
ZytnceTOHWUYZ708+RjjQEVSrKG0Vu23xOJrqaJQD7UzClh8qbo3YAiLCi8k1E3u
sx6FHxtIJc98nWb3yIv4yxKEJg/vVcdO5s3sSaHQtM/NYSx1ZSkCg5/T9y2PVH+5
6o6vg7758Qmh/KE/10U7VAorR2ap7BnLKK0IPHk2zCJ+o/6U5bFHa/aW8TmbLrEX
h1ahSPYSC5ugo0obr14c1Jf+04kMtHixSH8=
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:44 2025 by rpki-client