Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa
File:                     9d2a25f7-26a6-337c-b528-eef86d7a910b.roa (raw, json)
Hash identifier:          qgRH3fnN624Ip2zkPRMjHV504jDe+1AHvRiq1+bYzpw=
Subject key identifier:   DA:AC:3D:DB:E7:FB:C8:A2:CD:8E:3E:9E:81:8F:69:39:B3:63:E1:2C
Certificate issuer:       /CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d
Certificate serial:       010D0C9F4328584D59EA6469EE6AD40AAF6C5400
Authority key identifier: D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     62485
IP address blocks:        23.147.184.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 14 Apr 2026 08:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:64:69:ee:6a:d4:0a:af:6c:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=a90491b9-2140-4278-8a89-f8c8dd9f32c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:de:8f:20:09:01:20:13:08:bc:cf:5f:77:62:
                    1b:dc:11:c3:7f:13:65:7a:6d:0d:2c:de:cb:00:d7:
                    a2:b1:0f:c2:18:4f:f1:5a:27:6a:e3:87:4d:98:d3:
                    75:d9:88:5d:03:f6:03:7a:8f:e9:64:d1:96:20:20:
                    01:b9:ae:33:09:eb:70:ed:7d:b8:45:49:3c:b3:7c:
                    a0:c5:40:7f:9c:0f:93:a9:87:ac:2b:c8:28:69:0e:
                    a2:0c:80:fd:1a:64:7f:88:95:a0:8a:b9:c1:c9:bb:
                    70:7a:87:67:fa:62:cd:32:59:ac:ce:e2:e5:d1:d2:
                    d0:57:74:55:52:c6:99:3c:69:73:ce:42:2f:3d:3a:
                    86:58:ca:42:3e:c0:23:5d:82:cb:aa:b6:98:20:13:
                    3f:90:54:e1:dd:77:fb:4f:7c:b4:94:a0:04:dc:83:
                    66:a7:6f:84:f0:65:24:b6:ab:a5:ea:a4:44:ec:d0:
                    19:39:26:d6:d8:e7:58:29:2e:44:5b:08:d5:49:c3:
                    5f:0c:0e:2e:b5:e0:6a:39:7f:04:e9:1e:60:01:d5:
                    ba:15:d6:ff:80:26:90:cd:f0:2c:d1:c5:38:d3:2f:
                    7a:54:6b:e5:ba:f5:b0:a2:7a:bf:5e:f5:9a:11:7a:
                    ce:53:84:fc:6e:1d:73:f2:14:07:80:c5:62:89:48:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:3D:DB:E7:FB:C8:A2:CD:8E:3E:9E:81:8F:69:39:B3:63:E1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:2a:64:50:6c:d6:3d:42:f3:e8:88:2d:63:0b:b8:f0:7a:82:
         7e:fd:50:dd:d1:07:22:a6:36:5e:bd:f4:f7:be:16:72:1c:f1:
         f8:3d:e1:9b:17:42:42:89:18:90:2c:01:4f:01:de:ea:49:6d:
         15:7d:5b:e1:7d:02:60:2a:29:00:e1:a0:ce:65:d4:42:9e:0e:
         30:c8:e5:37:a0:72:76:a4:25:7a:b4:c9:27:c5:55:ad:b7:75:
         2e:53:55:a3:de:d1:66:fb:5e:f7:ec:d6:a9:8f:81:91:de:96:
         74:6e:84:21:a7:ea:eb:cd:91:e6:7c:85:89:b3:64:1d:54:7f:
         fa:7a:b1:e3:bb:f6:8f:1c:45:ef:bc:eb:75:9a:0a:14:0f:f0:
         06:74:35:14:1e:92:9f:7b:7d:28:58:ca:f4:73:02:0c:4c:2d:
         bd:27:73:36:6c:46:ef:3d:59:da:76:42:05:cd:19:d7:0b:12:
         4b:4d:f5:fd:db:14:48:d3:78:95:bc:26:51:d2:37:e8:0a:a6:
         12:06:35:9b:13:39:7c:e6:7c:8c:2e:45:54:aa:6c:a4:78:28:
         4d:68:12:75:a8:cc:f6:ad:9c:1f:93:2e:e9:b3:a0:74:af:15:
         ed:6b:a8:90:e0:99:74:c6:de:7b:03:3c:d8:a8:87:a7:a6:8e:
         ae:22:58:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mRp7mrUCq9sVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlYjdhMTMtYmNkMi00OGY3LWI5YjctNTczMTAyYzg4
YTFkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YTkwNDkxYjktMjE0MC00Mjc4LThhODktZjhjOGRkOWYzMmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg96PIAkBIBMIvM9fd2Ib3BHDfxNlem0NLN7L
ANeisQ/CGE/xWidq44dNmNN12YhdA/YDeo/pZNGWICABua4zCetw7X24RUk8s3yg
xUB/nA+TqYesK8goaQ6iDID9GmR/iJWgirnBybtweodn+mLNMlmszuLl0dLQV3RV
UsaZPGlzzkIvPTqGWMpCPsAjXYLLqraYIBM/kFTh3Xf7T3y0lKAE3INmp2+E8GUk
tqul6qRE7NAZOSbW2OdYKS5EWwjVScNfDA4uteBqOX8E6R5gAdW6Fdb/gCaQzfAs
0cU40y96VGvluvWwonq/XvWaEXrOU4T8bh1z8hQHgMViiUgAXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqsPdvn+8iizY4+noGPaTmzY+EsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZWVi
N2ExMy1iY2QyLTQ4ZjctYjliNy01NzMxMDJjODhhMWQvOWQyYTI1ZjctMjZhNi0z
MzdjLWI1MjgtZWVmODZkN2E5MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGVlYjdhMTMtYmNkMi00OGY3LWI5
YjctNTczMTAyYzg4YTFkLzhlZWI3YTEzLWJjZDItNDhmNy1iOWI3LTU3MzEwMmM4
OGExZC5jcmwwHwYDVR0jBBgwFoAU0c0jp1+Mrh2eSAFVtH7UyzSKQxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84ZWViN2ExMy1iY2QyLTQ4ZjctYjliNy01NzMx
MDJjODhhMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5O4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMsqZFBs1j1C8+iILWMLuPB6gn79UN3RByKmNl699Pe+FnIc8fg94ZsX
QkKJGJAsAU8B3upJbRV9W+F9AmAqKQDhoM5l1EKeDjDI5TegcnakJXq0ySfFVa23
dS5TVaPe0Wb7Xvfs1qmPgZHelnRuhCGn6uvNkeZ8hYmzZB1Uf/p6seO79o8cRe+8
63WaChQP8AZ0NRQekp97fShYyvRzAgxMLb0nczZsRu89Wdp2QgXNGdcLEktN9f3b
FEjTeJW8JlHSN+gKphIGNZsTOXzmfIwuRVSqbKR4KE1oEnWozPatnB+TLumzoHSv
Fe1rqJDgmXTG3nsDPNioh6emjq4iWH4=
-----END CERTIFICATE-----
Generated at Sun May 31 18:42:15 2026 by rpki-client