Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb92ecfd-6d2e-3ede-80d9-51d6df611047.roa
File:                     bb92ecfd-6d2e-3ede-80d9-51d6df611047.roa (raw, json)
Hash identifier:          Ik486UQSjAW4bVIcVWOgQXSCV1pZd/iHtmFBGvMmu1U=
Subject key identifier:   49:A2:FD:91:BA:00:B1:04:B7:5C:FA:EE:30:64:6B:7E:51:3D:E7:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F08070CF1ED38EC9F34C0E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb92ecfd-6d2e-3ede-80d9-51d6df611047.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396562
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 08 Oct 2026 15:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:07:0c:f1:ed:38:ec:9f:34:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=f4c7f972-0a71-4717-ba53-16da55767d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:79:0b:72:fb:7f:bd:59:28:b4:91:49:6b:
                    30:58:04:43:c3:de:e9:9b:12:a7:22:bd:85:08:5e:
                    bf:1d:24:42:78:0b:93:40:7b:8d:ea:7f:e7:1e:d2:
                    89:f0:2c:8e:21:29:0d:56:33:77:17:5e:f5:28:d4:
                    23:4c:e5:32:ee:db:6c:dd:7a:63:7d:dc:93:fc:9b:
                    47:8b:56:31:20:08:37:88:26:49:97:cf:45:fa:57:
                    29:f3:f5:dd:eb:1c:f2:93:8b:b2:d6:b4:b7:76:ca:
                    e8:d8:ef:88:bc:d2:ed:e3:40:ab:45:69:ff:f5:08:
                    ac:88:e3:75:db:57:3b:f6:f4:a9:83:3a:f6:87:75:
                    e8:00:57:a0:b9:62:08:2d:08:93:b2:56:b3:69:25:
                    bb:3d:48:0e:a0:73:fb:7c:77:5f:a5:75:4f:98:f2:
                    c2:4c:3d:10:b1:6d:12:20:0f:b6:cd:47:3d:1d:a2:
                    51:ac:2a:34:2c:4f:17:7f:c0:ff:a6:46:32:12:46:
                    c9:f8:47:8d:e0:74:c5:2e:48:b1:ab:b4:88:18:d6:
                    b4:b8:af:01:91:91:d6:97:1e:5b:fb:e6:e4:65:21:
                    70:5c:5e:c1:04:20:fb:be:fd:e6:69:83:b6:06:6f:
                    7c:07:cb:7b:63:e9:4b:2d:2e:bb:8d:b8:54:44:92:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:FD:91:BA:00:B1:04:B7:5C:FA:EE:30:64:6B:7E:51:3D:E7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb92ecfd-6d2e-3ede-80d9-51d6df611047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:9f:07:16:33:cf:db:2d:0d:06:60:10:c4:d0:75:12:b5:
         a0:c3:71:11:d2:22:93:7c:de:e2:dc:02:d3:f3:7d:b8:8a:06:
         a0:13:d7:0a:4a:1e:af:09:22:e2:15:d0:61:02:4c:88:26:fa:
         35:9b:51:5b:04:37:18:2a:7f:cd:fb:ce:1c:7e:93:9a:2b:5b:
         a2:b3:a1:65:66:07:33:f1:a8:29:04:20:84:a0:24:ed:a3:d5:
         e4:8f:97:86:e1:38:ff:3e:b7:e0:ce:f8:5c:43:70:cc:a4:e7:
         b8:b5:cb:a4:9a:7c:8f:28:16:b8:d5:9f:fb:46:a6:87:6a:f8:
         7f:a4:41:79:5e:44:cf:50:bf:06:21:f9:74:e1:f8:e4:85:45:
         8b:df:96:90:32:f9:15:2a:0a:33:2b:7c:51:3d:cb:b3:8b:35:
         2c:75:c9:20:79:dc:34:ea:08:cc:a7:96:5d:ae:2a:4e:be:5e:
         69:8d:e4:f6:c5:c0:2c:e6:87:23:ec:57:b4:fc:25:c4:54:3b:
         57:e4:e0:fa:52:27:89:00:4e:9c:d7:c8:dc:1b:02:b8:23:08:
         3e:d7:77:89:7f:05:5b:6a:23:86:d7:0b:4d:4f:81:ba:17:d6:
         f0:b7:45:fd:20:36:98:b4:0d:f0:26:4a:e4:f6:b2:5d:c2:a0:
         60:da:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:25:39 2026 by rpki-client