Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c0efcdab-fc76-4717-8db9-db07467f9fe0/8d2a1eb1-396b-35d7-8c38-ccc1126569d6.roa
File:                     8d2a1eb1-396b-35d7-8c38-ccc1126569d6.roa (raw, json)
Hash identifier:          BlXb8EfDHFkAYrWgBeoE6b7UQpTKXaa2USvrWzEVWKY=
Subject key identifier:   58:83:4E:3F:4F:3E:A5:1B:1E:23:1E:02:EF:25:F3:C4:60:D8:A0:1F
Certificate issuer:       /CN=c0efcdab-fc76-4717-8db9-db07467f9fe0
Certificate serial:       010D0C9F4328584CAAC381A450BA1FADA6D90180
Authority key identifier: 02:E8:02:ED:73:21:13:3E:CE:8E:B7:98:40:7C:EA:9A:DA:21:52:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c0efcdab-fc76-4717-8db9-db07467f9fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c0efcdab-fc76-4717-8db9-db07467f9fe0/8d2a1eb1-396b-35d7-8c38-ccc1126569d6.roa
Signing time:             Tue 27 Jan 2026 18:49:43 +0000
ROA not before:           Tue 27 Jan 2026 18:49:43 +0000
ROA not after:            Mon 27 Apr 2026 17:49:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/33 maxlen: 48
Validation:               Failed, certificate revoked on Tue 10 Feb 2026 08:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:c3:81:a4:50:ba:1f:ad:a6:d9:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0efcdab-fc76-4717-8db9-db07467f9fe0
        Validity
            Not Before: Jan 27 18:49:43 2026 GMT
            Not After : Apr 27 17:49:43 2026 GMT
        Subject: CN=bd452f49-3ed6-4388-9a89-1f1286e006a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:2c:de:f7:52:4e:b6:28:6e:e7:1d:9f:27:
                    6d:54:c9:f7:64:a0:b0:f7:80:61:1d:1f:fd:34:68:
                    a2:51:17:df:7f:44:85:4a:25:98:72:2b:6d:fe:ed:
                    98:42:c4:46:18:5c:5c:83:2c:84:b6:e7:ed:87:38:
                    c4:b0:52:ac:54:d1:02:3b:ea:ef:c2:b2:40:15:ce:
                    b5:09:a7:72:5e:f7:8d:65:35:1c:c2:2d:20:d3:9d:
                    38:f1:6c:b4:a6:2d:81:6e:2e:10:c7:ee:ae:a6:6e:
                    8b:ca:38:e7:75:31:70:e5:98:3f:85:5a:6b:0d:55:
                    71:6e:69:71:98:9f:c4:45:53:d5:a7:f5:22:88:df:
                    a2:f3:d2:20:e0:a6:51:24:de:d5:39:2a:18:7b:1f:
                    8b:5b:ac:04:77:42:dc:6f:4d:ef:4f:48:bc:13:31:
                    25:5d:ef:d4:72:62:a5:b9:31:8a:54:a0:17:8b:7e:
                    90:0d:d0:c2:e9:6d:60:11:02:38:d9:2d:15:d0:8a:
                    d7:48:b6:97:c1:a3:03:73:e9:fe:83:37:18:0d:1c:
                    dc:9e:b9:ad:d4:2f:30:85:6d:79:bb:4c:2d:30:f1:
                    3c:69:3c:ca:a6:d0:61:e0:e4:8a:b7:f6:19:e7:e1:
                    fc:31:21:7d:79:6f:28:80:a5:71:93:38:bb:64:dc:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:83:4E:3F:4F:3E:A5:1B:1E:23:1E:02:EF:25:F3:C4:60:D8:A0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c0efcdab-fc76-4717-8db9-db07467f9fe0/8d2a1eb1-396b-35d7-8c38-ccc1126569d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c0efcdab-fc76-4717-8db9-db07467f9fe0/c0efcdab-fc76-4717-8db9-db07467f9fe0.crl

            X509v3 Authority Key Identifier:
                keyid:02:E8:02:ED:73:21:13:3E:CE:8E:B7:98:40:7C:EA:9A:DA:21:52:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c0efcdab-fc76-4717-8db9-db07467f9fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:0b:29:f7:e3:99:8a:b4:2e:79:c0:74:84:e3:90:dc:b5:
         2f:28:eb:68:72:1c:be:e7:45:e6:eb:9c:e4:c1:38:73:92:0e:
         b2:f1:b3:f2:5c:52:7f:63:2b:f3:ee:94:38:e7:e7:73:ca:41:
         79:11:64:5e:84:ae:8b:1e:e6:e7:27:28:32:f0:04:6b:ac:bc:
         7b:ea:8a:c8:11:91:cb:69:15:fc:f3:e2:36:b0:ea:5a:e2:77:
         9d:93:67:45:e5:14:c8:a1:36:b2:ea:e9:a6:18:84:81:cc:40:
         8f:a7:40:88:cf:2d:4e:43:af:93:46:72:eb:28:06:50:d6:2c:
         c2:c2:51:81:4d:3e:a1:50:22:c0:ef:80:d5:0a:ce:49:2d:40:
         51:55:ec:9a:50:9f:c5:b2:75:43:de:5b:f0:32:25:f1:9c:63:
         ab:71:d0:99:7c:98:ae:6f:22:c1:a2:13:6a:69:22:d0:65:03:
         99:93:5f:b1:a3:cd:eb:d7:d8:71:fb:d3:87:1b:df:42:ef:8d:
         c4:9f:fd:c4:54:c9:ef:84:26:e4:41:05:06:2f:e7:aa:37:dd:
         3d:a5:5c:12:3a:6b:25:1f:bc:15:96:ec:eb:71:f3:07:a9:4a:
         9a:0e:24:be:8c:f8:1c:28:4a:a3:9a:06:6a:7a:6f:57:ff:9a:
         db:f8:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----