Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f1a1cc32-6517-3e70-a714-eaabd1545500.roa
File:                     f1a1cc32-6517-3e70-a714-eaabd1545500.roa (raw, json)
Hash identifier:          LVRvF9VcTDwqo+fj5Ak9QMTCTkv/4GUu/aNwjNyqLHA=
Subject key identifier:   3F:59:7F:39:9D:F1:05:4B:6B:C9:AB:E2:EC:82:A3:99:BF:D0:76:61
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D07052FA5781588AA080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f1a1cc32-6517-3e70-a714-eaabd1545500.roa
Signing time:             Fri 30 May 2025 19:11:38 +0000
ROA not before:           Fri 30 May 2025 19:11:38 +0000
ROA not after:            Thu 28 Aug 2025 19:11:38 +0000
asID:                     46794
IP address blocks:        152.26.31.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d0:70:52:fa:57:81:58:8a:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:38 2025 GMT
            Not After : Aug 28 19:11:38 2025 GMT
        Subject: CN=eec06069-efbb-4689-b3ae-d6d3a50d8d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:47:8b:ba:d5:9c:95:39:20:36:4c:31:25:
                    29:bf:e9:fc:3b:ed:b3:aa:ab:b1:8e:cd:72:61:1a:
                    c1:84:be:80:0f:fc:87:25:1b:0f:60:c2:aa:ef:d8:
                    aa:57:44:0f:b1:72:43:80:9a:1a:79:49:dd:1a:f5:
                    00:07:29:b9:1c:af:5d:97:a3:22:77:84:7c:fa:69:
                    52:92:92:66:6b:d6:1f:e9:8b:41:82:58:37:9a:f4:
                    77:1b:13:77:fb:22:2b:50:54:5d:f0:b7:49:d9:4b:
                    35:80:08:fc:28:24:6e:52:61:f8:99:26:8d:8f:ec:
                    6a:37:10:3f:96:94:c3:be:4f:eb:61:c5:e5:34:b0:
                    77:60:89:d9:6b:dd:63:ff:59:18:b9:e7:06:e0:c0:
                    da:a5:51:34:8a:d0:69:68:76:8e:bc:f9:e7:19:a1:
                    ea:69:9f:81:e9:80:9f:f3:76:91:8e:65:cd:29:14:
                    c8:3c:f5:94:8f:93:18:0b:ba:ca:af:1a:61:8f:db:
                    62:7c:97:00:ca:24:a6:64:7f:31:c8:ea:a0:81:d8:
                    b2:5b:60:ae:41:3b:7b:2c:1b:64:8c:d8:dd:30:7a:
                    94:55:57:ef:5a:95:3e:f5:25:87:7a:32:25:25:e0:
                    07:88:e3:9a:74:47:c5:0d:8b:bd:bf:7d:94:02:a9:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:7F:39:9D:F1:05:4B:6B:C9:AB:E2:EC:82:A3:99:BF:D0:76:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f1a1cc32-6517-3e70-a714-eaabd1545500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:cf:29:c7:f1:c9:eb:e0:2e:d3:df:e4:7d:05:1a:c3:9f:
         24:ef:7c:4e:c2:16:3b:56:26:23:3a:a1:18:51:2f:4e:bd:e6:
         90:d4:1a:97:c9:b6:fa:10:41:5c:bd:25:b0:13:87:39:5d:d6:
         da:bc:26:d1:32:ec:ab:d1:02:26:61:3b:c7:65:06:f8:06:dd:
         af:29:26:61:df:65:90:9e:38:b3:36:68:32:8b:77:9d:72:71:
         42:df:4d:f7:72:ab:ce:34:cf:90:3a:fe:f2:9c:3c:5e:22:7c:
         43:1c:ca:5b:31:6e:8d:ed:7c:15:85:73:8d:cf:ed:e9:1e:5a:
         77:5c:9f:6c:bd:60:7c:f0:83:ad:a4:c0:ef:84:fe:53:74:d0:
         ae:38:8d:94:2b:91:a3:80:35:e7:c9:18:56:36:d2:1f:83:78:
         30:6b:13:3f:d4:19:f1:99:32:20:23:30:ac:0e:90:f8:74:77:
         1c:8c:34:12:b3:cb:30:fa:68:08:d4:00:af:5a:70:31:12:84:
         e2:5b:b5:5b:4b:e3:20:aa:48:ed:76:ec:36:cb:f7:22:fd:25:
         7e:a7:ed:b1:1b:cb:da:41:d2:70:d9:93:6d:69:d5:43:ad:27:
         b0:74:5e:a7:89:5a:d5:21:98:37:16:fb:d9:77:d8:d3:3a:3e:
         16:d3:f8:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9BwUvpXgViKoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzOFoXDTI1MDgyODE5MTEzOFowLzEtMCsGA1UEAxMk
ZWVjMDYwNjktZWZiYi00Njg5LWIzYWUtZDZkM2E1MGQ4ZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqFHi7rVnJU5IDZMMSUpv+n8O+2zqquxjs1y
YRrBhL6AD/yHJRsPYMKq79iqV0QPsXJDgJoaeUndGvUABym5HK9dl6Mid4R8+mlS
kpJma9Yf6YtBglg3mvR3GxN3+yIrUFRd8LdJ2Us1gAj8KCRuUmH4mSaNj+xqNxA/
lpTDvk/rYcXlNLB3YInZa91j/1kYuecG4MDapVE0itBpaHaOvPnnGaHqaZ+B6YCf
83aRjmXNKRTIPPWUj5MYC7rKrxphj9tifJcAyiSmZH8xyOqggdiyW2CuQTt7LBtk
jNjdMHqUVVfvWpU+9SWHejIlJeAHiOOadEfFDYu9v32UAqnvaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9Zfzmd8QVLa8mr4uyCo5m/0HZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjFhMWNjMzItNjUxNy0z
ZTcwLWE3MTQtZWFhYmQxNTQ1NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBofMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3TzynH8cnr4C7T3+R9BRrDnyTvfE7CFjtWJiM6oRhRL0695pDUGpfJ
tvoQQVy9JbAThzld1tq8JtEy7KvRAiZhO8dlBvgG3a8pJmHfZZCeOLM2aDKLd51y
cULfTfdyq840z5A6/vKcPF4ifEMcylsxbo3tfBWFc43P7ekeWndcn2y9YHzwg62k
wO+E/lN00K44jZQrkaOANefJGFY20h+DeDBrEz/UGfGZMiAjMKwOkPh0dxyMNBKz
yzD6aAjUAK9acDEShOJbtVtL4yCqSO127DbL9yL9JX6n7bEby9pB0nDZk21p1UOt
J7B0XqeJWtUhmDcW+9l32NM6PhbT+PY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:49:39 2025 by rpki-client