Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa
File: 8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa (raw, json)
Hash identifier: +ViS++zTTyEBTAbCgoHUEC5ZJ3t0zxcG8PkkNv5wO80=
Subject key identifier: CC:8E:53:CE:74:D4:08:27:FB:0C:1C:88:11:EA:AE:D8:82:F3:C7:47
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584CC09166EAB75D6BFFEBF3A100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa
Signing time: Wed 04 Feb 2026 14:42:48 +0000
ROA not before: Wed 04 Feb 2026 14:42:48 +0000
ROA not after: Tue 05 May 2026 13:42:48 +0000
asID: 393559
IP address blocks: 38.135.136.0/21 maxlen: 23
Validation: Failed, certificate revoked on Fri 06 Feb 2026 14:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c0:91:66:ea:b7:5d:6b:ff:eb:f3:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Feb 4 14:42:48 2026 GMT
Not After : May 5 13:42:48 2026 GMT
Subject: CN=f0cda247-7b83-4191-8d2f-5b73a684b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:b2:5a:f8:9a:c1:45:4f:89:1f:50:2b:35:
a5:eb:24:32:3d:1e:2c:0d:60:fe:e2:3b:b3:c4:b0:
9d:bb:e3:24:13:6a:f3:39:b9:80:e5:2c:44:54:fe:
3c:38:41:c7:2a:11:1f:7b:99:17:fd:71:b1:4c:02:
b8:c3:a7:e2:e8:0b:52:2f:05:3c:a8:48:90:9c:8a:
e9:d8:8b:0d:23:ee:e0:bb:01:8e:42:85:d2:1e:0c:
dc:2e:96:16:ae:9b:f8:22:4b:72:61:4a:b1:55:06:
19:10:16:90:fc:4e:dd:10:fa:6c:75:cd:fb:ea:ce:
11:d5:0a:8b:ff:a2:a8:fa:9f:5b:65:cd:87:e1:e1:
89:ed:9d:40:f1:e3:1e:46:1a:b0:fd:d9:db:24:54:
90:44:70:7c:64:48:e4:7d:1f:8e:52:d7:0f:d1:72:
5a:0d:2e:1c:85:8f:2b:12:2f:40:9a:e9:77:27:0d:
d8:8a:03:c4:ec:19:76:4b:3d:a5:e2:07:0f:d7:a7:
46:9b:a6:03:45:a9:7b:3e:6c:df:a7:1f:b6:e5:be:
73:a0:7a:a5:82:76:07:5c:21:86:5f:72:9a:95:ab:
c1:fe:52:a8:2c:80:86:39:61:c3:f6:59:d2:39:d1:
38:66:98:39:9c:64:ff:c5:b9:61:70:fb:22:0c:7a:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:53:CE:74:D4:08:27:FB:0C:1C:88:11:EA:AE:D8:82:F3:C7:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c19b96c-6f02-3892-9bb5-4b46702e62fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.135.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:21:8c:c8:aa:03:08:98:f8:6f:8d:98:62:f1:bd:46:9d:ea:
6a:0a:04:7a:f8:8d:bb:f3:ae:0a:4a:1f:81:ad:44:82:78:81:
55:4b:32:80:b6:b6:e9:ec:5d:08:1d:b9:cf:a6:2f:e1:cb:bb:
ec:d2:e2:16:17:d0:9f:82:5b:41:e4:90:05:ee:3b:79:6a:65:
91:d0:06:91:ae:b1:25:d5:27:29:d1:81:7c:27:4d:04:38:e6:
24:12:ec:1f:1d:a3:20:4c:5b:a9:fb:d2:4a:2d:27:31:ab:d9:
e6:71:0d:60:c6:f4:a6:f4:5e:2a:86:18:bd:36:62:14:82:05:
4e:7f:6f:52:2d:32:ce:11:99:54:71:9e:9a:41:be:52:ff:f3:
43:39:e8:af:76:2d:a5:04:b2:12:e7:68:9d:5a:45:2d:52:62:
5a:cd:5b:ce:15:12:b9:6a:55:2a:e4:a2:db:c2:29:1e:a0:4b:
1c:cb:22:87:de:74:35:a0:2b:36:88:f1:bc:44:4d:3e:0b:d3:
a6:e4:9c:63:7f:b6:7e:83:8d:f1:64:1e:1a:eb:71:f4:cc:ad:
7e:bd:cf:0c:da:06:6e:1e:d1:07:1b:c4:70:14:bc:6f:48:b1:
a9:5e:86:8e:7d:fc:79:51:5d:91:ce:17:ad:25:a9:0d:b0:02:
ff:25:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:14 2026 by rpki-client