Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dee0a429-635d-311c-a42d-a6066321d0a3.roa
File: dee0a429-635d-311c-a42d-a6066321d0a3.roa (raw, json)
Hash identifier: lxNlFcsDXlMgmXOwiOFfSRHpjlbJtZ63S7WUvOh5bDQ=
Subject key identifier: 5C:73:02:9C:B4:78:82:09:BA:4F:DF:CF:7E:96:4D:8D:9D:88:82:63
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F498AE24AFEF1B4AB2BF30600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dee0a429-635d-311c-a42d-a6066321d0a3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401152
IP address blocks: 108.165.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 18:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:e2:4a:fe:f1:b4:ab:2b:f3:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1ddd1365-bce1-49af-b7c7-5e9a74b1dd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:6f:77:1c:d8:10:d4:b1:a6:d0:de:ed:25:
69:a4:fd:ae:30:9c:6b:9d:d0:5e:46:92:ce:96:98:
7a:4f:d1:50:76:0e:42:88:15:51:3a:30:f4:78:43:
81:94:4b:91:56:d7:11:55:75:ad:07:0f:76:4e:72:
f5:1a:af:70:75:ce:d1:21:39:a1:68:4d:90:8d:b3:
db:44:2f:c0:07:1c:8a:4a:bc:b5:8f:96:73:26:f4:
08:ca:6e:49:f6:73:bf:6c:bc:d5:c9:9d:7a:2f:d3:
2e:27:d2:ae:3e:88:35:65:ed:92:3e:bf:1d:5f:bb:
50:12:8e:24:a8:eb:f2:60:7f:df:21:9f:f0:d5:db:
bc:3c:75:75:b6:62:65:70:52:82:6e:89:26:2e:0d:
57:b2:3a:ca:be:c4:18:49:2a:c4:48:75:75:cd:92:
f3:52:ca:b4:10:c8:f4:b9:5e:da:ef:6b:71:bb:ab:
37:ea:d2:79:6a:d9:e9:41:64:aa:15:12:9b:d3:ea:
ed:24:a2:9a:a6:55:eb:62:95:86:7c:45:d9:88:d1:
0e:54:71:79:27:30:cb:c9:fa:b6:82:5e:12:ca:d9:
41:93:a4:4c:bb:2f:b9:81:30:40:52:1d:68:a5:98:
04:80:0c:87:a1:c8:a1:ed:c7:7e:63:94:9c:17:6e:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:02:9C:B4:78:82:09:BA:4F:DF:CF:7E:96:4D:8D:9D:88:82:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dee0a429-635d-311c-a42d-a6066321d0a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:65:1d:d4:e8:36:4a:c1:42:d2:b1:3a:5f:1d:99:97:3e:55:
68:a1:1c:26:f6:1a:64:81:47:3a:95:ac:3f:d5:22:02:44:27:
4e:4d:89:fc:b6:44:3c:1b:97:37:6e:ee:87:14:4e:8a:36:6b:
c3:5c:f3:eb:f2:36:5c:f0:97:72:65:ef:b1:88:34:be:fb:26:
99:02:35:34:3a:94:04:25:0d:8e:41:04:5c:f3:c1:64:7b:c0:
24:c9:4f:ec:11:56:18:35:f5:2d:b3:9e:7c:e0:a4:69:f3:81:
1c:cf:51:d4:e1:3d:8a:c8:d1:92:d3:38:b1:d2:46:e4:a1:51:
27:49:bd:59:10:10:60:a7:c1:3f:5d:ce:7e:42:40:2e:f4:75:
9d:28:26:99:d3:22:74:bb:94:ad:21:a2:ce:ea:86:3b:31:88:
b4:31:d3:68:bd:a3:e5:98:b0:2d:32:ba:13:a1:8f:0e:2c:cf:
4f:a3:64:a1:91:6d:cf:28:21:9e:91:1a:7d:ed:67:16:64:23:
f3:5a:d0:cd:45:ff:f8:62:32:1a:b1:df:0e:51:b7:32:db:16:
30:81:e0:a3:e9:0c:f5:e8:49:99:90:c0:02:dd:7c:47:98:c5:
be:29:05:84:17:05:eb:9b:32:4e:60:7e:9f:e5:f6:13:6f:cb:
af:1f:bf:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiuJK/vG0qyvzBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWRkZDEzNjUtYmNlMS00OWFmLWI3YzctNWU5YTc0YjFkZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzllvdxzYENSxptDe7SVppP2uMJxrndBeRpLO
lph6T9FQdg5CiBVROjD0eEOBlEuRVtcRVXWtBw92TnL1Gq9wdc7RITmhaE2QjbPb
RC/ABxyKSry1j5ZzJvQIym5J9nO/bLzVyZ16L9MuJ9KuPog1Ze2SPr8dX7tQEo4k
qOvyYH/fIZ/w1du8PHV1tmJlcFKCbokmLg1XsjrKvsQYSSrESHV1zZLzUsq0EMj0
uV7a72txu6s36tJ5atnpQWSqFRKb0+rtJKKaplXrYpWGfEXZiNEOVHF5JzDLyfq2
gl4SytlBk6RMuy+5gTBAUh1opZgEgAyHocih7cd+Y5ScF25Z5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxzApy0eIIJuk/fz36WTY2diIJjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGVlMGE0MjktNjM1ZC0z
MTFjLWE0MmQtYTYwNjYzMjFkMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKW8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJlHdToNkrBQtKxOl8dmZc+VWihHCb2GmSBRzqVrD/VIgJEJ05Nify2
RDwblzdu7ocUToo2a8Nc8+vyNlzwl3Jl77GINL77JpkCNTQ6lAQlDY5BBFzzwWR7
wCTJT+wRVhg19S2znnzgpGnzgRzPUdThPYrI0ZLTOLHSRuShUSdJvVkQEGCnwT9d
zn5CQC70dZ0oJpnTInS7lK0hos7qhjsxiLQx02i9o+WYsC0yuhOhjw4sz0+jZKGR
bc8oIZ6RGn3tZxZkI/Na0M1F//hiMhqx3w5RtzLbFjCB4KPpDPXoSZmQwALdfEeY
xb4pBYQXBeubMk5gfp/l9hNvy68fv1M=
-----END CERTIFICATE-----
Generated at Thu Oct 1 16:05:36 2026 by rpki-client