Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/743dee48-302f-357e-ae90-8a751fe13bff.roa
File:                     743dee48-302f-357e-ae90-8a751fe13bff.roa (raw, json)
Hash identifier:          pYzxlyTgZMtsIeMBLQHfgY53YaLnEUQhkKInbO9Mwn4=
Subject key identifier:   ED:02:5C:79:4E:72:49:8E:08:DC:10:25:AC:A2:4A:D3:92:F6:4F:3A
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584D63B1D56A49BB94B2FDCD2880
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/743dee48-302f-357e-ae90-8a751fe13bff.roa
Signing time:             Sat 04 Apr 2026 01:04:55 +0000
ROA not before:           Sat 04 Apr 2026 01:04:55 +0000
ROA not after:            Mon 04 May 2026 14:50:05 +0000
asID:                     14618
IP address blocks:        207.180.29.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 04 Apr 2026 01:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:b1:d5:6a:49:bb:94:b2:fd:cd:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Apr  4 01:04:55 2026 GMT
            Not After : May  4 14:50:05 2026 GMT
        Subject: CN=85d2f7b2-420e-4093-af3f-b426a626a042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:c9:69:28:d3:cc:3c:3c:ed:02:00:6a:ab:
                    6d:a0:29:28:56:a7:2b:6d:b6:4a:53:42:f4:5b:8c:
                    09:e8:ca:5f:dc:5a:b4:6b:1c:ab:d6:6f:d1:26:62:
                    28:d9:d4:7e:16:b9:db:fe:9f:b6:45:ee:2d:60:ce:
                    87:8f:93:7d:86:f9:ad:ab:84:61:c7:b1:45:37:f5:
                    2f:80:25:66:b4:1d:f1:c6:ad:ae:d6:38:8e:06:b7:
                    ec:9f:28:24:58:0d:c1:7e:23:ed:80:d1:51:bc:f9:
                    7e:29:65:9b:7c:ac:06:5d:7d:5e:72:41:29:3a:be:
                    4d:6d:a5:ca:3a:1e:51:db:0f:e6:81:eb:2d:c7:07:
                    ec:85:40:12:fa:63:c2:7a:3e:dc:0a:10:1e:25:66:
                    57:a8:97:39:5e:7b:07:3a:93:b3:7a:30:b8:ce:ca:
                    c1:4b:27:06:89:cf:3d:f6:91:55:f8:c4:1f:80:88:
                    46:52:e0:d9:c6:57:c4:5d:74:a3:c3:c8:a3:67:a7:
                    eb:42:f2:50:0f:96:bf:a3:96:44:d5:52:9e:92:c9:
                    18:87:70:fa:ce:29:c0:9a:d3:a4:98:a7:6f:89:75:
                    34:6d:5c:8d:3d:35:2c:f8:0a:a5:d7:4a:fc:fb:7c:
                    31:a5:f4:ba:97:c6:a4:d4:97:a3:2c:f1:27:ca:1f:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:02:5C:79:4E:72:49:8E:08:DC:10:25:AC:A2:4A:D3:92:F6:4F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/743dee48-302f-357e-ae90-8a751fe13bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:c9:c2:51:a8:2e:f1:96:aa:39:12:15:f5:1a:b4:d0:eb:
         ee:12:49:81:60:e7:0c:af:a0:3c:73:9b:d1:d9:3a:e9:ac:3a:
         65:0c:40:5c:60:c6:97:45:6f:e7:fc:d5:83:5f:ea:0c:39:41:
         75:5d:8a:4b:19:99:20:1d:fc:32:62:61:6a:38:f0:1f:66:cf:
         6c:3d:8e:ac:03:ed:6b:ca:04:3e:ad:71:63:8e:cb:c9:5d:21:
         62:a4:25:7d:1c:5b:6d:a3:e0:c2:23:8a:c3:30:ce:de:dd:0b:
         93:0a:56:5b:0e:4d:76:fa:bc:c4:63:82:49:ae:a3:6d:30:18:
         81:44:b9:36:06:00:49:62:0a:11:68:73:be:3b:2a:c2:12:ca:
         ea:bb:c7:3d:ae:f6:23:cf:6e:de:97:0a:4b:fb:41:c3:8b:c8:
         0d:e3:3b:8f:59:a1:73:56:32:75:92:fe:dd:e2:e1:2e:06:d8:
         b0:9f:12:fe:08:04:61:ad:de:4f:93:ce:48:f2:5e:74:73:f6:
         a1:50:91:3a:af:da:da:22:94:c7:aa:7b:15:78:4e:1b:fb:89:
         66:c1:7b:9b:d7:e5:c8:6e:b1:db:92:e9:4a:1d:cb:a7:c8:29:
         8a:8c:23:c2:1b:72:c8:79:52:39:fd:88:02:0a:49:8b:59:2b:
         46:dd:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 14:42:34 2026 by rpki-client