Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json)
Hash identifier: TKLUbqbHNuQ/9zGgUBBgV+Xy+AfxknOsTl551dNOsEo=
Subject key identifier: EE:7C:5F:CD:28:B4:63:8B:E5:AC:93:7D:0F:69:CC:46:45:46:1D:35
Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial: 010D0C9F4328584F5E62C3C13051E1A14A4F6800
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 958
IP address blocks: 2605:ac40:20::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 02 Oct 2026 16:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:c3:c1:30:51:e1:a1:4a:4f:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=3eaba022-e8f7-457b-a33a-1b4235c72dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:ea:e8:51:f1:03:d1:29:50:45:57:ed:bc:
a7:2d:e5:29:76:3b:00:e5:c5:ee:d8:9b:08:8f:62:
e9:56:c5:40:1f:94:87:ac:c4:1c:53:1d:a2:09:ae:
bc:5e:50:13:39:d4:dd:59:5a:18:2a:84:d9:82:4f:
4d:69:11:b1:20:92:ab:57:ab:94:14:5b:08:19:2a:
20:92:da:d3:df:d0:05:73:ea:38:b7:95:9d:f7:b0:
08:9c:64:42:72:56:2e:6e:73:f8:4e:66:bc:d3:24:
34:42:c3:11:0d:70:8a:3a:4a:f6:b1:3b:6d:9d:a5:
67:3c:8a:53:ab:35:23:4e:47:b6:56:35:ec:e4:a7:
67:2b:7f:21:03:85:7d:ab:60:af:8e:46:01:85:0c:
1a:17:a2:45:45:a1:d7:36:1b:73:54:3f:49:8f:3c:
25:98:a7:5d:44:10:bd:86:c8:47:c8:4f:e2:a8:51:
58:71:31:10:7e:67:83:a4:c3:9b:66:61:c6:da:e8:
c9:a0:75:7b:4e:a3:53:8a:ad:24:08:92:10:d1:85:
4f:55:51:78:9a:33:ee:2a:0e:6c:5f:7b:b8:51:c2:
0d:5b:61:7c:2b:7d:3f:10:75:0a:7c:09:d5:d9:fe:
3d:0a:1f:39:49:f7:37:8c:cb:d4:37:5a:40:bb:21:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:5F:CD:28:B4:63:8B:E5:AC:93:7D:0F:69:CC:46:45:46:1D:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
X509v3 Authority Key Identifier:
keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ac40:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:51:ab:d9:1e:1c:0b:5b:8a:cb:06:e6:83:44:4a:94:7e:b0:
04:b9:6e:0a:97:ba:90:71:c4:5d:ba:76:96:5a:7f:08:d8:d9:
0f:b5:1f:ee:00:31:f8:55:9c:82:ca:51:30:df:c1:04:de:36:
34:e1:39:ed:f9:39:7c:93:85:45:71:24:a2:86:ed:e9:62:62:
97:49:70:f2:e0:4c:c1:e5:82:29:f4:cf:63:ff:e6:96:cb:f3:
f5:0b:17:d0:7a:2b:25:3f:73:21:c6:0c:b3:fa:44:90:95:af:
9c:57:54:44:87:64:24:3b:6f:b5:9f:27:44:3a:61:b0:2a:0b:
a7:c8:88:06:9e:63:bc:b6:bc:d4:b5:aa:c2:24:5f:66:71:7b:
0f:c1:a5:ba:55:e2:69:9f:74:d5:d8:52:06:0e:ae:0f:39:2a:
18:b7:34:cc:3a:a0:82:4d:62:89:39:27:40:d0:dd:97:7f:ab:
88:d7:79:59:3e:6e:73:ff:48:36:45:91:6b:75:b0:05:67:c6:
e0:26:02:9a:04:92:ca:c8:62:cb:fa:25:78:d4:6a:3b:da:03:
15:a9:0f:14:79:e8:8f:ab:ab:c0:99:50:e3:f9:4a:fb:14:e0:
bb:56:4e:4f:59:fa:38:ce:61:0f:34:88:69:80:e3:e6:78:d4:
5e:44:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:09:30 2026 by rpki-client