This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
File:                     fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa (raw, json)
Hash identifier:          NThHCmMq9m4bxz/bNwUKCh01V0JJ19y9+ZsiJhg39sE=
Subject key identifier:   A6:13:92:22:60:42:6E:70:A0:92:7F:F2:86:5A:05:5A:E6:68:8A:23
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C80BD0D4E9CA2DC899C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     210222
IP address blocks:        2001:470:1b9::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 30 Oct 2025 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c8:0b:d0:d4:e9:ca:2d:c8:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=b07d69c0-019b-4bd9-9f60-5bcb2c928ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:1c:ab:fb:93:4b:5d:0e:10:04:6e:2d:6e:
                    3d:98:f2:ea:36:0c:b6:07:3e:53:aa:a5:6d:e7:de:
                    57:81:82:fa:98:84:28:19:6e:06:08:aa:03:18:9b:
                    e8:e3:c6:72:d5:95:6e:b7:21:2c:a6:d5:59:3c:ab:
                    7e:c1:bb:84:9b:c2:60:5a:3e:93:d6:a3:3e:68:7a:
                    2d:43:f7:7b:a8:42:a2:85:de:36:0c:de:1b:b2:45:
                    85:bf:4a:65:f9:25:01:6b:a4:d8:0a:47:67:93:ca:
                    6d:7f:15:b8:ef:fd:f0:a3:04:f0:d9:46:31:9a:18:
                    89:95:ef:2c:91:a6:de:15:be:1f:b3:fa:3a:66:cb:
                    01:67:5e:c2:1b:86:e7:a0:18:fb:8f:5d:93:15:00:
                    31:c0:59:cd:d6:3a:51:af:87:21:29:68:d4:48:b0:
                    e5:1a:56:f5:5a:7a:69:48:2b:56:b6:6f:87:eb:26:
                    41:01:44:08:d7:ce:72:b4:49:b7:b5:b4:dd:31:3a:
                    8d:28:a1:d5:6a:2b:99:c7:c6:98:82:2d:d9:e2:0b:
                    0e:4c:80:bc:e1:c9:01:bb:5e:a2:ec:e6:de:8a:06:
                    9e:62:c3:a4:4f:e9:90:a9:0d:20:e1:3a:ed:6a:bc:
                    78:2e:fd:52:98:ee:84:59:85:9c:0e:90:4d:b0:c1:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:92:22:60:42:6E:70:A0:92:7F:F2:86:5A:05:5A:E6:68:8A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:7e:09:d2:ee:e0:5e:96:76:6d:c3:51:2d:7c:3e:d7:2f:
         84:00:13:02:22:33:a1:a5:df:00:91:22:4b:a2:d8:28:b1:40:
         18:6e:c8:87:8b:c8:4d:4c:48:48:3d:32:ed:5f:9e:e5:86:08:
         25:ed:52:5a:69:76:d2:23:87:bf:8b:4d:18:ae:83:43:15:04:
         f8:57:b3:00:22:49:08:b2:87:12:4d:5a:f1:f5:74:ad:b8:3e:
         8b:4b:c7:26:7f:75:66:ab:6e:ba:b5:7c:97:b4:cd:a9:9d:af:
         4b:99:89:38:00:86:43:7a:51:33:09:88:91:70:c6:00:a7:92:
         00:c1:82:70:96:9e:54:b2:d5:be:f4:9d:b7:c3:17:be:76:59:
         a5:f0:de:63:8e:43:28:7a:7d:94:0f:f5:f9:69:22:c1:09:36:
         00:c2:bb:38:29:17:b9:26:9a:2f:bf:b1:7e:53:f6:91:09:4b:
         91:6a:d0:3c:5b:13:9e:16:90:18:1c:38:0d:19:bf:90:f9:61:
         b9:33:90:5f:5f:21:9a:06:d3:b5:2a:f9:2c:0e:0e:b7:99:3c:
         a0:99:f3:74:db:da:76:ac:1f:ae:35:ff:ec:4e:ff:e8:9b:0b:
         d3:04:93:f0:ec:a0:aa:54:5f:f2:77:8c:ac:d4:d3:23:88:48:
         f8:9f:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----