Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c47886c6-b376-3aa0-98bc-200f3f8358b1.roa
File:                     c47886c6-b376-3aa0-98bc-200f3f8358b1.roa (raw, json)
Hash identifier:          pu5UYb42EZV8vhYXiXO3F8zP4DpRCVqLFUHKfLXuytc=
Subject key identifier:   74:00:38:31:1B:43:66:4A:E8:6E:C4:51:12:A5:CB:23:33:00:A8:91
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D153FBE551BFE848F7C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c47886c6-b376-3aa0-98bc-200f3f8358b1.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.26.69.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d1:53:fb:e5:51:bf:e8:48:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=16536876-bc75-44a1-81ca-513f05789161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:d6:e2:ff:fe:72:f9:9c:dd:cb:32:cc:c9:
                    1c:91:ce:68:e0:e1:8e:e0:f1:ac:77:3a:19:18:81:
                    49:7b:6c:22:7a:d1:eb:c8:a7:e8:04:5e:e0:46:ec:
                    a8:fb:06:19:04:51:41:4d:00:e7:5c:3e:13:c5:95:
                    7d:4f:3c:ff:fa:27:65:f5:1c:26:9c:ad:95:2d:6d:
                    90:08:8c:40:30:e7:96:c4:95:35:86:1c:77:d4:31:
                    3a:f4:74:2f:4f:5e:9a:6c:91:de:1d:a0:1c:75:fb:
                    9c:22:7c:a0:3a:7b:f6:5c:cf:76:f6:40:de:6b:26:
                    2e:66:e3:23:b6:f3:c9:64:07:ae:5a:2c:be:44:50:
                    d5:f3:b3:f7:ea:ef:e9:cf:fb:b9:ca:31:ca:97:9a:
                    58:94:bc:12:64:26:8b:05:87:51:41:17:31:95:0d:
                    7c:54:22:e3:e9:43:5b:9a:86:f7:a8:58:ce:ef:78:
                    99:d5:b3:bc:9a:1d:c3:66:22:13:ee:f8:7c:2b:41:
                    4b:5d:c2:ed:de:0a:68:aa:b7:99:16:1b:99:d2:93:
                    36:36:82:df:4d:c4:e2:18:55:50:38:46:b7:ce:ae:
                    2a:f4:f4:4b:ab:6e:93:67:c5:23:e7:b2:91:8a:63:
                    01:d2:79:17:a8:73:97:3a:e6:2d:e7:cd:f3:66:9a:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:00:38:31:1B:43:66:4A:E8:6E:C4:51:12:A5:CB:23:33:00:A8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c47886c6-b376-3aa0-98bc-200f3f8358b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:f5:5f:3a:c4:89:63:de:30:18:13:0b:9a:34:cd:8c:88:
         50:07:06:f7:ed:1c:7d:2f:bb:d6:da:7c:40:08:89:d9:76:6f:
         63:4a:fb:d3:b1:55:73:85:2f:bd:ff:97:7e:2f:02:55:06:40:
         a4:60:f9:c8:78:fc:73:94:6b:39:31:99:c1:47:96:e4:73:d7:
         da:c4:c7:3b:a8:f0:7d:62:d2:fa:6f:96:80:64:22:bb:0a:55:
         06:4d:fa:98:e4:69:ac:07:88:22:67:9a:d8:0a:cd:38:d9:38:
         f8:1d:f2:0a:64:4b:d6:0f:59:d2:a7:75:78:d6:a9:1e:f4:ca:
         c5:66:1e:fd:9e:37:e5:8b:e7:94:ac:c2:1a:5b:4b:94:be:be:
         52:56:58:fd:85:2e:5b:ce:d9:52:13:7e:d2:e0:d2:41:a0:65:
         92:21:e3:5d:93:ea:a3:f9:a5:2d:03:32:b2:c7:92:a5:03:cc:
         d8:f1:57:72:97:c4:fc:5c:34:0d:e4:97:43:5b:72:7d:df:9f:
         e4:1e:82:d6:e2:24:ff:ed:8b:4f:4b:47:6e:c0:d8:16:e9:f4:
         b6:1c:36:41:ef:5f:2b:3c:97:81:b4:89:e9:44:74:16:c4:2b:
         9e:61:ec:a1:4e:c1:8e:83:14:ee:46:15:ce:8a:03:b6:65:57:
         97:01:7c:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9FT++VRv+hI98AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzOVoXDTI1MDgyODE5MTEzOVowLzEtMCsGA1UEAxMk
MTY1MzY4NzYtYmM3NS00NGExLTgxY2EtNTEzZjA1Nzg5MTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7HW4v/+cvmc3csyzMkckc5o4OGO4PGsdzoZ
GIFJe2wietHryKfoBF7gRuyo+wYZBFFBTQDnXD4TxZV9Tzz/+idl9RwmnK2VLW2Q
CIxAMOeWxJU1hhx31DE69HQvT16abJHeHaAcdfucInygOnv2XM929kDeayYuZuMj
tvPJZAeuWiy+RFDV87P36u/pz/u5yjHKl5pYlLwSZCaLBYdRQRcxlQ18VCLj6UNb
mob3qFjO73iZ1bO8mh3DZiIT7vh8K0FLXcLt3gpoqreZFhuZ0pM2NoLfTcTiGFVQ
OEa3zq4q9PRLq26TZ8Uj57KRimMB0nkXqHOXOuYt583zZpr3zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQAODEbQ2ZK6G7EURKlyyMzAKiRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzQ3ODg2YzYtYjM3Ni0z
YWEwLTk4YmMtMjAwZjNmODM1OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAia9V86xIlj3jAYEwuaNM2MiFAHBvftHH0vu9bafEAIidl2b2NK+9Ox
VXOFL73/l34vAlUGQKRg+ch4/HOUazkxmcFHluRz19rExzuo8H1i0vpvloBkIrsK
VQZN+pjkaawHiCJnmtgKzTjZOPgd8gpkS9YPWdKndXjWqR70ysVmHv2eN+WL55Ss
whpbS5S+vlJWWP2FLlvO2VITftLg0kGgZZIh412T6qP5pS0DMrLHkqUDzNjxV3KX
xPxcNA3kl0Nbcn3fn+QegtbiJP/ti09LR27A2Bbp9LYcNkHvXys8l4G0ielEdBbE
K55h7KFOwY6DFO5GFc6KA7ZlV5cBfOc=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:19 2025 by rpki-client