Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9fe75f41-abaa-301f-8380-737fb1fd3208.roa
File: 9fe75f41-abaa-301f-8380-737fb1fd3208.roa (raw, json)
Hash identifier: O7MJ8w55QW13YXdfNf6OwXVJgS9IkAAWzjW4PTs9614=
Subject key identifier: A2:4F:09:94:3C:2F:C2:BE:88:49:57:2E:B8:F1:26:FC:65:B5:C9:AD
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584EA79B437A16D80173A6B2CD00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9fe75f41-abaa-301f-8380-737fb1fd3208.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 209396
IP address blocks: 172.94.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jul 2026 07:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:43:7a:16:d8:01:73:a6:b2:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0b44e4ed-1ab9-4aa8-b455-d3530de38693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:9d:4f:ae:4b:b0:06:27:5d:74:2d:ae:02:
2c:43:53:90:fe:c5:5f:a3:f8:35:25:18:2f:e2:15:
50:a8:6b:5d:9c:56:4f:dc:38:9a:59:86:1b:73:38:
eb:f0:15:f4:3b:75:ab:37:68:b2:d1:c1:73:8e:14:
c6:6f:d4:66:cf:09:b0:fa:58:6c:90:a7:eb:17:86:
37:a2:3b:69:b8:98:2f:21:95:0c:89:5f:d0:cc:17:
1c:c0:5e:05:02:ce:94:8e:ce:44:7f:32:d6:f9:68:
da:3f:17:b2:25:c3:4b:89:6c:2d:88:80:c4:54:71:
b5:f8:62:d6:3e:0e:3a:b5:ff:7a:72:34:5f:ef:68:
a3:12:ef:ec:1b:2d:59:bf:c6:10:c9:7f:a1:cb:47:
47:9c:ea:bd:bc:e3:f5:91:d0:69:e5:db:f9:c5:a3:
c7:84:a2:b9:29:b3:58:19:36:df:ad:7f:a0:3d:87:
c2:47:f8:cc:0c:ca:5d:0b:42:ef:72:ea:11:71:61:
61:50:f9:ee:ba:4d:55:0e:f3:88:14:92:4a:5d:db:
70:55:a3:1f:37:94:d4:26:f0:5a:65:77:37:96:ae:
5b:4e:ec:1e:19:3f:c2:45:fa:c2:22:b2:4e:7e:1a:
26:03:c4:f3:a0:b4:49:a5:3d:8d:6d:4e:e6:c2:07:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:09:94:3C:2F:C2:BE:88:49:57:2E:B8:F1:26:FC:65:B5:C9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9fe75f41-abaa-301f-8380-737fb1fd3208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:57:be:b5:21:c3:1d:2c:ca:d2:b3:b5:19:be:11:2b:44:20:
2d:92:06:18:4c:1d:c1:a8:f2:fa:b2:c6:4a:e8:df:60:d0:1c:
41:a4:c6:97:3c:0c:02:0b:ac:a6:d0:f7:59:5e:ec:6d:88:a5:
59:59:fb:83:20:8e:5b:0f:e4:90:96:48:87:10:46:77:74:aa:
57:59:a4:61:be:e1:3b:8a:5e:8d:0f:5a:bc:e3:d2:8d:bb:af:
ab:4e:7d:ce:89:18:59:9b:8b:e3:a4:25:db:07:c4:61:15:5d:
8e:ac:8d:28:31:2a:9f:b0:ae:b7:6b:31:b3:1c:6d:75:b8:f4:
2a:f1:b9:ec:c3:9d:6d:a7:2a:f2:54:c6:4e:c4:ed:cf:af:e8:
44:e4:b3:55:29:2e:6c:73:b2:79:5f:42:7b:91:42:ac:9e:62:
9c:8e:04:f2:9a:aa:93:df:82:23:89:6b:ec:ba:2e:ff:4d:48:
b2:24:ed:e0:88:31:7c:57:53:28:ea:11:59:ac:e4:9b:3f:bc:
e1:8b:9d:7d:0e:14:e5:1a:32:bf:dd:08:a6:33:de:36:e0:01:
ed:05:96:d0:11:dc:f9:5c:e3:98:ae:9c:1c:5d:a0:10:c2:c6:
50:38:80:21:10:1a:0c:69:03:f1:c8:3f:dd:de:ac:6d:b3:78:
1a:1e:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:21:58 2026 by rpki-client