Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa
File: 3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa (raw, json)
Hash identifier: GjxGxO9bcBXbkVFquTgeg4sKORCpk0dhmDYbxEm/6D0=
Subject key identifier: 81:77:53:D6:A6:C1:29:AC:57:3C:0C:96:E4:03:49:7D:DD:60:21:EF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F3FAD749EBF858806B4941400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 0
IP address blocks: 198.133.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 11:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:74:9e:bf:85:88:06:b4:94:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=d2ecf606-71ba-4836-a2d8-b01394a3df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:3d:a5:68:e2:54:80:f6:d2:48:4a:ac:b1:
e4:e5:cb:0b:11:6d:56:90:80:db:be:89:0a:cb:af:
35:06:0d:76:e1:f9:8b:ab:be:1c:47:f7:41:e5:bf:
81:d7:2e:99:e1:30:4d:37:ff:91:7e:d8:58:bf:b6:
72:e3:94:cb:8e:b8:6b:3c:73:f8:2c:89:df:ff:ac:
f4:8d:d0:21:80:8d:87:51:a5:59:bd:ff:de:45:bc:
4e:1d:fb:e4:b8:fd:ff:6b:3e:eb:af:a4:70:fa:64:
5f:cf:1f:f1:45:a5:a6:b5:ba:8c:02:d9:27:42:cc:
a3:0f:38:56:e2:88:22:e7:a4:34:93:0b:c2:06:02:
25:50:95:89:e7:9c:c1:e4:41:b9:16:a3:1a:8c:dc:
ec:56:7a:46:61:2b:fb:ad:2d:30:df:cb:7d:a6:0d:
3e:97:a0:80:4f:47:14:0f:36:e5:7c:68:1c:73:74:
f4:77:f5:87:58:08:c5:d0:75:7b:90:51:92:88:9a:
8f:5f:98:9e:68:bc:57:d1:12:d8:0e:03:3e:ae:2c:
c0:97:c9:a3:7b:64:84:49:0e:f0:e4:17:11:80:a8:
75:5d:ed:af:86:a7:79:38:1c:04:c4:8f:57:b0:f9:
f1:b3:3f:8b:85:5a:74:f2:a1:6b:8e:23:06:9a:56:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:53:D6:A6:C1:29:AC:57:3C:0C:96:E4:03:49:7D:DD:60:21:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:4a:f9:ba:1d:c4:72:8b:01:4b:56:78:c6:86:43:7e:20:18:
a2:6c:1d:21:58:f3:b4:05:9c:f1:31:77:20:1a:b9:2a:0a:d4:
a9:92:16:12:c6:fd:c5:c1:7b:b7:8d:51:56:a0:85:9e:a0:fe:
9e:3f:d0:45:ad:22:4f:99:84:9e:c7:eb:4c:15:18:a0:a2:73:
46:90:66:24:1a:50:e0:4d:20:c6:97:4c:09:d1:19:52:36:bc:
82:92:f7:73:d0:b9:1c:94:42:b0:36:40:c3:1f:78:9c:fd:cc:
37:08:fe:69:7b:f6:97:04:ea:10:3c:a5:17:8c:1a:6f:8e:28:
3a:42:21:8b:d4:b4:fc:90:4b:2c:01:f7:cb:17:92:6f:9c:50:
bb:8e:81:50:c1:4c:3d:d3:76:81:4b:ed:3b:0e:a1:45:14:c5:
3a:39:4e:38:40:56:7b:aa:d2:3b:7a:eb:2b:96:05:c8:c1:e2:
b1:cd:22:0a:47:6e:f4:d0:ea:31:e5:17:ca:fa:93:92:11:fc:
94:b6:6e:6e:b8:dd:17:2d:60:a7:51:e3:de:0b:29:64:f7:d9:
00:59:ca:09:18:f2:d4:58:88:8b:bd:dc:20:76:5f:31:dd:20:
0a:67:f4:1f:12:8b:b4:ac:d1:35:b1:5b:83:0c:d9:38:6e:ad:
dc:67:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:57:06 2026 by rpki-client