Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa
File: 22535747-b884-373e-ae7d-c116ccd3f089.roa (raw, json)
Hash identifier: TtQ8LTffw4WN9BCTcSEcsakq0yjfmThpWVoyAVWLFWk=
Subject key identifier: 3C:AB:B2:C2:C5:D8:5A:B2:58:22:92:31:D3:9A:47:0C:D6:DE:B8:6C
Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Certificate serial: 010D0C9F4328584D667A4FE5302789C54AC05920
Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 20115
IP address blocks: 68.170.0.0/24 maxlen: 24
68.170.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 14:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:4f:e5:30:27:89:c5:4a:c0:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=43f54bb5-acc1-43fc-bc71-8ba14074fad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:b6:3c:e1:47:68:79:4c:6d:91:7f:fb:fb:
18:f9:cc:22:56:a5:d9:f6:69:f6:a3:bc:a7:7a:e4:
11:d7:02:da:5d:4e:40:6e:04:42:e8:46:53:10:45:
c5:f9:88:5f:c2:c3:cf:32:1e:72:d2:d1:aa:37:6f:
8a:ff:29:f4:3a:55:9a:ee:47:e9:07:e3:4e:05:b6:
fa:1f:fb:63:b5:8b:b3:a3:11:99:d5:b8:a2:7c:53:
16:27:69:bf:38:03:6f:55:40:15:bb:ee:d7:07:a6:
03:63:c1:19:04:2b:b0:1b:75:4e:b8:f9:a0:23:06:
ea:2c:8a:74:e2:06:71:0f:bb:65:6d:9f:69:ba:dd:
81:80:00:7d:0a:f1:47:43:c5:ce:6e:07:71:fe:20:
4c:41:1b:bd:16:ff:ec:e9:68:82:5c:0f:34:d9:4b:
f2:9b:fd:90:58:11:f0:48:ae:a1:68:41:f8:af:ae:
d8:45:eb:ca:05:b5:f2:34:f1:44:29:d7:e7:13:9a:
b1:60:c8:d7:7d:d9:1b:ff:5c:7d:a4:9f:b0:b4:f6:
9d:6f:2e:bb:37:09:6b:fb:f2:e1:a2:ba:a6:45:3a:
f5:43:ab:95:33:45:6b:61:46:15:e8:bf:59:7c:dd:
9d:12:0d:ea:e9:7c:f7:83:bd:cf:38:1b:e4:f4:ad:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:B2:C2:C5:D8:5A:B2:58:22:92:31:D3:9A:47:0C:D6:DE:B8:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl
X509v3 Authority Key Identifier:
keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ee:4f:8b:56:5d:50:63:fa:e6:eb:0f:f1:c8:b3:27:02:e6:
40:e5:d3:7b:d5:6c:44:16:07:f7:d5:b5:bf:5f:bc:0f:2f:29:
68:fc:b9:1d:80:f8:a1:bf:b3:b2:ed:48:5e:6d:fa:dd:47:84:
0c:80:a8:16:2d:59:9e:fe:8c:b6:ed:b0:83:b9:02:11:7c:90:
37:01:2d:82:3c:6a:66:2d:93:4b:bb:3a:55:22:0b:96:c0:f9:
5f:b6:ba:4a:82:41:c8:03:59:63:18:61:41:be:95:c5:4a:2c:
07:00:b1:fa:98:28:64:72:5e:02:48:69:b4:8e:17:6f:04:bc:
01:b0:13:dc:2f:79:ce:eb:27:12:12:fd:25:ff:6a:4e:75:8a:
88:77:c4:f1:69:a9:60:17:89:3f:2f:ea:5c:91:a8:34:5d:24:
c6:69:ed:09:f4:a0:44:ca:18:27:10:2b:c5:af:07:a9:d9:03:
64:ea:63:f3:ee:59:34:50:e9:f8:41:a4:ce:d3:cb:30:6a:3d:
ea:63:1b:87:36:3f:81:87:87:20:f8:81:14:9c:ff:4e:1d:ff:
1b:29:a0:15:69:8a:6a:d0:33:9d:29:c1:f0:75:32:b3:00:ca:
fe:b2:a8:e8:94:f3:0a:b1:22:86:e4:52:a0:21:69:cb:d7:2f:
0b:9b:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:00 2026 by rpki-client