Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa
File: 30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa (raw, json)
Hash identifier: kLjlq0zJWRGsxFKME7VosRzZZNsLN0Qs5TOI7IHSEnA=
Subject key identifier: 57:44:8F:F0:1A:D7:80:F4:C0:D8:D7:A2:00:19:F0:27:F3:C7:F4:90
Certificate issuer: /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial: 010D0C9F4328584CD4F286A3E9F49302E687B280
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa
Signing time: Wed 11 Feb 2026 21:54:40 +0000
ROA not before: Wed 11 Feb 2026 21:54:40 +0000
ROA not after: Tue 12 May 2026 20:54:40 +0000
asID: 399938
IP address blocks: 131.219.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Feb 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:f2:86:a3:e9:f4:93:02:e6:87:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Validity
Not Before: Feb 11 21:54:40 2026 GMT
Not After : May 12 20:54:40 2026 GMT
Subject: CN=1b568b2f-3504-4f96-b21d-c64d64fe6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:ad:db:f8:eb:4c:fa:b3:19:e1:26:a4:b8:
3a:ff:5d:ca:2f:dc:bd:21:13:79:4f:e1:2d:54:30:
67:bb:dd:02:83:01:38:90:8d:7a:44:3e:bc:11:a8:
35:d8:a4:57:59:a3:0c:4b:c3:18:79:1c:be:d2:81:
f1:35:f4:72:2b:70:c1:98:de:11:eb:d8:c5:4c:41:
2a:d2:9c:8c:7b:04:5d:1b:fd:1c:3c:33:ae:9a:76:
b8:ba:1e:54:16:62:48:b7:f4:17:72:f3:53:a8:f8:
0b:b8:d3:c0:7a:59:c3:b0:8f:ef:13:b4:c7:68:e7:
aa:5a:b5:b8:b3:1b:75:24:56:5d:23:89:e2:44:8d:
47:b5:4c:87:38:70:26:84:1e:24:c3:26:18:f9:0b:
61:66:c9:57:8f:39:a0:78:dc:6f:79:a9:d3:b6:b3:
42:6a:79:38:ec:dd:a0:fc:e6:58:de:de:45:b8:ec:
92:a5:b5:f2:7b:e9:90:0a:15:4b:73:aa:e8:86:f4:
e7:dd:68:0f:5a:2c:0f:8a:6e:30:45:83:4e:7b:86:
39:4f:21:ee:e3:8b:ca:a4:12:3e:14:09:74:8f:e7:
94:ad:02:3c:60:0f:90:ae:6a:33:e0:41:17:78:c6:
fd:d3:07:d7:83:5b:c3:76:da:f0:5e:51:c1:68:23:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:44:8F:F0:1A:D7:80:F4:C0:D8:D7:A2:00:19:F0:27:F3:C7:F4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
X509v3 Authority Key Identifier:
keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
sbgp-ipAddrBlock: critical
IPv4:
131.219.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:68:91:51:5d:06:8d:0e:9e:b0:5f:66:66:ba:8f:ec:c0:74:
5a:21:a0:34:70:27:7a:85:1e:3d:05:36:1e:28:07:0b:b4:7e:
6f:40:8a:b5:66:9c:6a:cd:7f:67:69:5a:48:c6:fc:e2:5b:07:
2e:2c:4d:b5:d7:62:dc:56:8b:ae:fc:d1:5b:d6:22:46:9e:71:
71:4e:a5:0c:8b:4a:20:12:0b:c2:89:3b:ff:23:b2:30:1b:c7:
9c:e1:d1:4d:33:e7:6d:a1:b7:ff:54:e8:73:05:a7:08:b8:dc:
56:aa:fa:e3:40:af:fb:3f:66:74:9a:81:a3:73:d8:f9:14:14:
9a:b8:8f:2b:87:44:a7:02:da:e3:d7:e1:fa:5a:6d:dc:84:78:
11:da:63:35:b0:43:7a:8f:f6:f1:9a:63:2a:83:f6:d8:9d:c6:
40:1e:38:92:4d:3b:b6:13:af:e4:11:ff:0b:fb:ff:28:b0:38:
d8:3e:62:b6:16:5f:4a:fa:ce:ec:8a:de:f5:bf:18:da:2b:17:
a5:68:4f:aa:6d:19:04:25:e0:94:67:62:d4:68:2d:23:09:2b:
91:2b:0d:74:1a:98:85:77:f7:a1:ee:63:ae:51:55:ab:c1:af:
72:cd:6b:42:4d:90:d9:e4:34:bd:8f:83:5d:84:f8:89:a7:43:
bb:57:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:02 2026 by rpki-client