Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134382e3235352e302f32342d3234203d3e20313436383932.roa
File:                     3139332e3134382e3235352e302f32342d3234203d3e20313436383932.roa (raw, json)
Hash identifier:          e6VIjg1fq/e0GZCzmB/ZU0MY6xoAHlFq2M37x9CSQfc=
Subject key identifier:   A2:69:2B:34:6D:B6:03:A8:18:84:B6:00:74:C5:10:84:57:DD:DF:09
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       160D8B0B6ABF5795F6C71B3C3A8643190B7F9607
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134382e3235352e302f32342d3234203d3e20313436383932.roa
Signing time:             Mon 20 Jul 2026 17:45:28 +0000
ROA not before:           Mon 20 Jul 2026 17:40:28 +0000
ROA not after:            Mon 19 Jul 2027 17:45:28 +0000
asID:                     146892
IP address blocks:        193.148.255.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 21 Jul 2026 09:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:8b:0b:6a:bf:57:95:f6:c7:1b:3c:3a:86:43:19:0b:7f:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 20 17:40:28 2026 GMT
            Not After : Jul 19 17:45:28 2027 GMT
        Subject: CN=A2692B346DB603A81884B60074C5108457DDDF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:f2:2f:c5:88:f0:24:1d:9d:86:41:d8:3b:
                    e9:7a:55:1a:4c:46:30:99:e9:24:89:55:f0:64:79:
                    3a:40:4e:27:e2:38:fe:1e:a0:00:fd:31:9c:ca:84:
                    fc:82:54:08:8b:e4:0f:fa:02:89:9d:8a:83:6e:d6:
                    10:f5:b8:eb:ef:a7:e0:b8:2e:22:c2:33:12:8e:ba:
                    ea:0e:33:30:98:6e:82:17:07:90:63:00:ae:3a:0b:
                    13:d3:e2:5f:2a:57:6c:20:d7:36:45:7e:28:ae:77:
                    54:7a:4c:5d:26:a6:a7:b3:f8:e2:7b:cf:7d:2a:d5:
                    0f:3e:3d:ab:1a:a4:c3:aa:de:28:3d:4d:f7:da:eb:
                    bc:08:b7:22:fe:96:89:98:27:87:6d:1f:74:88:da:
                    ed:28:16:60:53:03:e5:cd:23:d1:f8:b5:c0:6d:f6:
                    dd:f4:d4:b5:0f:a9:2f:d0:66:75:ee:25:84:02:e5:
                    f4:4e:32:d5:35:57:b6:8a:86:4c:49:f4:3f:60:37:
                    9d:52:7e:ec:1b:e5:38:ee:1e:f3:c8:0a:7b:99:86:
                    2f:a1:88:0e:d5:46:24:6f:7d:15:89:b8:38:2e:4f:
                    5a:39:1f:97:7f:1f:58:18:5c:e0:bd:50:d4:bc:4c:
                    64:bd:80:1f:2f:26:73:ed:d9:fe:d6:fc:e1:40:f2:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:2B:34:6D:B6:03:A8:18:84:B6:00:74:C5:10:84:57:DD:DF:09
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134382e3235352e302f32342d3234203d3e20313436383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:16:17:9f:94:67:9a:19:ed:c4:10:88:fe:15:ec:f4:12:31:
         f7:c0:0f:fe:57:27:cb:73:ea:fb:10:d3:7c:fe:8e:5f:7b:83:
         5f:b0:95:95:83:87:23:c6:58:6c:ae:c5:3d:af:98:63:8c:ca:
         c9:8f:d2:63:2f:09:ef:84:13:02:ba:55:1c:37:f5:e3:75:4d:
         cb:08:2a:7d:1b:15:2a:33:fb:f9:b1:6b:e8:b3:05:5d:72:c7:
         43:e3:9c:81:20:94:7f:0e:c8:97:11:ba:1b:f2:ff:4c:2c:c8:
         66:c7:fe:13:1c:39:23:28:32:07:20:9e:05:c7:a4:dd:98:d2:
         36:a8:3b:14:f2:d4:aa:cd:2f:55:12:99:1a:2d:e5:5e:71:26:
         0f:4b:f1:35:be:f2:a0:c7:38:ea:ea:79:9f:01:e7:ab:52:a0:
         dd:62:d5:fc:ac:7e:90:76:d0:c3:37:de:88:de:b1:90:53:04:
         27:9b:8e:1b:81:dd:b6:d0:e9:1d:23:1c:a1:da:01:fb:d4:17:
         47:85:7c:c3:de:ad:d1:3f:19:b8:5b:62:10:61:82:de:52:74:
         88:64:0e:b7:d2:94:1a:97:20:7a:de:26:38:bb:de:fe:57:6a:
         11:ad:0b:11:79:8f:96:ca:10:0f:d4:97:a0:68:bd:e5:ef:01:
         b5:4e:e9:9a
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUFg2LC2q/V5X2xxs8OoZDGQt/lgcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNzIwMTc0MDI4WhcNMjcwNzE5MTc0NTI4
WjAzMTEwLwYDVQQDEyhBMjY5MkIzNDZEQjYwM0E4MTg4NEI2MDA3NEM1MTA4NDU3
RERERjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrfyL8WI8CQd
nYZB2DvpelUaTEYwmekkiVXwZHk6QE4n4jj+HqAA/TGcyoT8glQIi+QP+gKJnYqD
btYQ9bjr76fguC4iwjMSjrrqDjMwmG6CFweQYwCuOgsT0+JfKldsINc2RX4orndU
ekxdJqans/jie899KtUPPj2rGqTDqt4oPU332uu8CLci/paJmCeHbR90iNrtKBZg
UwPlzSPR+LXAbfbd9NS1D6kv0GZ17iWEAuX0TjLVNVe2ioZMSfQ/YDedUn7sG+U4
7h7zyAp7mYYvoYgO1UYkb30Vibg4Lk9aOR+Xfx9YGFzgvVDUvExkvYAfLyZz7dn+
1vzhQPITnQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKJpKzRttgOoGIS2AHTFEIRX
3d8JMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzNDM4MmUzMjM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzYzODM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBlP8wDQYJKoZIhvcN
AQELBQADggEBAFYWF5+UZ5oZ7cQQiP4V7PQSMffAD/5XJ8tz6vsQ03z+jl97g1+w
lZWDhyPGWGyuxT2vmGOMysmP0mMvCe+EEwK6VRw39eN1TcsIKn0bFSoz+/mxa+iz
BV1yx0PjnIEglH8OyJcRuhvy/0wsyGbH/hMcOSMoMgcgngXHpN2Y0jaoOxTy1KrN
L1USmRot5V5xJg9L8TW+8qDHOOrqeZ8B56tSoN1i1fysfpB20MM33ojesZBTBCeb
jhuB3bbQ6R0jHKHaAfvUF0eFfMPerdE/GbhbYhBhgt5SdIhkDrfSlBqXIHreJji7
3v5XahGtCxF5j5bKEA/Ul6BoveXvAbVO6Zo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:37 2026 by rpki-client