Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a3a2f33362d3438203d3e203137323930.roa
File: 323630323a666138363a3a2f33362d3438203d3e203137323930.roa (raw, json)
Hash identifier: b0K1EO/8mPtfB+FDZQvb+/MrL6Ct+v2Mr4Zg5I7VQFU=
Subject key identifier: 45:4D:E5:40:E2:E0:09:E7:4D:24:58:62:12:60:40:C4:2D:71:CF:5C
Certificate issuer: /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial: 5C66CEB7164A5E29902A1F1BF3543816645DC3DC
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a3a2f33362d3438203d3e203137323930.roa
Signing time: Mon 26 Oct 2026 19:53:18 +0000
ROA not before: Mon 26 Oct 2026 19:48:18 +0000
ROA not after: Mon 25 Oct 2027 19:53:18 +0000
asID: 17290
IP address blocks: 2602:fa86::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 05 Nov 2026 15:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:66:ce:b7:16:4a:5e:29:90:2a:1f:1b:f3:54:38:16:64:5d:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Validity
Not Before: Oct 26 19:48:18 2026 GMT
Not After : Oct 25 19:53:18 2027 GMT
Subject: CN=454DE540E2E009E74D245862126040C42D71CF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:af:d2:5a:06:de:6a:f7:d9:80:1a:ae:8b:
d6:0b:76:7d:0c:b7:3c:2d:20:7a:ec:9a:22:88:6c:
76:f6:da:06:7f:c2:12:76:b4:77:69:d7:b6:c7:f1:
06:3d:87:35:3c:ce:0f:00:11:94:08:39:a9:e1:85:
79:af:42:b6:d3:9b:37:2c:4d:87:dc:d0:15:7a:f8:
75:e4:9c:95:a8:57:11:39:3e:51:86:e3:92:5a:9e:
27:db:3c:b1:78:f9:46:d9:a4:86:d2:d4:c6:bd:29:
fc:2d:82:44:72:ae:69:57:5a:7f:bc:f9:d3:77:76:
39:3e:83:94:b9:2b:f9:09:20:0f:78:a5:b0:c5:78:
6a:e9:04:3c:1e:55:eb:0a:c6:e2:0d:49:b8:19:1f:
d2:14:8d:54:2d:fd:94:b7:07:49:aa:63:09:f1:e0:
b6:4e:02:a6:eb:a2:fb:29:64:ff:4b:df:2f:53:f6:
7b:66:f6:ea:cd:20:6f:ad:9e:98:98:73:00:5c:86:
58:e8:2b:23:4a:d0:5d:50:31:88:77:b8:06:dd:59:
b4:aa:44:37:98:8a:72:19:0e:cc:71:93:02:0d:4e:
82:df:6f:2d:1a:fd:c4:c4:9c:60:01:cc:3a:ea:f7:
f4:2b:69:7d:a6:8a:35:ef:89:77:21:be:17:26:e5:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:E5:40:E2:E0:09:E7:4D:24:58:62:12:60:40:C4:2D:71:CF:5C
X509v3 Authority Key Identifier:
keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/323630323a666138363a3a2f33362d3438203d3e203137323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa86::/36
Signature Algorithm: sha256WithRSAEncryption
c9:c8:ee:03:26:cc:c8:bd:96:2a:97:ec:48:33:48:03:57:55:
d7:85:11:dc:e2:24:7a:85:50:b9:7b:3f:35:90:2f:78:49:0f:
0d:7c:9e:e5:73:d6:20:a7:17:68:b7:34:2d:a8:34:0d:04:90:
d5:26:20:bf:4d:0c:4b:af:53:2e:98:5e:59:d9:5e:54:59:c5:
1e:7c:1a:c0:d3:e9:35:4f:21:fd:17:26:cb:fd:35:c6:ed:14:
83:11:a1:24:49:64:8b:98:60:c6:a3:f6:d7:3c:0d:f1:cf:9a:
58:a2:8f:87:60:1c:ec:be:d6:2a:f0:91:03:96:82:cf:ef:1d:
9b:80:2d:48:02:0f:c6:7c:8c:6e:f6:76:1e:ad:68:97:7d:21:
30:5c:86:12:19:aa:ae:ef:52:2c:2e:48:d8:3f:29:9d:df:1a:
9c:88:12:cc:5e:dd:46:2e:97:ea:fd:53:a3:52:45:bf:fa:ab:
bb:3b:2e:f4:f2:ac:c7:ca:f9:54:89:e6:d7:46:57:3a:48:85:
dc:5f:19:e8:95:f1:81:bb:3d:49:db:3c:40:5f:f0:3e:25:2a:
3b:b4:3d:8d:49:58:a6:47:d5:c3:45:4d:99:cc:6b:55:8a:f1:
7b:13:b2:3e:33:83:c1:7b:2e:3a:40:4c:df:36:2a:e2:af:62:
e9:1c:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:03:51 2026 by rpki-client