This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c052956-4f9d-3038-93be-17c986bc90c6.roa
File:                     4c052956-4f9d-3038-93be-17c986bc90c6.roa (raw, json)
Hash identifier:          BjNqeU6KA5CYnxDQc1L9BJm9k69hkAsTyH3dWIdo0p4=
Subject key identifier:   94:4A:1A:A1:4A:38:7B:9B:34:8E:B4:C1:D3:0E:71:7B:81:CD:91:8D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228643F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c052956-4f9d-3038-93be-17c986bc90c6.roa
Signing time:             Fri 30 Nov 2018 01:07:53 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.32.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Fri 01 Aug 2025 04:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:64:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5f6b2599-6a01-4097-972d-60dd09a7cbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:e9:29:ee:bd:14:5f:97:32:68:50:15:94:
                    34:07:98:88:a5:fc:91:51:29:19:d9:d5:36:d8:af:
                    55:c6:13:78:8e:76:84:ac:36:f8:a2:56:19:e2:ef:
                    7b:0a:80:45:ee:e7:e4:83:e1:34:f6:3d:78:65:21:
                    f7:73:89:ef:1f:9c:2e:37:c0:17:e3:b7:1b:5e:cb:
                    35:3a:63:f1:19:52:a9:ce:4a:5e:c7:8c:30:7d:9c:
                    10:6b:9a:37:46:e2:11:83:a7:6b:c9:7d:24:e4:47:
                    a8:bd:4f:35:e0:78:31:10:f3:7e:3b:2f:15:bf:f8:
                    6f:0f:68:54:23:6a:ca:13:e3:c6:49:f2:13:74:68:
                    d2:07:15:2d:cb:c1:dc:60:2a:79:80:82:9e:c0:9d:
                    a9:8b:09:28:d5:fc:94:45:b6:8f:c4:f6:a1:f9:c0:
                    a9:5e:27:d9:c9:11:d5:ab:9a:36:e0:ea:e0:86:70:
                    99:9d:24:fb:fb:ca:0d:02:d7:f9:11:d0:76:a5:21:
                    3b:23:a1:dc:94:0a:f3:1f:99:cb:f2:95:84:c0:2c:
                    5f:e8:34:05:b3:31:5d:88:7c:78:fd:06:bc:b3:d7:
                    5f:f3:8c:0c:62:75:5f:b4:d1:8f:7c:cb:8b:9f:a7:
                    26:45:bb:11:e9:11:e2:c0:25:33:b2:be:07:5a:a2:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4A:1A:A1:4A:38:7B:9B:34:8E:B4:C1:D3:0E:71:7B:81:CD:91:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c052956-4f9d-3038-93be-17c986bc90c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:49:c7:b6:59:02:b7:d5:92:e3:cc:d6:d2:a8:f7:d1:cd:
         c6:39:f7:36:89:03:fe:01:6b:f7:55:90:4b:ef:d2:1e:79:6e:
         f3:8e:d0:9e:3c:2d:d3:e0:47:84:1a:d0:94:c7:ad:86:7c:7c:
         de:b2:54:7d:71:1a:cc:ce:79:2e:71:b0:c4:2a:9c:45:1c:bd:
         de:2b:1e:f0:d7:a5:10:a6:2e:f5:94:c6:31:53:12:b5:d4:48:
         4d:24:c6:b8:47:e5:eb:7b:57:aa:7c:73:1d:83:73:2a:f8:0d:
         ec:f0:b2:7a:fb:0c:12:ae:35:a0:e5:05:68:d9:73:32:44:73:
         51:34:16:19:fc:d4:9b:94:a8:aa:79:e5:fe:e3:44:6d:e2:ca:
         e5:44:72:5a:9b:48:77:44:31:19:ee:3d:53:32:d4:33:b4:9d:
         85:fd:85:e6:17:36:ce:2b:19:dd:cf:9f:a5:b2:21:dd:6e:4e:
         4b:a1:5a:c0:2b:be:0b:9b:98:f8:69:9d:f0:83:50:77:f0:ec:
         96:c0:31:33:fe:f9:60:da:fa:99:57:dd:c2:d0:c0:26:86:28:
         fd:51:4b:e5:d9:25:c2:05:41:aa:cd:cd:97:4a:29:89:dd:27:
         64:ae:aa:ee:73:40:5f:f6:fc:6d:e8:b0:4e:ac:c4:ca:71:0d:
         14:d6:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----