Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01c84813-c9b0-3aba-acb6-df2b93060471.roa
File:                     01c84813-c9b0-3aba-acb6-df2b93060471.roa (raw, json)
Hash identifier:          FttkMd/mXOcfE/TmNBVLWCL5Kvhn7VNrlSkWDPqIO64=
Subject key identifier:   0E:26:C9:D9:C6:3D:0C:88:C6:45:B0:A6:0D:43:40:7D:CB:AA:5A:33
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F9FA1F2D9FB512F2EDB620
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01c84813-c9b0-3aba-acb6-df2b93060471.roa
Signing time:             Thu 01 May 2025 17:18:49 +0000
ROA not before:           Thu 01 May 2025 17:18:49 +0000
ROA not after:            Wed 30 Jul 2025 17:18:49 +0000
asID:                     22773
IP address blocks:        68.224.68.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f9:fa:1f:2d:9f:b5:12:f2:ed:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:18:49 2025 GMT
            Not After : Jul 30 17:18:49 2025 GMT
        Subject: CN=aaa31700-08a1-44fe-b7ec-a2d219f049f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:9d:69:d4:f9:f0:69:2f:ad:07:c4:df:cc:
                    d0:1e:66:cb:92:32:95:33:cd:5d:64:b1:a3:3f:29:
                    c8:44:5e:8c:78:02:1d:7d:64:75:60:1c:bb:a8:ba:
                    59:0d:54:47:dc:8d:59:f9:03:c6:75:a9:70:70:6e:
                    aa:75:bd:17:7b:1f:35:64:11:ce:78:1f:0c:45:d8:
                    a1:b1:56:5a:ce:79:92:e5:ef:a3:7b:ba:ed:f3:a7:
                    25:c2:02:af:ed:97:56:13:40:fd:75:af:5e:4d:c9:
                    f4:6f:1e:1b:9a:fc:fc:26:f5:dd:69:ec:42:45:cc:
                    30:0e:d3:e9:b3:20:98:1d:fe:dc:71:9f:f5:61:af:
                    c1:7c:3c:a2:0c:8d:97:e7:88:73:01:0a:e4:a0:d4:
                    2d:e5:ca:4e:f6:1b:99:4e:9d:87:5f:4c:4b:12:dd:
                    0b:2d:59:1b:be:91:88:5c:ea:1d:53:b7:50:2f:87:
                    3a:d7:af:4a:5d:43:b0:de:11:87:82:25:65:67:83:
                    41:42:87:7c:49:06:8c:60:00:d2:34:16:75:37:b0:
                    02:14:e7:d0:06:05:4e:ad:81:90:0b:1e:10:fa:e1:
                    d5:86:9b:6b:c1:ad:c7:aa:a3:4b:3e:ca:87:9d:e6:
                    4f:0a:c2:ca:e7:6e:fc:21:f2:ad:73:16:8e:fd:5e:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:26:C9:D9:C6:3D:0C:88:C6:45:B0:A6:0D:43:40:7D:CB:AA:5A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01c84813-c9b0-3aba-acb6-df2b93060471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:21:cd:f7:15:60:a5:77:fc:2b:39:b6:77:46:11:7e:81:
         45:e6:0a:36:51:a5:df:20:1d:d3:dd:f4:ec:26:20:0b:b1:db:
         da:7d:da:81:e1:0d:ea:76:28:a9:9e:38:99:3d:64:f9:52:14:
         b5:0e:9a:8d:42:ed:0a:55:5b:50:d8:7f:c8:b3:f4:0a:09:b3:
         74:21:e6:95:40:cf:c6:d4:4c:c9:ae:97:63:97:83:a3:7b:c9:
         c3:db:b7:62:97:88:93:af:d8:a6:dc:48:ec:4f:db:4a:f5:25:
         f8:49:f2:cc:02:78:1e:8b:2a:ed:31:86:31:8a:98:8a:a3:25:
         d3:81:4f:b9:18:39:89:28:89:9c:a3:28:47:b5:6e:9a:ec:43:
         1d:1d:78:4a:97:d6:94:56:7a:90:3b:b5:7d:f9:fc:cb:f5:cb:
         b3:d6:3f:ca:d1:9b:fa:2b:55:da:c7:48:c6:c0:f2:e9:1a:14:
         11:8c:25:b4:02:cb:82:2c:c4:15:e6:8d:3d:b3:c1:4f:e6:d6:
         6c:c9:c4:8d:3a:18:60:bf:d6:34:a0:21:4d:f1:df:f5:53:51:
         90:47:6a:7a:90:44:44:41:a4:ef:05:17:0f:81:45:df:84:a2:
         96:bc:ae:1c:6b:e1:ed:e3:2a:11:98:9e:d0:5c:c4:25:78:89:
         51:9f:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:31:40 2025 by rpki-client