Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa
File: 6a77ca73-dc19-3013-b245-2c1af94b6002.roa (raw, json)
Hash identifier: viOQaGmeti2b5WSO6gHCs3aNL6B2wipJLJ9lNTZEoJA=
Subject key identifier: 5A:CB:D1:A6:32:E5:C9:47:11:3A:78:E3:D1:1F:B0:17:DC:77:60:7B
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F4328584F20F7C1114F31E980E4973888
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 4213
IP address blocks: 173.214.20.0/22 maxlen: 24
173.214.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 10:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:c1:11:4f:31:e9:80:e4:97:38:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=8dcb5583-4813-40f2-868a-dfc7a59fe2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:f8:fd:89:ef:08:5d:12:26:76:d8:50:d8:
e0:84:8f:d4:63:44:3f:3c:c6:19:68:b8:de:ec:4b:
f4:93:c8:aa:d3:f1:ac:88:34:f9:3f:9e:17:78:7c:
d8:62:a4:94:03:d8:f9:2b:07:29:59:0f:bd:1f:c6:
34:a5:a4:ce:6e:20:56:f2:55:bc:fd:ff:b1:5d:b9:
18:d8:c3:38:13:5f:ff:49:a0:e9:aa:0d:bc:57:0f:
eb:ae:4c:98:95:df:a0:d4:cf:74:27:d4:05:a6:85:
f4:d5:48:3d:c3:42:6b:85:d0:29:6f:5f:89:bd:48:
a6:8a:d6:02:f3:a3:cd:26:77:46:64:0b:81:c9:3f:
92:44:35:fc:03:d8:af:10:c5:c5:60:72:40:05:02:
58:4c:fb:9f:88:0a:d7:f3:55:14:5c:b5:3d:0d:2a:
40:b3:93:54:d9:29:ad:27:80:5a:53:a5:3c:72:b6:
01:89:cf:15:8d:92:b1:0f:65:04:05:ce:be:37:e5:
54:44:0d:0b:bd:91:86:45:35:a9:3e:74:74:aa:a6:
13:50:c0:ba:61:4a:ac:97:88:61:32:2d:78:b0:7c:
8a:40:94:2e:1f:03:ac:d5:98:b8:46:4f:50:14:2f:
a5:f9:72:1c:1e:f8:4c:af:f6:c8:18:ed:71:f7:5f:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:D1:A6:32:E5:C9:47:11:3A:78:E3:D1:1F:B0:17:DC:77:60:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
173.214.20.0-173.214.27.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:67:18:39:03:73:30:51:18:83:9a:ea:88:ff:44:3f:78:92:
06:64:5d:91:28:d9:9b:97:1e:d7:b9:2d:eb:02:4a:85:3f:f8:
bb:82:65:8e:0b:80:f0:ac:25:ff:26:fd:b5:c6:2e:5d:24:18:
6f:de:f9:e6:e2:92:1f:04:fc:37:7a:c5:8f:4e:b6:ac:22:75:
6e:0b:65:a5:be:4d:87:5e:4d:13:a4:33:33:e1:05:a9:34:de:
45:74:e2:6f:65:ff:85:43:48:b0:b0:09:11:4b:21:cd:65:d4:
8a:07:e1:b2:9b:1d:7a:d7:a5:2f:4f:83:ff:6e:35:10:cd:df:
48:61:b3:ba:a5:bd:c4:92:40:e0:3e:7c:65:93:34:df:75:74:
ae:93:dc:42:42:36:6e:6d:30:cc:5d:99:1a:03:87:61:cc:0b:
ac:79:69:94:13:f8:0b:0b:75:59:d9:0c:71:2d:01:8d:85:b3:
8f:39:05:d6:e4:94:24:61:a4:0d:66:0d:91:06:0f:52:d5:7b:
f7:1e:f1:a6:43:60:73:a1:f1:d5:ec:9f:94:3a:85:65:0e:20:
ea:06:49:f9:f4:5a:8d:fc:55:18:f4:eb:34:e1:fd:a1:d3:e5:
d8:29:d8:b9:73:d0:9f:5c:2a:0d:47:52:be:69:bd:51:f8:fc:
83:4b:36:05
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8g98ERTzHpgOSXOIgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5
YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
OGRjYjU1ODMtNDgxMy00MGYyLTg2OGEtZGZjN2E1OWZlMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntD4/YnvCF0SJnbYUNjghI/UY0Q/PMYZaLje
7Ev0k8iq0/GsiDT5P54XeHzYYqSUA9j5KwcpWQ+9H8Y0paTObiBW8lW8/f+xXbkY
2MM4E1//SaDpqg28Vw/rrkyYld+g1M90J9QFpoX01Ug9w0JrhdApb1+JvUimitYC
86PNJndGZAuByT+SRDX8A9ivEMXFYHJABQJYTPufiArX81UUXLU9DSpAs5NU2Smt
J4BaU6U8crYBic8VjZKxD2UEBc6+N+VURA0LvZGGRTWpPnR0qqYTUMC6YUqsl4hh
Mi14sHyKQJQuHwOs1Zi4Rk9QFC+l+XIcHvhMr/bIGO1x919CYwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFFrL0aYy5clHETp449EfsBfcd2B7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj
NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNmE3N2NhNzMtZGMxOS0z
MDEzLWIyNDUtMmMxYWY5NGI2MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3
MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh
OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz
MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKt1hQD
BAKt1hgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAqmcYOQNzMFEYg5rqiP9EP3iSBmRdkSjZm5ce17kt6wJK
hT/4u4JljguA8Kwl/yb9tcYuXSQYb9755uKSHwT8N3rFj062rCJ1bgtlpb5Nh15N
E6QzM+EFqTTeRXTib2X/hUNIsLAJEUshzWXUigfhspsdetelL0+D/241EM3fSGGz
uqW9xJJA4D58ZZM033V0rpPcQkI2bm0wzF2ZGgOHYcwLrHlplBP4Cwt1WdkMcS0B
jYWzjzkF1uSUJGGkDWYNkQYPUtV79x7xpkNgc6Hx1eyflDqFZQ4g6gZJ+fRajfxV
GPTrNOH9odPl2CnYuXPQn1wqDUdSvmm9Ufj8g0s2BQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:02:40 2026 by rpki-client