Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a77850c5-73f9-32ab-8ab7-95bb48ec3895.roa
File:                     a77850c5-73f9-32ab-8ab7-95bb48ec3895.roa (raw, json)
Hash identifier:          C4pXrnw58gcGbKAh4aRMlzUNzJzbFUwCh5DdGBypFDQ=
Subject key identifier:   E8:2E:5F:61:70:6B:95:A6:1E:6A:C7:35:C2:2E:86:09:47:C8:AC:02
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0729B31F63030AA423447380
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a77850c5-73f9-32ab-8ab7-95bb48ec3895.roa
Signing time:             Fri 30 May 2025 19:15:26 +0000
ROA not before:           Fri 30 May 2025 19:15:26 +0000
ROA not after:            Thu 28 Aug 2025 19:15:26 +0000
asID:                     15153
IP address blocks:        152.26.56.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:29:b3:1f:63:03:0a:a4:23:44:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:15:26 2025 GMT
            Not After : Aug 28 19:15:26 2025 GMT
        Subject: CN=cfef2706-5b88-4e88-a3ea-0c0ea0b2893b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:22:4b:cf:c1:a4:f4:a0:d5:59:9a:f5:34:
                    b5:0a:c4:b2:88:c9:07:df:81:d9:3e:db:fe:ca:9e:
                    46:f4:ac:ba:0f:4e:fb:4a:1d:17:2e:a2:d5:8a:9f:
                    6e:05:bc:48:3a:ef:47:a9:4c:a1:80:67:dc:5f:22:
                    a9:4a:3f:26:71:6b:fb:b0:51:b7:d1:42:d3:0b:24:
                    cb:10:34:d5:73:ee:e7:f5:4a:46:93:9a:0c:cb:09:
                    60:f8:0c:b7:96:5f:27:fd:fc:be:f9:e2:de:ef:0a:
                    6e:b5:da:bc:ce:cc:5e:7f:45:03:63:cb:72:0d:77:
                    b6:e9:50:ac:55:36:a2:61:a6:2c:72:67:31:cc:db:
                    71:07:db:9c:ea:87:8d:17:c8:f0:4a:ef:da:d1:91:
                    77:1d:53:ab:38:0e:3d:87:53:3b:35:6b:10:ce:d6:
                    9a:2d:98:2c:80:14:aa:f5:5f:d6:9f:b0:8a:51:2f:
                    49:09:b4:d1:8f:12:bd:31:ae:18:f9:ce:06:e6:b2:
                    7b:7b:08:11:c6:78:96:ea:bc:a0:a3:cc:b1:83:01:
                    58:27:72:45:33:db:63:5f:3d:93:24:84:d4:36:ca:
                    7e:59:53:06:21:02:8e:97:27:75:03:0e:59:b5:d0:
                    c5:61:58:01:5a:8b:31:7b:5a:d3:cf:da:c4:ad:cb:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:5F:61:70:6B:95:A6:1E:6A:C7:35:C2:2E:86:09:47:C8:AC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a77850c5-73f9-32ab-8ab7-95bb48ec3895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:c8:13:70:51:78:50:a5:7b:15:12:f2:07:2f:47:f2:aa:
         3e:89:4c:05:7c:26:84:c6:81:a9:17:33:b6:16:33:8a:56:70:
         90:b7:cc:39:c1:93:48:5d:a6:b3:d3:28:e3:e8:6f:fc:52:13:
         17:b8:34:b8:1b:17:1c:53:62:39:1d:61:33:5d:36:df:8e:68:
         7c:c2:29:a1:a4:1a:d8:d8:ec:dd:dd:e4:a1:d9:00:46:aa:32:
         d2:3a:c0:68:20:22:16:fa:59:f5:97:52:f8:ea:50:01:a8:2b:
         d1:0f:f8:3b:1b:93:00:41:91:14:ef:b0:92:68:04:10:9c:2e:
         3c:e4:b4:63:75:4f:72:d6:4c:7a:2a:2e:11:44:f7:9c:43:68:
         04:91:39:68:aa:5b:e6:e8:24:55:75:fc:79:bb:2a:fe:9a:97:
         80:bc:33:72:d2:7a:90:1b:dc:d0:83:ed:4d:f6:68:f5:55:ae:
         66:5e:35:ee:88:2e:a8:24:8d:8d:74:54:bf:8b:c9:8e:e7:5b:
         d4:b8:05:40:5d:96:a8:5d:6d:b7:4f:47:26:ea:cb:47:ab:4b:
         31:12:c7:7e:c7:ee:d5:b6:6f:f3:b0:26:ed:bb:76:c0:63:53:
         c2:a1:a5:da:10:cf:b7:48:fa:a7:8d:fc:88:5b:f0:62:af:69:
         11:ed:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:10 2025 by rpki-client