Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c954fd35-ee78-3ffe-9e9c-134d76d14417.roa
File:                     c954fd35-ee78-3ffe-9e9c-134d76d14417.roa (raw, json)
Hash identifier:          EqWzA0NLmAt8BEK3yoO41MVIzrQmHesITNWJOlL5Vzw=
Subject key identifier:   48:A3:73:47:7A:49:94:41:05:E1:09:26:0F:55:BE:7E:94:FA:CA:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A551A17078C6CEFC52D890800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c954fd35-ee78-3ffe-9e9c-134d76d14417.roa
Signing time:             Fri 27 Jun 2025 17:17:02 +0000
ROA not before:           Fri 27 Jun 2025 17:17:02 +0000
ROA not after:            Thu 25 Sep 2025 17:17:02 +0000
asID:                     834
IP address blocks:        23.26.194.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 30 Jun 2025 16:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:1a:17:07:8c:6c:ef:c5:2d:89:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 27 17:17:02 2025 GMT
            Not After : Sep 25 17:17:02 2025 GMT
        Subject: CN=2e59db3f-9578-439d-aad1-952f722edac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:26:2c:dd:04:73:54:e2:1f:8c:1d:cd:4c:
                    55:cd:3e:f6:46:3c:02:77:19:26:cb:62:69:2c:2a:
                    d4:79:4f:bc:70:5f:d7:82:20:e0:a7:9a:cf:dc:61:
                    83:12:30:58:c1:66:e0:5d:c7:17:09:a4:23:5b:0f:
                    b8:22:0a:e5:81:d8:85:cb:88:17:60:14:32:28:81:
                    ee:cd:ef:c9:0d:df:b7:d6:2a:f6:c7:e3:77:75:99:
                    77:f4:38:40:fa:47:47:93:d4:89:11:54:34:f0:36:
                    f6:f4:aa:a6:e2:41:3e:75:d1:60:95:0d:71:14:b3:
                    d6:12:50:bf:fc:cc:98:a9:5d:9e:70:a3:3e:03:15:
                    61:a9:7e:15:5d:5b:52:91:a6:af:12:e0:1d:cc:af:
                    26:a0:9d:bd:d8:7f:98:95:ab:a4:07:15:02:1e:f1:
                    11:fa:c8:85:8b:e2:e5:46:0b:43:9d:47:fa:bb:af:
                    b0:15:bb:c2:73:70:46:82:51:73:0d:ff:1e:da:68:
                    d6:20:8e:b8:84:7a:4a:12:a0:a4:20:07:e3:d6:19:
                    f5:e9:66:73:f6:10:7d:32:31:06:90:9f:b2:8f:15:
                    65:2b:d5:08:03:42:1c:6b:3e:4d:65:eb:27:6b:0a:
                    56:56:c7:fc:30:9c:3e:dc:ff:3f:72:93:07:b7:d5:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:73:47:7A:49:94:41:05:E1:09:26:0F:55:BE:7E:94:FA:CA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c954fd35-ee78-3ffe-9e9c-134d76d14417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:78:8d:b4:f9:40:84:42:6a:50:1c:8c:19:6a:f6:2f:71:
         46:92:91:5c:d6:21:e9:87:af:65:45:38:3c:83:3c:09:8e:09:
         0c:04:66:9d:8a:89:d4:69:2a:f0:46:a6:5f:c1:2d:fc:d5:9b:
         3f:56:1e:c5:ff:93:07:89:d9:85:6b:f7:08:aa:82:60:e9:04:
         9b:ae:b0:bb:e6:39:6f:28:62:9f:b3:42:a2:40:e7:54:d7:7c:
         27:32:bf:f4:60:54:3b:71:53:ff:ee:4d:ce:1a:81:6d:fd:88:
         39:50:13:c5:d6:e9:b0:f7:9b:55:3e:b4:3a:96:bd:67:bb:8c:
         57:21:ac:e7:39:4f:b1:34:6c:69:a1:50:36:2e:18:c8:bc:80:
         6a:a2:12:e7:54:d2:d7:4f:b7:f7:f7:dd:bc:7b:7e:b4:39:99:
         58:6b:5a:3d:1e:48:aa:69:98:81:ca:13:c4:fe:e3:d3:39:40:
         11:25:69:64:ee:88:4a:28:89:7d:a0:94:c4:2a:17:27:37:58:
         9e:b0:99:89:d2:89:1d:13:93:be:e6:ab:6b:2f:f8:4b:21:b5:
         f6:a7:66:27:df:39:f3:95:ce:94:3f:5f:08:50:cf:6e:2e:10:
         60:a5:ba:4f:7c:e9:56:d9:81:cc:b7:d1:99:87:4e:e9:13:77:
         6a:c9:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:54:33 2025 by rpki-client