Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/d908c173-91f7-34b8-bca9-2ab938ca5517.roa
File: d908c173-91f7-34b8-bca9-2ab938ca5517.roa (raw, json)
Hash identifier: EzG6XIcT4W4GJDNdx0+yoG7ySCp5R7wv1JCAhZso+9w=
Subject key identifier: A7:0B:0D:F6:CA:28:3D:69:AA:DC:12:F7:F8:4B:8D:9A:D1:48:94:26
Certificate issuer: /CN=e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd
Certificate serial: 010D0C9F4328584F15CD091509AF9A24A004C900
Authority key identifier: F0:DF:BB:37:B1:51:A0:4D:A0:B4:6A:B8:B6:82:9F:9B:FB:F9:45:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/d908c173-91f7-34b8-bca9-2ab938ca5517.roa
Signing time: Sun 06 Sep 2026 13:00:12 +0000
ROA not before: Sun 06 Sep 2026 13:00:12 +0000
ROA not after: Sat 05 Dec 2026 14:00:12 +0000
asID: 36352
IP address blocks: 66.208.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 21 Sep 2026 21:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:15:cd:09:15:09:af:9a:24:a0:04:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd
Validity
Not Before: Sep 6 13:00:12 2026 GMT
Not After : Dec 5 14:00:12 2026 GMT
Subject: CN=e235ecf2-0197-4997-bd22-05b85a90b562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:83:8d:97:e1:fa:fb:d2:e7:de:8b:f4:56:
a5:06:c4:f5:fc:e9:52:fb:c9:68:69:9f:6c:cc:d9:
c6:26:17:aa:36:6b:41:16:17:c5:90:82:66:e1:07:
55:a0:01:dd:7e:46:e7:d0:9c:df:7f:9c:c5:cc:ae:
7e:90:88:54:79:23:1d:0a:75:8d:5c:82:32:a7:50:
d2:7b:ea:f9:8f:e5:23:ee:06:6e:b0:d1:38:fe:00:
10:87:82:5f:a3:ad:33:5a:b9:21:fd:ea:fc:7a:9e:
60:72:86:8d:f0:2e:90:9a:09:ea:3c:0f:e4:28:c5:
cb:9e:e0:ca:0e:83:71:a2:56:05:44:15:09:f1:34:
a6:d7:ad:5a:da:b2:49:ef:57:d3:f3:08:f4:b4:04:
84:d5:bd:00:40:cf:70:21:f8:4b:e4:9c:59:9a:c4:
c6:01:e7:3e:2a:91:af:10:46:07:35:ab:b7:8b:d4:
24:55:e2:0a:5b:70:d1:cf:e0:73:64:25:9c:8f:bd:
4c:7b:a6:e9:03:30:5b:0c:b6:b5:4a:bc:b8:58:db:
68:eb:14:a0:7b:61:2b:2d:13:d5:52:74:2c:62:d6:
40:7f:c9:a8:ac:3b:18:19:a9:23:81:08:b5:a0:54:
fa:09:01:85:28:83:9a:90:6c:af:43:a5:b7:ec:0d:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0B:0D:F6:CA:28:3D:69:AA:DC:12:F7:F8:4B:8D:9A:D1:48:94:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/d908c173-91f7-34b8-bca9-2ab938ca5517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.crl
X509v3 Authority Key Identifier:
keyid:F0:DF:BB:37:B1:51:A0:4D:A0:B4:6A:B8:B6:82:9F:9B:FB:F9:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e95a8ce2-6526-44f0-b2e9-ada0af6a1ccd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.208.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:af:c3:e5:75:20:14:4a:71:f9:92:c3:62:4d:57:87:58:97:
db:83:22:d8:23:b8:64:54:73:a4:09:aa:b0:9b:a3:fe:94:64:
ba:0c:e1:fc:a7:62:aa:84:69:7d:19:fb:9c:89:24:4e:70:bf:
09:67:93:d2:49:ae:24:9e:cb:53:f6:7d:3a:11:13:9a:bc:f9:
4c:00:f0:d6:19:64:c2:01:be:ae:4e:d2:ed:9e:95:1d:d4:e6:
c6:f3:31:ee:75:98:11:d9:39:a7:f5:7d:3c:30:0e:ca:4d:90:
e3:fc:e3:db:8d:2e:5d:9f:33:c3:57:10:b6:b4:00:59:80:57:
77:f7:39:03:d0:98:83:32:f5:c3:d0:c7:91:53:45:24:c9:d4:
04:91:33:66:bc:da:7b:12:75:81:04:d2:34:a1:c3:45:64:f6:
48:c8:e4:cc:f0:4c:d5:a8:5e:73:19:47:63:87:7b:88:9a:25:
94:bf:24:d7:94:28:3d:b6:c0:a3:f2:85:e9:af:76:c9:50:d9:
5d:c5:85:30:c0:15:67:e6:3d:f0:ea:ad:2f:dc:9a:a8:e7:c0:
1d:30:de:48:4f:3d:e0:8d:0b:a6:29:b2:a5:89:59:ba:56:46:
08:dd:f3:b8:d6:a0:88:be:1a:0d:84:05:77:41:31:11:88:8b:
b0:44:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:10:53 2026 by rpki-client