Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af1e6070-32f4-35d8-8455-ec2dcd395722.roa
File: af1e6070-32f4-35d8-8455-ec2dcd395722.roa (raw, json)
Hash identifier: ApIJzgCsBq8uJYurKwot4BcRKGDDm2vC1CbCixuhYVM=
Subject key identifier: 55:D6:BE:F0:33:ED:E6:13:B5:92:35:72:7F:BB:6C:0E:3A:F7:A9:D2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F4F08107C09BCE6573201EC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af1e6070-32f4-35d8-8455-ec2dcd395722.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 9332
IP address blocks: 2001:470:540::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 27 Sep 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:10:7c:09:bc:e6:57:32:01:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=8e0055dc-e67a-449b-aa30-e34e9a914021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:1a:31:ce:4f:0a:51:ea:fc:f9:9f:ec:3a:
bb:d0:75:f7:94:91:32:46:53:84:fc:9c:c4:5f:91:
55:62:e7:ba:36:e3:c8:5b:81:bb:5b:f2:3d:91:8d:
94:a1:8a:13:02:a7:15:70:1b:2d:a9:96:66:e1:86:
f8:2d:a8:14:8c:98:6b:a9:d4:8a:48:4a:89:d7:82:
cf:07:30:f0:b1:f3:5e:23:10:87:44:46:b2:a2:25:
00:a5:a4:02:ba:bf:15:45:91:f8:d0:e8:16:78:45:
14:57:65:bf:ec:a9:4b:86:17:65:b6:6a:f8:e7:77:
2c:f2:08:6a:d7:97:1b:83:b4:1d:c9:9a:0a:f3:b2:
ba:2b:42:f1:63:2d:45:1d:eb:43:cf:e8:2f:fa:e6:
01:80:06:96:ab:0f:3b:d4:6e:63:bd:e1:65:e9:07:
98:f5:75:42:1e:11:9e:db:22:e7:dc:62:94:40:29:
ee:3a:5a:c0:0f:7f:8c:17:70:19:4e:29:5e:6b:2c:
7b:43:18:99:81:ac:ef:7b:99:ad:9c:68:95:25:73:
2f:af:c0:43:06:3c:62:c1:24:3e:6a:8d:76:e8:d6:
a8:cc:72:0f:ff:df:ac:bf:74:bf:47:a5:77:d1:d2:
36:a6:93:b9:2a:01:98:60:fc:a5:60:46:28:2e:29:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:BE:F0:33:ED:E6:13:B5:92:35:72:7F:BB:6C:0E:3A:F7:A9:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af1e6070-32f4-35d8-8455-ec2dcd395722.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:540::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:12:d0:fe:68:d3:3e:cb:d2:85:2e:ea:f3:f1:17:72:17:a0:
81:4f:26:7f:bd:c3:79:2b:f7:ac:26:35:1a:95:af:f2:bc:b0:
c1:8b:01:18:bb:52:88:fd:23:1a:a7:ea:8c:10:f9:1d:36:aa:
66:a0:e2:46:5e:8b:d4:cb:13:60:a4:c0:36:32:51:5f:fe:ce:
78:e8:f9:c8:41:00:8d:d0:85:a9:9a:e6:73:cd:6c:42:86:c5:
cc:fa:ca:be:91:c5:87:ed:94:03:ba:c5:32:49:85:90:7b:42:
c7:99:64:d5:42:89:60:69:c5:ff:74:6a:b9:11:c6:21:9e:79:
ce:82:71:de:6c:5e:7c:d8:e7:c0:e0:3f:29:37:2e:95:91:1d:
78:31:21:bf:f8:f8:ac:73:83:63:c1:0c:81:ac:f9:d5:33:ee:
29:ee:dc:b1:d3:fe:fc:fe:19:84:30:a5:58:60:52:72:6a:60:
61:5b:e4:d9:54:9c:64:fe:a4:96:eb:a2:f1:ba:15:29:5e:26:
5e:86:55:7e:cf:93:e4:f5:88:cd:3f:59:e4:d3:68:cd:dd:18:
c4:b6:bd:9b:6c:c1:99:72:73:c0:84:4e:ba:63:7d:43:9c:48:
7a:d3:33:58:b4:47:72:9b:f2:9c:40:44:12:6d:b4:d1:ed:6e:
49:c8:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:11:33 2026 by rpki-client