Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4d559f62-c096-3204-b1e7-1bd19be16de1.roa
File:                     4d559f62-c096-3204-b1e7-1bd19be16de1.roa (raw, json)
Hash identifier:          fZnLV4joz3pFikYPGPXoIuMf1PQ6FEXQuLCnANmDh2o=
Subject key identifier:   67:FD:6E:C2:3E:55:0A:35:D7:35:6F:E7:2D:1C:6E:DA:94:1E:12:CB
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AFEE6A1C740FD4CB254EC2080
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4d559f62-c096-3204-b1e7-1bd19be16de1.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     400332
IP address blocks:        45.61.160.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 28 Aug 2025 05:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a1:c7:40:fd:4c:b2:54:ec:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=fd7b7119-3c2e-4dc4-a665-fcd6d914ea5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:b5:9b:55:d3:93:7e:57:3f:c2:b5:d6:e7:
                    2b:6d:67:f1:7b:54:75:5f:e5:dd:4b:63:98:ea:17:
                    20:e9:81:a9:f0:b8:36:48:0d:3d:6e:4a:54:6a:cf:
                    17:9b:67:ab:82:c0:0b:c4:e5:12:3d:e9:65:e5:55:
                    06:af:27:28:d0:ea:ab:f1:b1:40:1b:e6:5f:5d:41:
                    9e:71:0f:5e:7f:15:1b:af:0a:9c:46:5f:d2:df:fb:
                    84:2b:26:be:d3:0a:71:88:f4:01:47:f4:9a:59:26:
                    a8:ac:85:e6:d0:a1:06:dc:cb:bd:d2:e7:41:7c:5c:
                    45:01:13:b2:fd:17:3d:dc:28:7b:6f:82:6b:7b:46:
                    42:9f:93:23:8f:ec:11:c8:91:18:3e:6f:3a:7f:f1:
                    32:04:33:cb:41:5b:42:e8:0d:c6:d9:99:c0:bd:44:
                    52:a9:93:2e:c5:52:b6:d9:de:0e:71:c9:af:7f:ea:
                    78:9a:d9:d0:29:f1:91:f0:d3:cb:76:cb:76:9d:1f:
                    6b:99:ee:a5:f2:3a:83:33:d1:4d:d1:76:c0:61:3f:
                    34:e0:7c:8c:d4:1c:5a:59:bd:11:4b:16:91:b5:e0:
                    cc:da:81:eb:d7:4d:3f:4a:67:e3:d3:30:00:5c:35:
                    e6:4b:f7:45:47:67:ce:92:84:18:55:26:01:7e:ca:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:6E:C2:3E:55:0A:35:D7:35:6F:E7:2D:1C:6E:DA:94:1E:12:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4d559f62-c096-3204-b1e7-1bd19be16de1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:89:66:36:e2:1a:b7:6f:23:92:49:47:d2:1f:a6:37:8a:7a:
         de:15:34:1d:2e:b9:64:50:fb:10:e5:26:46:5f:90:c1:6e:72:
         48:38:1f:cb:9d:58:64:30:7a:4e:6a:9f:74:b0:ee:4a:67:15:
         63:e2:72:e7:43:af:64:db:75:dd:7b:30:0f:2a:fb:8a:3f:d3:
         bf:43:cb:6f:27:f1:c2:84:2a:c2:56:f0:d0:de:4c:a4:24:4e:
         e6:28:31:7e:0c:50:cc:49:3b:cd:38:97:ca:ff:99:49:7b:cf:
         33:25:68:59:ba:19:d5:05:6d:08:27:ad:62:d8:eb:80:74:b8:
         d6:52:26:3f:08:c5:06:96:58:94:84:5f:27:fa:80:2b:99:f1:
         dd:39:f2:a5:75:85:03:84:cd:72:1d:30:b1:f4:28:e2:8d:8d:
         ec:dc:35:b6:e9:8d:4d:7f:f2:26:a8:e9:de:80:7e:84:26:b6:
         f3:71:a2:21:d9:1a:24:c8:9d:1a:6d:5a:76:c7:a2:75:18:de:
         ef:2f:9a:02:dc:d7:b6:e6:fc:8b:c6:58:ac:31:ee:4b:e8:fd:
         84:12:3f:8e:4e:00:a2:e6:67:43:ac:ce:78:55:d3:c6:d8:48:
         72:7c:f7:5b:4c:29:b0:b0:8e:df:d6:27:b5:66:9f:62:2a:c7:
         0b:85:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 22:15:42 2025 by rpki-client