Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/08022c63-e15f-39d7-8d23-0a0608821458.roa
File:                     08022c63-e15f-39d7-8d23-0a0608821458.roa (raw, json)
Hash identifier:          3cQwPqS6t+AQfsQ/mwrTx38wNS3pQnkpkbkZ/yMEat4=
Subject key identifier:   2F:43:0B:05:B3:6A:FC:16:75:40:8D:2F:88:EF:B0:9B:E0:C9:77:84
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584F46A7D7AB48F07FCB982532E0
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/08022c63-e15f-39d7-8d23-0a0608821458.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     33711
IP address blocks:        128.254.225.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 25 Sep 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:d7:ab:48:f0:7f:cb:98:25:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=4df5ea76-551c-4b2e-be93-e7d3b00b92b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:e8:c2:06:d1:d9:df:4d:e2:56:30:6a:d9:
                    dc:48:a9:a4:ea:72:97:06:1b:5d:c3:71:2a:56:81:
                    ef:1f:f9:29:dc:85:33:e1:78:00:f3:ea:29:b5:5d:
                    9b:4c:1d:2f:aa:82:81:8a:0c:9c:a9:59:3f:65:81:
                    b0:3b:dc:4e:39:51:6f:21:6e:96:91:65:c3:aa:36:
                    f6:d0:2b:e3:57:90:d2:93:ca:26:0e:97:35:f2:62:
                    2f:3f:45:bf:6f:19:66:60:0b:24:0d:bf:30:3d:8f:
                    1b:cf:9b:0b:01:d5:da:93:4d:0b:e0:c9:cf:3b:34:
                    16:8c:c8:49:3b:78:3c:d8:51:8e:52:86:92:87:28:
                    ff:71:7d:fe:aa:a6:c3:5e:25:37:b2:24:12:91:2d:
                    bf:d2:b2:20:96:fb:bb:4e:2d:0c:90:d1:80:76:39:
                    10:6c:bd:9d:05:e9:33:23:e9:2b:f2:2f:6e:74:57:
                    35:50:b9:fb:ae:fa:38:0e:5b:06:f2:2c:95:32:d6:
                    76:14:b6:a0:36:90:a7:d6:e2:66:a1:bd:20:9f:89:
                    1b:c3:a4:b6:fb:a3:6e:0a:dc:d0:b4:49:ff:c3:0a:
                    07:56:c3:e4:f8:73:74:9d:ea:bc:2f:1b:f8:ac:f1:
                    5f:3a:0a:37:48:bd:e4:3b:84:60:cf:ec:82:f7:6c:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:0B:05:B3:6A:FC:16:75:40:8D:2F:88:EF:B0:9B:E0:C9:77:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/08022c63-e15f-39d7-8d23-0a0608821458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:14:cf:5f:dd:2e:53:0b:82:bd:f2:f4:43:7e:2d:85:67:
         4e:f7:bd:11:7c:35:c1:dd:0b:dc:83:28:30:4b:82:7f:47:d9:
         52:40:fe:13:83:85:6a:a7:ca:7b:4a:50:c7:2a:df:55:e0:0f:
         2b:17:af:57:bf:71:03:4d:7a:13:84:76:5c:66:cf:d7:dc:fc:
         09:74:53:1f:ae:f9:74:63:80:c7:ea:0d:f2:d1:a0:e1:16:6b:
         21:b8:32:22:1a:76:ae:7d:cb:86:f0:97:7e:e4:32:73:6b:42:
         7d:ae:6d:90:f4:5f:dc:d1:78:a5:69:a3:af:50:51:5b:78:98:
         e5:52:76:6d:60:cc:6e:7c:ef:65:07:a1:2d:8d:19:a5:cc:23:
         d2:18:4e:3b:94:d4:fd:8b:28:32:7a:18:ac:92:da:99:0b:d7:
         45:e9:6f:85:fa:4c:b5:65:44:89:db:87:01:d6:8a:f0:ac:22:
         33:ce:16:96:85:82:e4:f4:0d:a4:1a:0e:1b:cd:d4:14:4f:57:
         9b:af:cc:78:2e:5d:dc:a4:d5:70:6e:19:86:a0:d7:fd:54:71:
         f9:df:57:0b:7c:1a:e0:17:c8:1e:e7:16:fb:6e:bc:33:1e:68:
         f8:fa:66:3e:c7:d1:8f:29:fe:ae:6c:40:4b:80:cf:6e:a3:6d:
         a2:1f:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:00:10 2026 by rpki-client