Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/56f602b4-8823-3508-b804-ee049b5bd80d.roa
File:                     56f602b4-8823-3508-b804-ee049b5bd80d.roa (raw, json)
Hash identifier:          gxfB3a2uV3LRgi2lYC8kHmhEjwPmnlApcTuQudFU9+E=
Subject key identifier:   1E:7D:F9:84:92:93:A0:75:BB:96:A5:C4:86:71:9C:9B:6C:DA:E0:0F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D876F6DD79DD8E024B9D36F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/56f602b4-8823-3508-b804-ee049b5bd80d.roa
Signing time:             Thu 16 Apr 2026 20:20:13 +0000
ROA not before:           Thu 16 Apr 2026 20:20:13 +0000
ROA not after:            Wed 15 Jul 2026 20:20:13 +0000
asID:                     174
IP address blocks:        205.196.147.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 17 Apr 2026 17:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:6f:6d:d7:9d:d8:e0:24:b9:d3:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 16 20:20:13 2026 GMT
            Not After : Jul 15 20:20:13 2026 GMT
        Subject: CN=df9d8e32-e83c-4ed6-886d-edc3f23dc266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:be:33:18:6f:63:fb:1b:24:01:34:11:12:
                    b1:0a:3a:37:13:aa:96:4c:33:ed:0a:23:56:b7:c4:
                    02:69:75:a4:d1:39:91:27:e2:da:30:30:f4:da:92:
                    dd:e9:40:0c:24:45:bf:5b:1d:9e:4c:ee:ff:73:e1:
                    b3:76:ee:07:0f:bb:65:41:ce:a5:f8:fb:17:ae:e1:
                    8c:a1:23:87:7a:c9:f9:17:41:4c:ad:27:1f:b8:a2:
                    01:33:8a:f6:fd:c9:64:62:52:c2:f8:f1:72:03:e6:
                    48:96:44:b5:58:01:16:81:52:41:70:65:62:61:e0:
                    ae:03:77:38:11:e3:6b:6b:3f:22:df:dc:b2:f1:ec:
                    0c:fb:02:5b:3e:e6:1c:21:96:95:b3:c1:e4:65:84:
                    33:20:39:f1:ba:ab:7a:f2:2d:b1:43:80:90:fa:58:
                    bf:a5:ed:df:bc:42:9a:ac:fd:80:9a:0b:bd:9f:60:
                    c2:43:d2:a2:55:e6:6b:9c:c6:b8:f5:b6:0f:70:0b:
                    d2:2b:9c:79:9b:44:fd:40:ec:5e:09:c5:de:80:4b:
                    c7:66:85:dd:ee:f4:ba:ef:3e:fe:98:9a:cc:67:1a:
                    e7:f6:6d:03:ca:87:9f:de:c8:2d:8f:aa:4b:bc:b6:
                    fc:9c:cf:83:a7:a8:e8:a7:64:47:19:99:29:42:fc:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:F9:84:92:93:A0:75:BB:96:A5:C4:86:71:9C:9B:6C:DA:E0:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/56f602b4-8823-3508-b804-ee049b5bd80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a1:70:58:b3:3e:fe:23:9e:6c:00:f2:59:32:1c:86:53:aa:
         ae:d2:34:b8:9a:9a:91:9b:1d:7b:6e:6e:f7:78:08:ce:52:2b:
         1d:40:c3:f7:0c:3e:52:40:e9:05:b5:bd:65:37:c2:db:0f:65:
         a3:4b:6a:fe:85:d3:23:ea:c6:f5:a8:61:49:79:64:35:c1:6e:
         40:ac:c1:b5:30:59:33:c6:43:e5:bf:a9:a9:46:a0:b1:98:3e:
         d5:9e:d4:e2:84:7f:76:77:dd:4e:56:05:c6:e0:5a:8c:c8:3e:
         6b:83:02:74:2a:cf:38:97:14:3a:56:04:9f:06:2a:b2:9d:96:
         b0:31:9f:ca:22:31:d4:bd:e6:35:b9:05:9d:3a:45:d0:93:8d:
         e5:46:11:74:2b:a6:bd:3e:d1:04:9d:a8:1f:97:73:57:fd:f6:
         82:05:b7:e0:d3:50:ff:6e:12:c6:7c:e9:d8:45:16:45:48:ce:
         1a:8a:c6:7d:20:81:b7:9b:e7:cd:ea:00:25:6f:b5:4f:26:87:
         bc:b8:99:82:fd:fe:4c:01:c5:bb:31:a3:8e:b5:5f:be:fd:19:
         ae:78:d0:f0:83:af:7f:1c:12:4b:ed:06:d3:a5:c7:a7:7c:1d:
         b2:a2:9c:71:99:b4:df:26:b9:b0:18:5b:c1:3c:37:35:1c:24:
         32:98:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----