Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa
File:                     9f818511-3e38-3a87-853b-81a583a9f024.roa (raw, json)
Hash identifier:          EPw3n0zzoSccAIFuSR9Y10s7YeSRyaYDAu5bVFzd6i8=
Subject key identifier:   0D:6C:C0:8D:5E:B3:D4:02:90:37:E6:86:00:AF:7C:3F:3B:64:4D:BF
Certificate issuer:       /CN=d575d3fa-017d-4991-9edf-39101e5d78b5
Certificate serial:       010D0C9F4328584B4A471F1F03638B10B9E45680
Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     401461
IP address blocks:        2602:f7b4::/40 maxlen: 64
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 21:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:1f:1f:03:63:8b:10:b9:e4:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=8b4a6c09-43a0-47ac-8e46-2d63da81c520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:80:98:7f:67:ee:de:19:85:98:ec:d8:bf:ad:
                    40:c0:41:37:99:5f:70:a2:97:6f:7c:88:83:ca:5c:
                    5e:ce:7d:c5:55:be:36:9c:e7:c2:d8:ec:6d:22:a9:
                    8e:3a:85:a3:d3:14:fb:83:2e:85:e3:dd:b2:4f:ce:
                    2e:c1:1a:9a:e9:50:4d:bb:9b:48:c6:4f:a4:15:53:
                    26:69:63:f4:33:2e:48:05:c6:a3:12:59:32:43:ec:
                    48:cd:75:b0:4b:3e:fe:62:18:07:6d:f2:35:b5:e6:
                    24:ea:ab:55:dc:d9:72:9e:20:37:d3:ba:4e:22:49:
                    ce:d9:6d:a9:e7:bb:be:79:6e:ed:16:23:45:b6:9c:
                    43:00:18:ab:24:d0:a4:52:4f:d2:d1:b1:29:10:94:
                    c1:0a:d1:cd:03:e2:fe:3d:18:6d:f0:f6:c2:17:b4:
                    5f:f6:f9:31:93:05:ae:49:6e:0c:bc:9c:28:0f:e2:
                    59:9c:27:32:27:61:eb:da:22:0d:24:62:c3:9e:e1:
                    17:9d:79:42:51:da:75:66:1d:8c:be:7d:a0:ef:b2:
                    b9:72:9f:b0:aa:cb:dc:70:bb:ec:eb:98:33:f7:7f:
                    19:79:1a:e5:18:39:b5:c7:60:da:b5:bd:60:12:ca:
                    f7:7b:a9:6e:b9:7a:64:c1:0a:59:f1:fa:d1:d6:ad:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6C:C0:8D:5E:B3:D4:02:90:37:E6:86:00:AF:7C:3F:3B:64:4D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl

            X509v3 Authority Key Identifier:
                keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:f6:41:d6:d7:5b:55:6f:89:16:e3:72:a3:f4:a3:9c:8d:
         10:2b:b3:a7:20:10:de:28:11:4a:46:6e:ff:7d:8f:0b:e8:16:
         f1:f5:a4:04:d3:59:f4:98:b6:9b:97:18:33:48:e7:5c:59:d5:
         f5:e3:8a:7c:73:42:e9:8f:7c:b6:a9:e1:92:37:de:b9:8b:2e:
         43:7b:13:cc:9b:77:41:b7:b0:45:dc:b9:5f:19:08:28:24:2e:
         d7:2e:a0:31:b4:fa:12:bd:6a:f0:97:8a:43:7b:95:d1:56:4f:
         e5:55:99:67:b5:af:d7:a8:97:b8:fc:bf:58:45:c1:67:2d:3e:
         83:a1:21:0d:f3:f1:b9:97:32:94:7a:03:b3:bd:01:54:46:e7:
         7c:7d:1a:ac:f2:ed:d4:87:00:ed:59:68:3f:1e:08:87:a9:2e:
         c1:b6:de:bb:5b:95:33:da:20:9a:35:b8:ed:9d:00:d3:98:12:
         ac:f0:7c:fb:22:17:58:c5:ba:3f:d8:23:a6:f7:ad:61:4a:1b:
         0b:a1:9c:5e:c8:cb:da:ad:aa:c0:ad:20:e8:2a:ea:09:ad:cc:
         fd:77:07:13:b9:78:57:00:67:47:2c:b2:26:30:db:a4:9e:00:
         07:3c:3e:02:5f:be:5e:6a:56:1a:40:f1:4c:52:ed:19:a5:25:
         e9:39:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:22 2025 by rpki-client