Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2f6b2f9f-5132-388e-8a58-debeb4ad0bdf.roa
File:                     2f6b2f9f-5132-388e-8a58-debeb4ad0bdf.roa (raw, json)
Hash identifier:          dvcaW/IgoiLa4dawtBCAZBDb7rZxIA0P67/fpUKH9E8=
Subject key identifier:   F3:FD:F6:51:45:9D:59:28:65:6D:15:DA:6F:23:42:02:2A:FB:07:2B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1AB1DFC2E195F0920CFB94C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2f6b2f9f-5132-388e-8a58-debeb4ad0bdf.roa
Signing time:             Tue 08 Sep 2026 07:04:52 +0000
ROA not before:           Tue 08 Sep 2026 07:04:52 +0000
ROA not after:            Mon 07 Dec 2026 08:04:52 +0000
asID:                     6461
IP address blocks:        173.44.239.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 22 Sep 2026 16:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1a:b1:df:c2:e1:95:f0:92:0c:fb:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  8 07:04:52 2026 GMT
            Not After : Dec  7 08:04:52 2026 GMT
        Subject: CN=2bf18a96-a272-4162-b073-d7afb0442726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:af:19:3d:27:05:a6:17:5f:9b:e1:81:8f:
                    80:2b:f3:98:4d:ee:a1:ff:c3:91:3d:50:61:08:18:
                    f3:af:76:02:20:3b:52:d5:1b:ab:f6:e6:53:bb:ad:
                    5f:76:b0:2b:35:c2:70:66:d8:89:ae:ad:90:d0:46:
                    81:d2:46:90:fe:06:0e:f9:8a:1e:fb:c8:36:2a:3c:
                    75:72:cc:3a:c8:55:7c:cc:e8:fa:b0:b3:4a:39:47:
                    9f:b3:1e:0f:8b:37:40:e0:0b:57:24:16:6d:65:85:
                    73:08:bd:9d:dd:b4:1e:ff:af:c3:19:e7:07:09:50:
                    53:e8:7d:5f:5d:6e:4b:0f:08:77:c2:13:81:e8:24:
                    bc:cc:f1:d8:21:1a:64:99:f5:77:3c:49:32:27:2f:
                    c7:d3:5e:c3:63:8d:e0:79:be:d3:be:73:4a:fb:e7:
                    dd:91:5b:1b:30:6d:90:6f:40:13:68:b8:b9:0f:b4:
                    da:2b:b9:a7:c4:14:b1:b8:4e:c0:a0:22:83:6d:72:
                    ea:37:29:88:e6:3b:cf:33:e3:8d:59:9d:8e:81:5b:
                    c2:b9:b9:97:04:4d:7e:f9:ed:48:5e:b9:77:cb:cc:
                    cb:a0:36:73:12:3a:2a:32:d8:c2:97:e4:83:b5:7c:
                    a3:cc:ce:61:ab:bf:1f:28:00:2d:5f:d9:5c:b3:5a:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FD:F6:51:45:9D:59:28:65:6D:15:DA:6F:23:42:02:2A:FB:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2f6b2f9f-5132-388e-8a58-debeb4ad0bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:f9:d8:26:d8:12:5f:33:df:7f:04:34:32:a5:4a:da:5a:
         47:61:13:94:87:b7:5b:71:62:53:1b:ba:4f:fb:2c:f0:2b:b9:
         ac:4f:66:45:8c:b3:c1:fd:08:52:53:c6:32:20:20:aa:db:55:
         da:16:9e:99:85:6c:1c:bb:18:0f:84:f3:a1:15:7f:9d:3d:b1:
         cf:dd:c2:c7:68:57:1a:4c:69:30:11:ab:12:28:a8:f0:0c:26:
         20:a8:d7:7d:c4:19:d8:60:da:0a:95:9e:46:2d:0e:4b:68:11:
         4a:72:b0:7a:e9:3c:3b:a2:75:08:16:fa:63:ea:ba:72:73:e7:
         35:0c:1c:25:61:1f:f0:26:fb:d1:02:e6:05:7f:82:7b:bc:0e:
         4c:44:47:0f:fb:0a:70:a2:26:9f:e7:9f:9e:46:63:6b:0f:58:
         b6:57:3d:fc:8b:86:c8:ff:8c:01:ee:cc:58:41:50:55:c9:6d:
         55:4b:a1:0d:07:56:ae:7a:6c:7d:25:85:53:07:b6:67:01:60:
         14:4d:02:58:be:42:9e:bc:c9:76:f9:03:db:72:74:b1:ec:2b:
         06:5d:21:84:e0:a0:18:32:4f:37:ce:38:84:49:e4:84:f6:d9:
         07:98:59:aa:53:88:0f:19:ca:6a:54:67:43:d7:17:87:9d:29:
         d3:4e:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:28:18 2026 by rpki-client