Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/61bc3f62-a857-3977-8174-cdec6169f299.roa
File:                     61bc3f62-a857-3977-8174-cdec6169f299.roa (raw, json)
Hash identifier:          /6/k1BgNQRrtEQ9soHDn+bn1QCdhZpQ7TlyG23Vlxjs=
Subject key identifier:   96:81:1D:B6:D5:C3:6A:51:55:47:54:DD:19:E2:3F:68:47:89:1E:5A
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584A3A15812614A2FCDB9F16D400
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/61bc3f62-a857-3977-8174-cdec6169f299.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     152672
IP address blocks:        216.105.166.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 29 Jun 2025 21:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:81:26:14:a2:fc:db:9f:16:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=f1c35178-76af-402e-a990-80fe6a6c90f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:49:55:68:06:69:93:e5:25:3e:22:1f:13:
                    bb:07:28:1c:70:65:8a:6e:f2:63:6b:ef:fb:6f:1b:
                    be:93:6d:cc:78:01:f7:ab:14:01:95:9e:95:f2:81:
                    01:7e:4f:92:35:fa:9f:e5:0f:ea:bd:76:c3:65:f4:
                    b5:f1:cd:bc:eb:43:6e:e9:0f:f1:6e:9c:db:2a:59:
                    9f:6b:dc:ab:6a:af:3c:39:67:ef:4b:48:de:df:01:
                    7b:51:34:f7:f3:46:45:d9:d7:81:9b:3e:3f:80:54:
                    a8:06:c9:4b:51:0b:23:e2:c3:cc:6d:91:38:86:93:
                    07:e6:dd:b7:b9:94:9d:5d:17:32:73:e0:d8:86:da:
                    cd:99:85:fb:1a:13:12:57:1f:42:ee:fe:94:eb:07:
                    52:fb:ec:44:4b:ff:71:b3:5a:2b:b1:bb:bf:49:36:
                    a9:1a:a0:a2:37:53:78:34:41:f2:83:ee:32:54:f1:
                    1b:1f:a7:12:37:07:c2:91:ed:f6:3e:6a:26:29:b4:
                    07:f7:11:e6:24:f1:b4:3f:09:e0:c9:a7:fc:fc:d4:
                    07:4c:ab:8f:74:bc:4e:b2:e8:44:fb:6f:76:36:70:
                    86:e0:4d:31:45:33:50:bf:81:3e:67:07:43:2d:4a:
                    3e:85:7a:3b:67:95:82:b0:b3:f2:67:65:39:20:a3:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:1D:B6:D5:C3:6A:51:55:47:54:DD:19:E2:3F:68:47:89:1E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/61bc3f62-a857-3977-8174-cdec6169f299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:80:8d:cf:44:08:94:ed:73:c3:b6:05:fa:6c:e8:e5:2b:
         74:16:2b:36:96:b3:e8:27:6d:bb:43:81:ca:78:8a:0b:0b:45:
         c9:05:d0:40:db:88:80:57:77:fd:19:48:6c:6f:8b:ce:2e:66:
         e5:b1:1c:15:83:ab:12:93:a5:66:6d:e7:1e:5c:4c:b8:da:f8:
         b3:42:9e:52:87:b6:0c:e1:31:aa:63:90:08:e5:4c:c0:65:83:
         7a:84:d0:6f:68:3d:ac:70:56:fc:55:a0:96:f9:d0:93:ff:3e:
         11:ef:59:a0:53:1f:d8:ae:f6:8f:75:6f:ca:c7:26:c2:51:ec:
         ef:10:be:11:37:fb:6e:e1:1f:6c:0e:fd:c5:89:d8:60:79:aa:
         12:4c:ed:d5:3a:2b:6e:9c:19:ab:cf:3c:e4:ab:ca:50:ec:03:
         29:de:6b:6e:23:a8:73:4a:ab:96:d5:f8:fb:25:84:6f:8e:38:
         73:57:4d:a5:10:58:7a:d7:7c:97:20:5e:28:50:b2:1f:ed:c5:
         ed:80:32:e7:24:5e:c7:8c:2e:3e:10:85:d5:76:b5:cc:5d:14:
         3e:2f:f4:f6:01:c5:b0:a4:d8:52:b1:87:68:b2:3e:a2:3b:60:
         ca:c5:98:00:f0:66:f0:3c:8d:18:64:c8:48:0c:a9:07:fc:aa:
         05:bd:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:17:21 2025 by rpki-client