Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/32da48df-d0f0-3507-9827-f4a78febf2a2.roa
File: 32da48df-d0f0-3507-9827-f4a78febf2a2.roa (raw, json)
Hash identifier: Omfgf9j9JS1DayzJdzRfZ6ILDE2YIiYEk4LQsxFIReg=
Subject key identifier: F4:6D:6D:C8:AA:AE:D2:D8:FE:24:19:09:40:CC:3B:40:F5:E0:96:F8
Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial: 010D0C9F4328584D5234F18430B3E0DB83C83580
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/32da48df-d0f0-3507-9827-f4a78febf2a2.roa
Signing time: Sat 28 Mar 2026 18:44:32 +0000
ROA not before: Sat 28 Mar 2026 18:44:32 +0000
ROA not after: Sat 30 May 2026 01:00:31 +0000
asID: 834
IP address blocks: 207.180.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Apr 2026 12:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:f1:84:30:b3:e0:db:83:c8:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Validity
Not Before: Mar 28 18:44:32 2026 GMT
Not After : May 30 01:00:31 2026 GMT
Subject: CN=268e581c-e67e-402f-9e67-c025e014139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:ec:d5:75:96:cb:57:75:91:2f:a6:fb:d3:
7f:85:66:54:ef:c8:dd:35:91:ee:40:fa:44:c9:96:
7b:ad:18:40:09:0a:65:77:85:70:8d:30:e0:48:2e:
d7:18:04:08:df:c7:d3:e8:68:e4:d1:2e:dd:d8:00:
d6:fc:23:d2:01:e4:f5:c0:00:14:d3:b4:97:b1:20:
26:c0:da:ac:f8:c0:71:b7:6d:cb:a9:2e:7f:0e:e7:
ad:f9:be:42:38:e4:77:46:60:5a:f8:c6:7a:a5:82:
d9:c1:43:aa:d0:13:41:38:dc:fd:8c:2d:29:40:cd:
8d:ba:e0:6b:f3:a3:dd:ef:90:9f:a9:7f:7c:90:7f:
41:c8:fb:72:a1:2a:6a:10:47:7f:e6:d6:83:69:cd:
01:7d:c1:65:31:d9:14:23:90:e9:97:cf:ab:bd:17:
da:8b:72:e1:25:26:5e:69:1c:7b:af:0a:51:1c:be:
14:89:e3:90:f3:06:53:de:72:2f:e3:ae:19:92:df:
52:c6:8b:4b:f8:89:4f:68:7c:d3:36:23:cb:88:a3:
95:eb:c8:e6:21:99:b9:b8:66:49:91:d0:99:ac:51:
9d:a4:9f:26:59:5c:b7:01:6b:fd:ae:25:2b:1e:03:
ca:d4:a1:db:c6:0e:d4:e2:5e:8a:09:68:f8:42:24:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:6D:C8:AA:AE:D2:D8:FE:24:19:09:40:CC:3B:40:F5:E0:96:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/32da48df-d0f0-3507-9827-f4a78febf2a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
X509v3 Authority Key Identifier:
keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
sbgp-ipAddrBlock: critical
IPv4:
207.180.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:df:b5:28:56:d3:68:7e:46:d5:ea:fb:e3:aa:f6:e2:8f:1c:
e0:e7:4d:2e:52:d6:68:75:1f:1f:3c:86:54:b6:ec:d7:c7:40:
19:26:13:d7:13:d8:f0:b1:1f:44:82:39:be:0a:fb:59:bc:11:
d5:d5:10:97:fa:60:cc:76:c5:0e:5a:e3:e2:e0:20:81:a6:9e:
be:98:ec:5f:e4:34:79:ab:c5:06:50:b0:a4:3e:fc:ba:56:4b:
4d:6b:06:0c:1a:fd:0c:f1:db:8e:c8:b7:f9:59:00:a0:6f:c1:
0f:66:19:e2:15:61:a3:7e:8b:7c:34:c1:a0:36:2b:b3:4a:c2:
27:32:ac:cf:7f:14:c9:3d:53:99:1d:d0:59:ca:9c:64:b1:b8:
da:47:97:b1:6d:0e:d3:a4:66:5c:cb:dd:33:22:39:2f:c9:7f:
dd:17:fc:86:8e:7d:46:26:f7:32:28:d5:f0:95:d4:0d:44:7f:
ea:16:5e:50:75:56:4c:e8:85:b7:bd:02:23:93:87:40:61:83:
83:0a:49:61:5f:7b:9a:0f:1f:a7:bb:a6:f7:ec:b7:bf:e2:08:
3f:d3:e2:a5:0f:92:0e:00:29:10:0d:48:a8:5d:f8:e5:ef:74:
f1:a4:37:02:97:99:df:76:e7:0e:a4:73:d9:e4:f1:8b:88:5d:
9c:cf:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 14:44:07 2026 by rpki-client