Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d86887-342c-37bc-b138-c0a0df5f3351.roa
File:                     c5d86887-342c-37bc-b138-c0a0df5f3351.roa (raw, json)
Hash identifier:          FthCQTVa0xjprlfXmlyntNZxr8MJVKqjWXN49cqCXjU=
Subject key identifier:   93:EC:23:45:5C:3D:81:03:0E:3F:07:6B:7F:58:73:9A:B2:4C:E8:01
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F498B34854D3AB4D90E7B4280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d86887-342c-37bc-b138-c0a0df5f3351.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     328323
IP address blocks:        2001:470:4fb::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 02 Oct 2026 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:34:85:4d:3a:b4:d9:0e:7b:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=320c1a0a-f7b7-45a6-a63e-279d51974b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:89:2c:f2:92:2f:7a:80:a5:62:79:7f:64:
                    88:f3:ef:d4:8d:c4:b2:0c:ac:65:8e:61:06:e9:ec:
                    67:d2:26:12:c8:ee:2b:8b:ab:25:ac:25:54:0f:0f:
                    21:8c:ec:8a:7f:01:fb:26:3b:c5:2f:31:d4:a0:e4:
                    50:fb:84:91:bf:ec:97:2a:18:c9:dc:90:9b:3f:6b:
                    69:ee:68:80:3a:ff:a4:b5:6b:49:d8:62:05:dc:bc:
                    13:da:1a:c0:bf:3e:f2:f4:22:61:57:b0:6e:07:12:
                    d1:d9:60:94:5e:22:44:a3:3b:4a:c3:ee:da:e4:9a:
                    7f:a9:30:d3:39:e6:4e:4b:dd:7f:1a:0b:4b:f9:4e:
                    2c:1c:65:32:d8:ac:07:a8:ee:ce:36:fa:d4:2b:39:
                    6e:da:90:89:45:02:78:27:2e:86:bb:30:76:a1:79:
                    1b:d6:2a:0b:9e:ea:48:6f:27:b7:54:e3:ce:9b:1b:
                    b7:34:33:e6:c7:cf:5b:db:88:61:c5:cf:48:48:7d:
                    cd:46:bd:68:df:f7:eb:6b:6c:fa:a6:b3:e0:bc:f9:
                    f4:da:d5:1e:1a:d9:5b:e5:cd:49:81:e7:db:71:40:
                    aa:79:73:b1:5f:6d:c4:1c:b8:96:f2:f6:9f:d3:09:
                    75:46:a8:ac:47:f5:34:8d:0f:4a:43:64:36:75:1f:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:23:45:5C:3D:81:03:0E:3F:07:6B:7F:58:73:9A:B2:4C:E8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d86887-342c-37bc-b138-c0a0df5f3351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:28:af:27:d6:6a:f7:6b:82:3d:a7:07:a3:bb:5a:18:1b:ba:
         28:79:da:af:ab:54:96:ed:84:e7:e9:a6:c4:03:79:8b:8a:98:
         a5:52:f4:39:ae:d8:e4:e5:a5:74:61:4b:c0:6b:06:68:0d:11:
         5c:fc:4a:0b:e3:cc:c2:5c:20:a8:dc:d2:23:98:89:e1:68:84:
         77:78:0a:00:03:b8:e5:6d:1f:18:25:5e:a4:ab:3c:52:c7:59:
         2f:af:c5:7c:48:b9:c0:9e:a8:cf:23:b9:84:e2:6c:8c:97:0c:
         14:f9:38:13:01:c3:33:fa:f6:fa:7b:6e:e7:6f:b0:b6:f9:a6:
         45:91:67:27:19:0a:db:e2:9a:35:d9:2e:00:c0:15:23:59:3d:
         df:7a:55:b2:b6:39:d8:ea:c5:4a:da:59:45:cf:94:8a:aa:a7:
         06:e1:61:5c:d3:25:62:58:2a:ac:ff:eb:5f:91:ed:ba:73:74:
         39:ce:12:de:74:c7:af:d8:e0:d4:6a:28:df:e6:18:c4:80:63:
         2e:98:fc:41:08:c0:59:59:a2:27:05:17:f8:cd:89:8a:65:16:
         eb:3c:b8:aa:04:2a:67:64:38:82:0a:bb:5b:d0:14:55:12:20:
         16:24:9e:2b:98:99:d4:c4:da:a8:e1:8e:d1:3b:8e:7a:1c:c9:
         60:42:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----