Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/641d0969-47e6-3e49-84bc-141c0729724a.roa
File:                     641d0969-47e6-3e49-84bc-141c0729724a.roa (raw, json)
Hash identifier:          gyALWcumKn938Fftig7IUZtHvq3oPqBlnttB9rpNZZE=
Subject key identifier:   6D:2D:1A:8E:AD:9E:20:17:55:E4:CD:78:26:89:57:F2:AE:C6:18:AA
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584A265BD09D7117CF1E2EC18BA0
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/641d0969-47e6-3e49-84bc-141c0729724a.roa
Signing time:             Tue 10 Jun 2025 23:26:29 +0000
ROA not before:           Tue 10 Jun 2025 23:26:29 +0000
ROA not after:            Mon 08 Sep 2025 23:26:29 +0000
asID:                     65132
IP address blocks:        132.163.68.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 14:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:5b:d0:9d:71:17:cf:1e:2e:c1:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Jun 10 23:26:29 2025 GMT
            Not After : Sep  8 23:26:29 2025 GMT
        Subject: CN=cacdbcd1-2612-4e29-829d-0eea73dc98d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:2e:a9:cc:5b:f9:96:b8:32:cc:ab:28:3a:
                    20:36:02:21:bd:d5:38:fc:de:4e:03:9f:dd:b5:29:
                    fc:7e:c2:8f:1d:0b:a7:50:f6:81:f5:37:8f:0e:78:
                    7e:0d:c2:d4:65:ab:3e:97:d8:8e:a2:b6:81:e9:44:
                    9e:be:d0:00:70:de:34:16:4e:11:73:54:17:93:ae:
                    0a:b6:ea:b1:e8:53:3b:96:1b:98:c5:ef:7a:fc:bc:
                    ac:c3:51:4a:26:82:ef:79:b2:ba:73:09:ff:e3:1a:
                    cb:25:2b:e1:f2:c5:6b:b3:9c:8a:cb:3d:bc:68:53:
                    fc:9e:72:17:a5:76:8e:ff:ba:16:e4:d4:de:73:a2:
                    bb:c7:2a:cf:58:56:df:f6:80:34:d2:6a:fe:8e:fa:
                    f8:35:5f:4b:d7:95:0c:7d:4f:83:84:e5:47:c5:80:
                    a4:a6:6f:06:27:e0:b9:65:0c:90:68:07:a5:28:20:
                    ac:2e:1c:e2:80:19:80:53:d0:9d:11:59:22:64:ea:
                    f9:3b:58:83:2c:aa:4b:28:44:21:06:5c:49:d3:56:
                    29:27:76:7e:86:ba:a2:76:b3:01:a8:71:72:e0:23:
                    61:67:83:7d:6f:cb:13:da:5c:12:7e:c9:e5:fd:fc:
                    fb:0e:a4:55:de:a7:e5:cb:7a:a5:be:50:28:cd:cf:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:1A:8E:AD:9E:20:17:55:E4:CD:78:26:89:57:F2:AE:C6:18:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/641d0969-47e6-3e49-84bc-141c0729724a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:07:d2:cb:27:d3:ea:fb:45:b7:05:60:90:44:7f:84:57:
         17:0a:08:55:cf:3f:d3:c6:12:ce:b3:10:45:98:ee:4a:69:17:
         de:b1:44:de:2a:30:ab:b4:04:a4:cd:c5:81:2a:45:90:47:03:
         bf:41:22:0a:34:f9:82:ae:9f:d0:96:7f:90:b3:f4:73:7e:06:
         ff:f3:6b:4b:58:31:6e:e4:22:33:99:5d:c7:5f:88:27:ed:50:
         bd:7f:26:4f:79:07:74:7e:ad:b0:23:16:6b:00:5b:92:03:78:
         fa:6e:ab:03:1d:a6:ee:42:50:f2:fb:3d:50:06:3f:65:53:d1:
         d2:bd:87:66:51:60:08:3b:9f:d3:38:87:52:ad:43:8d:66:15:
         92:3b:f3:67:c6:0c:6f:31:f4:cf:5a:f9:74:7c:f3:1a:e5:a4:
         78:87:28:66:e1:da:b2:5e:d0:34:ad:fd:7c:c8:47:65:98:e1:
         30:f1:17:55:62:3a:9b:1c:21:c9:c9:cc:1f:39:73:90:4d:32:
         92:77:9d:71:cb:c2:73:fc:fb:74:39:59:d3:ea:ff:e5:b1:56:
         b6:b9:02:3e:a5:d3:94:a0:48:9c:6b:74:18:fc:75:7c:41:4d:
         01:a2:ad:70:8c:cc:0c:d6:be:f8:5a:1c:0b:32:8a:7a:8d:6c:
         0e:33:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:57:28 2025 by rpki-client