Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58c7c727-584a-3867-9e0b-98bd0557780a.roa
File:                     58c7c727-584a-3867-9e0b-98bd0557780a.roa (raw, json)
Hash identifier:          YfdOSrZNM0oyjKzcQMt5x4mCdeG1DJarNHrropVwLus=
Subject key identifier:   C7:0E:C1:E3:A1:6F:61:D8:0C:49:05:18:A5:6C:66:B8:65:ED:FC:EE
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F78E8362948172FF16E683B40
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58c7c727-584a-3867-9e0b-98bd0557780a.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     63023
IP address blocks:        136.176.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 12 Oct 2026 05:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:36:29:48:17:2f:f1:6e:68:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=d21470da-0983-47c3-80bb-8a609b27d2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:73:67:1f:9a:60:2e:b2:6c:c0:25:00:37:
                    98:14:65:c2:8a:50:1c:b8:15:b0:40:12:2e:57:92:
                    48:85:cc:3a:d2:6d:54:2a:c4:90:4d:1c:a5:3a:f1:
                    ea:ea:a3:11:9c:4d:d7:b1:7b:db:a2:bf:34:a2:4e:
                    d8:a6:50:e2:11:a2:dc:a2:d0:fb:59:00:42:a1:7f:
                    dd:5b:fd:60:68:55:56:bb:36:20:f9:ed:44:5a:b3:
                    c7:90:c4:b3:86:05:4b:6d:45:97:32:6c:2e:34:7f:
                    ed:97:8d:3d:c7:06:e4:d1:f5:8a:53:b8:43:78:83:
                    f2:64:51:4c:86:f4:24:b7:3c:63:60:56:ed:e8:2a:
                    0c:36:e0:5a:ed:c1:42:cd:02:c8:72:ee:0d:84:34:
                    47:3b:66:53:f8:26:75:5c:95:1f:8e:43:7f:bc:6a:
                    b3:f8:66:72:ea:99:97:cf:75:19:2e:18:cf:8b:df:
                    48:ca:35:59:75:cb:c1:16:af:23:ee:d4:bd:6e:08:
                    02:88:e7:76:a6:78:5e:70:7b:61:ca:ca:6a:ba:80:
                    1e:66:23:34:37:be:16:21:0b:51:ec:cc:da:d7:30:
                    13:a5:f9:78:84:63:23:0a:69:89:27:a0:e3:de:cb:
                    29:68:5d:85:75:91:95:d3:65:18:df:48:fc:ee:65:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0E:C1:E3:A1:6F:61:D8:0C:49:05:18:A5:6C:66:B8:65:ED:FC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58c7c727-584a-3867-9e0b-98bd0557780a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:69:6b:8e:2a:af:4f:10:a1:9b:ed:c5:9b:d2:73:42:36:8a:
         ec:65:c4:14:c5:e5:5f:96:05:6f:f3:eb:84:fa:1f:f8:90:53:
         c2:32:3a:8b:bf:65:e8:e8:53:cd:83:6e:bd:ee:30:52:58:c6:
         aa:52:33:f0:ca:7d:56:63:1b:29:0c:67:79:8d:5b:af:39:e9:
         b1:3d:87:40:fe:9a:5b:8f:a3:d1:7c:fa:c0:18:ca:a0:cf:f3:
         cd:30:d9:8a:eb:ee:51:d5:54:7c:08:9d:2d:6e:62:96:7e:c5:
         29:50:89:d1:95:fe:6d:87:cc:7b:97:c5:01:ff:cd:b0:9f:ee:
         04:5d:72:2b:0b:ec:06:2a:1a:5c:06:41:f4:1e:b4:33:2f:58:
         8d:f6:0b:f7:98:b4:5e:e5:b9:1f:2e:4f:45:e1:81:de:d9:a5:
         d5:be:5e:a6:87:56:eb:7e:bc:1d:16:01:af:e9:1e:31:81:49:
         c4:d1:8c:87:a8:6e:87:71:c1:d5:42:2f:47:d2:d8:3a:43:b3:
         ae:11:76:f7:29:48:16:ef:8c:ae:6f:af:8b:76:0b:13:8f:d1:
         bf:fe:a2:31:72:df:72:9e:1e:50:b3:6e:97:62:34:85:83:60:
         ce:02:14:a7:bc:9d:44:b2:42:2e:b3:fd:c3:3b:fb:66:28:ec:
         94:fe:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:11:49 2026 by rpki-client