Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa
File:                     8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa (raw, json)
Hash identifier:          sgFbBiQiN+csfnBZV566rjDuq0h9lgRvnX9R4nHpuQ4=
Subject key identifier:   1C:96:0E:7F:D2:ED:14:83:C5:90:E4:20:6E:42:55:B4:68:89:29:07
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584C768173BF51C52BAA9E6E85C0
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     14445
IP address blocks:        45.42.176.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 10 Jan 2026 14:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:73:bf:51:c5:2b:aa:9e:6e:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=00e78e62-07e6-4fb1-b17a-f14ff8131460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:59:45:ec:90:18:90:01:56:8b:cf:97:1c:
                    16:e8:3c:27:1e:4e:93:89:d3:c1:24:15:8e:5c:ca:
                    2a:6b:7d:be:14:2d:b7:fd:da:5a:3b:58:f9:63:b7:
                    de:83:1a:c3:cb:2b:03:55:aa:a4:b3:fa:57:af:ff:
                    cb:41:1c:ac:94:7d:65:f2:11:bd:f4:46:0d:16:6b:
                    86:e6:91:ad:a4:b0:63:49:1d:84:6d:4d:0c:22:1d:
                    7a:ab:e8:01:c6:df:1b:c8:ec:db:3e:0e:56:8a:d2:
                    79:37:bf:d2:ec:fd:24:67:b4:ff:f4:4e:43:53:44:
                    a3:77:b5:6e:81:a4:2c:4a:6c:c5:7b:23:eb:cc:89:
                    79:65:1e:75:1d:22:ca:9c:25:72:3d:2b:52:bd:60:
                    a1:4d:a2:c5:07:cd:7d:46:07:78:bd:75:ec:e8:d4:
                    9d:a9:17:fc:c6:a0:d5:9b:b9:59:a8:be:42:d0:1c:
                    0f:d2:d9:9a:62:5e:fe:92:a1:56:df:d1:dd:6c:f7:
                    6e:d3:32:fa:d0:d4:7d:ac:78:61:8b:b3:f3:24:52:
                    a9:29:80:08:ae:c4:32:7d:8f:5b:63:6b:35:bb:ed:
                    81:fd:6e:4c:af:8b:b8:e1:82:14:f8:d8:fe:93:7f:
                    02:9d:a1:c2:d9:c1:5a:a4:c6:04:61:55:59:44:ad:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:96:0E:7F:D2:ED:14:83:C5:90:E4:20:6E:42:55:B4:68:89:29:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8e9bf1f8-5fca-3717-9e6c-6bdd047ef1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:c9:90:8d:a9:a7:70:c6:cb:b8:e1:d2:7a:4b:94:60:b9:
         80:d7:8d:36:bd:ba:a2:08:bf:7c:ac:33:d6:06:47:d8:63:bc:
         fd:59:b4:b1:dc:04:26:c3:e4:60:0f:78:95:76:bc:22:ed:1c:
         36:4e:8c:78:be:15:0e:a4:c5:19:87:22:46:76:0f:0a:44:ec:
         ed:05:42:4b:ea:49:2d:3d:c0:2f:65:6a:4d:8a:36:41:4f:57:
         e5:84:36:de:53:70:d1:3d:17:b5:c4:8c:9c:eb:cd:a0:db:ce:
         98:54:4d:f2:06:01:ca:78:a7:78:d8:89:06:fc:0d:ad:19:eb:
         24:e4:ae:c8:1c:a5:66:32:80:19:d1:10:6c:f0:9c:55:4f:19:
         9d:37:94:57:c2:17:bd:ae:9a:1d:cf:b1:bb:13:c2:c6:4a:c3:
         d5:78:c8:0c:13:7a:ae:09:19:09:9f:6f:33:15:9e:ae:0a:37:
         7c:93:01:b0:be:e1:69:92:3a:6d:aa:25:88:2e:1e:6b:ae:10:
         83:7c:85:04:11:ef:61:f4:15:d8:7d:f4:29:6f:b0:bd:91:d8:
         e0:0a:06:bf:60:8c:91:96:71:5f:f9:88:a8:f7:ff:ec:03:1b:
         86:cf:df:5d:be:c4:da:27:b8:63:2a:8a:4c:55:7a:49:5c:a8:
         50:ed:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 23:24:29 2026 by rpki-client