Replace root certifcate.

What is the best way to remove and replace the certificate on the Root CA?   We will need to keep the same private keys but need to replace the certificate it uses to issue new ones off of.

Thanks!

Shawn