Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fc6915e8-f7c3-3fb9-b4c4-94cd3d86ea39.roa
File:                     fc6915e8-f7c3-3fb9-b4c4-94cd3d86ea39.roa (raw, json)
Hash identifier:          mzl1spXxtGFQ5m9tBFKwkjhq/Ahydo1mVhKLokosgFE=
Subject key identifier:   2E:26:57:57:30:65:39:65:3E:82:40:18:5E:E1:DC:F6:F7:2D:9A:7A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F03A849888525BCED65225A40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fc6915e8-f7c3-3fb9-b4c4-94cd3d86ea39.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        23.231.26.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 30 Sep 2026 15:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:49:88:85:25:bc:ed:65:22:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=55eb6561-ca6e-4af3-9f1f-ef614a67a917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:39:bb:2a:4f:01:e0:62:2d:4d:0e:9b:09:
                    0d:30:0c:5e:15:bb:12:f4:d9:15:8c:21:02:4b:9b:
                    58:cf:9b:f4:0e:09:47:1b:5f:da:32:8c:0d:3f:f4:
                    d9:45:d3:62:a0:91:ca:f7:e5:2d:7c:3e:7f:d4:4d:
                    62:31:24:a7:08:84:65:1a:ac:31:3f:c6:96:93:52:
                    89:35:2b:4b:79:b1:37:63:2f:2e:51:c6:22:70:66:
                    92:b5:c4:7f:e5:ac:09:24:75:7b:bb:77:62:40:7c:
                    1b:67:8f:84:c6:5a:67:8f:a7:03:20:21:05:af:6b:
                    a4:f4:7f:d6:4a:7f:e5:a3:1e:c0:2f:77:d6:71:ee:
                    f0:ff:e9:b0:2f:0c:96:3d:55:5f:76:15:b6:ad:9e:
                    94:ab:86:07:63:45:da:a1:36:9e:8d:c6:4a:06:24:
                    5f:0b:90:15:97:6f:28:34:94:f1:db:f7:a6:3b:fc:
                    d5:5e:06:69:3a:80:d5:d2:5f:1c:f4:58:a1:80:11:
                    5c:98:d1:09:32:5d:88:37:41:ce:04:81:50:b4:ed:
                    19:d0:a5:e7:f8:86:49:7a:a4:4f:18:fb:19:cd:47:
                    f6:20:0d:41:f4:10:f2:e2:8e:10:d8:67:d1:cc:cd:
                    7c:8b:ca:b4:7a:ef:95:29:97:fd:6f:57:8e:4e:36:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:57:57:30:65:39:65:3E:82:40:18:5E:E1:DC:F6:F7:2D:9A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fc6915e8-f7c3-3fb9-b4c4-94cd3d86ea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:d6:c8:c5:a3:8a:f9:d3:c0:b1:de:84:bd:e1:f8:4f:a7:
         66:97:55:25:bd:83:44:0f:2f:54:51:bc:69:84:64:e0:90:aa:
         3c:b9:54:ae:4a:af:08:8c:74:06:7b:ec:ff:be:48:e4:53:27:
         2f:fe:a4:c4:08:ae:86:27:b9:f6:fe:66:09:96:c8:28:80:2a:
         b5:79:42:ba:6a:66:cd:ae:b4:11:2f:88:bd:d4:5f:71:f9:ca:
         60:47:91:32:ac:6e:b7:25:d4:0c:10:09:f4:b7:48:e9:47:b5:
         02:26:48:9a:83:7c:2e:3b:37:fe:7c:6d:3a:45:e2:d4:17:0d:
         10:2c:63:8f:a6:94:43:f5:ae:64:47:cc:43:31:0e:f8:80:fa:
         06:73:1d:78:d2:67:c3:4c:45:70:50:2f:74:18:f3:37:53:28:
         98:4a:4c:4b:dc:ab:e8:ab:86:87:82:08:70:c6:c0:b5:84:34:
         58:48:91:a1:70:c4:bf:77:d2:0a:c2:62:a0:57:fb:84:2a:a8:
         21:d2:cd:81:71:14:79:a0:33:95:e2:1b:c6:90:16:15:ca:39:
         9d:dd:e1:77:d4:8e:3d:d6:b3:8d:1e:3d:5e:fd:9e:d9:b5:5c:
         fd:eb:23:52:49:51:2c:04:bb:e4:49:ac:0c:09:6e:3f:b7:63:
         d8:0b:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:20 2026 by rpki-client