Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/11561eea-9ab0-49c0-ae1f-7ac1796246b4/f08db22a-8ada-3fee-89f9-202c95bd8a7e.roa
File:                     f08db22a-8ada-3fee-89f9-202c95bd8a7e.roa (raw, json)
Hash identifier:          tI1jiTgXX571UNUbYpAP5pwuw48jMTcyZDIsfYUI1YA=
Subject key identifier:   5E:7B:FF:6F:C1:AD:D3:88:67:E2:3A:AC:99:D5:57:C2:6E:22:9C:AA
Certificate issuer:       /CN=11561eea-9ab0-49c0-ae1f-7ac1796246b4
Certificate serial:       010D0C9F4328584D25C795683AC3FE949CA5B6C0
Authority key identifier: ED:C7:C2:9A:A9:CB:F2:DD:9C:EB:1B:BE:EF:41:31:DE:F8:72:F7:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/11561eea-9ab0-49c0-ae1f-7ac1796246b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/11561eea-9ab0-49c0-ae1f-7ac1796246b4/f08db22a-8ada-3fee-89f9-202c95bd8a7e.roa
Signing time:             Thu 12 Mar 2026 20:48:37 +0000
ROA not before:           Thu 12 Mar 2026 20:48:37 +0000
ROA not after:            Wed 10 Jun 2026 20:48:37 +0000
asID:                     402130
IP address blocks:        155.103.94.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 15 Mar 2026 00:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:c7:95:68:3a:c3:fe:94:9c:a5:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11561eea-9ab0-49c0-ae1f-7ac1796246b4
        Validity
            Not Before: Mar 12 20:48:37 2026 GMT
            Not After : Jun 10 20:48:37 2026 GMT
        Subject: CN=dc77518e-b68b-406f-8d53-1f9b08208b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:94:dc:47:95:a9:7c:e6:44:d9:56:13:c7:
                    d5:ea:7b:ec:de:3c:f1:60:e4:57:a3:1f:17:66:e1:
                    f6:e1:12:68:e4:9e:61:77:c4:a0:66:62:2f:01:53:
                    b8:a2:31:3e:f1:cb:7f:da:e8:58:62:67:2c:51:32:
                    37:c8:68:5c:e2:23:5d:df:43:ce:d0:1b:a2:27:a4:
                    69:7f:8e:64:66:af:52:82:ad:9a:4c:76:4a:40:35:
                    7c:ad:fd:1b:91:03:d9:ec:25:2d:d9:91:68:b9:ab:
                    84:ae:12:d4:13:cd:0b:d3:dd:42:57:0f:de:f1:9b:
                    fb:7d:10:db:eb:b7:05:69:93:ca:c2:17:5b:44:bf:
                    64:dd:07:20:48:d6:3a:6b:a9:59:e5:7a:81:15:b9:
                    67:07:89:19:83:b7:c5:a1:56:55:51:09:76:10:10:
                    26:9b:6b:c6:47:31:a7:c5:bc:3a:4f:32:e1:c9:bc:
                    77:c4:ab:db:e9:d0:9e:b7:71:f5:b0:e6:dd:6e:0d:
                    12:0a:a3:54:21:61:44:ae:17:01:c5:13:1b:86:b9:
                    d3:05:de:56:4c:26:ef:07:6a:34:e7:29:b4:e4:20:
                    5d:c6:20:4e:31:49:a5:0e:0e:46:98:30:0c:77:b7:
                    a1:51:05:36:f5:5b:c2:28:2c:62:b4:dd:cd:c6:2d:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:FF:6F:C1:AD:D3:88:67:E2:3A:AC:99:D5:57:C2:6E:22:9C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/11561eea-9ab0-49c0-ae1f-7ac1796246b4/f08db22a-8ada-3fee-89f9-202c95bd8a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/11561eea-9ab0-49c0-ae1f-7ac1796246b4/11561eea-9ab0-49c0-ae1f-7ac1796246b4.crl

            X509v3 Authority Key Identifier:
                keyid:ED:C7:C2:9A:A9:CB:F2:DD:9C:EB:1B:BE:EF:41:31:DE:F8:72:F7:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/11561eea-9ab0-49c0-ae1f-7ac1796246b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:39:3f:a9:44:a4:f0:b0:b8:42:79:c4:0b:90:d8:0a:b1:
         05:30:4e:b1:09:31:2b:d9:7d:cc:68:12:c4:96:7a:a7:e6:09:
         d8:f2:d9:82:80:25:21:5b:97:ba:72:5f:65:1a:a3:9f:cf:9b:
         7e:ed:26:c5:29:94:a9:c3:cb:89:1d:37:c9:c7:a5:47:93:fc:
         74:7e:3b:8e:07:17:f3:86:45:eb:9e:1c:4d:a4:c7:81:34:39:
         e7:b3:9f:17:cc:52:de:75:01:dc:6e:59:cd:5a:ff:de:e5:8e:
         08:19:0a:9f:3d:bd:75:c1:0d:21:5d:f7:ad:a0:df:99:b9:e1:
         90:d0:f6:bc:8e:12:67:74:79:6f:da:8b:2e:d9:fb:ce:bf:47:
         41:16:57:00:05:31:ec:70:6f:60:f6:96:ba:a6:2a:59:cb:1b:
         db:c3:38:9f:6d:5f:01:3e:2a:c2:14:09:8e:21:ab:e8:b3:dc:
         c8:a6:92:c9:55:04:ec:2b:86:67:ea:8c:66:2f:65:28:d3:51:
         39:cd:5e:34:9f:d0:59:8b:53:e4:a9:f0:8b:f6:e5:9e:1a:f6:
         81:f1:ef:1d:fe:87:13:22:8e:cf:be:61:2e:e0:de:90:67:c0:
         fc:a5:8c:12:90:c4:74:ec:7c:c3:cc:8b:64:cd:6e:b2:fa:c8:
         3e:98:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:11 2026 by rpki-client