This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/fd4fddd5-9fd0-3acb-a5d1-93fc339257a1.roa
File:                     fd4fddd5-9fd0-3acb-a5d1-93fc339257a1.roa (raw, json)
Hash identifier:          tqcrpRWL8WjZj5YHoBOUhWkiOrdLm1Nw6qaFJC7ZbPA=
Subject key identifier:   76:A3:9A:28:66:9E:5E:0B:C1:20:2A:BE:0F:CD:6A:87:01:51:EA:49
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584BD62707A5E852E946F293DC00
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/fd4fddd5-9fd0-3acb-a5d1-93fc339257a1.roa
Signing time:             Wed 12 Nov 2025 15:29:20 +0000
ROA not before:           Wed 12 Nov 2025 15:29:20 +0000
ROA not after:            Tue 10 Feb 2026 15:29:20 +0000
asID:                     17275
IP address blocks:        161.107.120.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Nov 2025 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:27:07:a5:e8:52:e9:46:f2:93:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Nov 12 15:29:20 2025 GMT
            Not After : Feb 10 15:29:20 2026 GMT
        Subject: CN=ae1cedf7-9e7d-4cc7-8ddd-c2ffa0deca8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:ab:d0:2e:ac:b7:bd:ac:52:90:34:0d:1a:
                    46:31:51:d2:1b:79:fd:dd:87:70:62:3e:0a:1b:76:
                    70:b1:ee:d7:e2:d3:ae:eb:00:08:f6:00:b1:84:6c:
                    4f:14:50:39:c0:e6:3e:18:a3:03:a6:b9:38:b3:b9:
                    bd:9c:8c:78:c6:b5:06:c5:d5:ce:de:7b:ab:46:5e:
                    81:72:c2:0c:5b:dc:4e:64:f3:75:cd:aa:14:88:b7:
                    7d:e9:85:77:af:09:06:b0:78:c6:6e:8a:c9:c9:3d:
                    2a:66:17:8d:18:88:d9:3c:c8:ef:16:94:ff:43:86:
                    87:3e:47:83:bd:c2:1e:47:11:69:d7:e9:19:8d:6a:
                    4e:63:d5:bc:4d:45:9d:a5:9b:63:ff:5b:a9:ec:d8:
                    45:46:c3:66:92:50:c4:6b:0d:0a:c1:df:b9:51:22:
                    28:09:a3:0d:a4:90:dc:48:5b:f6:d3:2d:e4:21:94:
                    50:c9:b0:22:28:72:67:49:b6:08:e3:38:e9:6c:53:
                    47:4c:3c:cb:33:0d:28:41:ac:f6:70:99:2e:06:94:
                    b1:26:85:26:35:f9:5b:49:d2:48:69:a1:63:b8:aa:
                    1c:1b:31:9b:85:84:c9:7b:91:94:62:f2:7a:aa:7f:
                    78:05:21:ee:5e:c2:87:63:4f:ea:ed:f1:e6:b8:fb:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:9A:28:66:9E:5E:0B:C1:20:2A:BE:0F:CD:6A:87:01:51:EA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/fd4fddd5-9fd0-3acb-a5d1-93fc339257a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:5e:38:96:93:8d:51:b8:e5:d7:b3:b2:65:29:d6:76:f0:
         d6:5a:0b:7d:5d:d8:8f:99:72:4b:e6:ca:34:80:27:c2:72:d9:
         17:09:01:ed:e2:0d:70:e7:9c:83:2a:87:1a:68:08:41:2b:e4:
         d3:6f:d9:a0:09:5a:5b:7b:ea:94:b2:e4:35:db:26:b4:d6:90:
         3a:d8:98:55:7b:53:2c:fe:08:6e:eb:47:26:25:d2:c3:a0:e9:
         65:2d:23:c2:6d:0a:cd:f0:1a:81:d9:5e:d3:47:28:4b:33:2f:
         d1:96:37:cf:7f:06:5b:c2:ae:92:f3:2b:a4:19:ca:12:42:42:
         6a:33:b6:8d:ab:0b:43:b2:04:71:16:f4:60:9c:51:aa:54:84:
         0c:e0:bd:37:d5:41:f1:17:04:a7:00:1b:19:ab:24:05:6d:81:
         7b:06:3c:32:9a:b0:09:5b:6f:dc:29:7e:07:1c:66:f0:d7:74:
         7f:40:e3:0f:95:f1:9b:bf:62:50:05:e8:1c:7d:1a:3a:e7:5f:
         0c:47:74:2e:90:bc:20:c8:bc:29:5b:46:19:02:be:cc:fe:e8:
         f5:ed:5a:62:be:f4:7a:d0:5b:a8:45:65:c1:88:6d:56:cc:f9:
         f1:06:cd:95:ae:36:28:46:f5:ba:50:9a:bb:d8:86:6a:4a:a8:
         b7:b2:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----