Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/029b9355-5392-3967-8ac4-4f75e0c6548c.roa
File:                     029b9355-5392-3967-8ac4-4f75e0c6548c.roa (raw, json)
Hash identifier:          aMfbQSXjwINDql53ai+bch6EMjeL4xMs/1yPPFIUGZc=
Subject key identifier:   C9:F1:84:B2:48:55:D0:F2:75:1F:53:79:51:87:A0:3C:C4:A7:DA:F3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E1133EF56F8E899EAB55D0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/029b9355-5392-3967-8ac4-4f75e0c6548c.roa
Signing time:             Thu 01 May 2025 16:28:38 +0000
ROA not before:           Thu 01 May 2025 16:28:38 +0000
ROA not after:            Wed 30 Jul 2025 16:28:38 +0000
asID:                     22773
IP address blocks:        98.165.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:13:3e:f5:6f:8e:89:9e:ab:55:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:28:38 2025 GMT
            Not After : Jul 30 16:28:38 2025 GMT
        Subject: CN=b3e43d73-076c-4faf-9efa-a1fed2bf87da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:a1:7e:20:eb:7a:cf:8b:ae:64:84:18:35:
                    34:ce:ce:08:dd:f8:b8:c9:6f:d7:02:11:2e:3e:5a:
                    ef:31:ca:72:3b:21:50:c4:7f:74:6e:21:be:d4:bc:
                    fe:b0:87:ed:0a:c6:2b:75:68:d3:ab:c9:d9:37:c9:
                    71:4c:8c:db:55:2f:56:5d:94:12:6f:86:02:db:77:
                    6c:04:04:09:01:bf:2d:b9:22:a3:c8:aa:66:73:b7:
                    06:a8:ff:a2:e4:cc:20:8d:12:6b:0c:33:62:ec:5e:
                    16:71:73:b2:79:32:ce:35:57:7a:62:d8:48:3f:2f:
                    08:e3:e5:7c:c7:69:0c:46:69:62:a0:e4:0b:02:13:
                    2e:bc:d7:71:a6:db:7d:b4:8e:f8:44:8d:44:d6:4e:
                    91:1f:5d:40:b6:5e:34:7b:3d:bb:b6:49:54:18:89:
                    67:80:06:a2:fd:e5:5a:28:9b:3c:25:8d:b6:5f:a2:
                    f2:c6:ee:2f:b3:9f:c4:9a:0c:ff:66:ec:16:8a:8b:
                    f7:ea:2f:e5:cb:ac:cf:21:55:3c:bb:f7:88:f7:98:
                    ab:e8:f0:76:0a:0f:8e:9a:e3:ad:37:ea:74:0d:55:
                    6c:8d:3b:f6:09:bd:1f:4b:c5:e6:dd:a9:bf:b0:2d:
                    73:d3:d2:cb:2b:14:af:e4:f0:9a:60:2f:79:fb:fb:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:84:B2:48:55:D0:F2:75:1F:53:79:51:87:A0:3C:C4:A7:DA:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/029b9355-5392-3967-8ac4-4f75e0c6548c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:41:9d:e3:69:dd:54:2e:71:0c:2e:34:a9:2f:f3:7a:d8:
         91:56:8b:04:59:04:c7:e7:f7:ac:8f:a8:2b:2e:58:71:74:21:
         3c:c1:09:19:47:5a:cd:23:68:4d:4f:f1:46:a6:0c:08:cb:0c:
         1d:68:fe:8d:49:9d:a2:3f:7b:65:94:ad:52:17:64:29:63:4d:
         39:89:24:3e:c3:c4:17:25:63:78:6d:d0:7a:89:15:77:1d:d9:
         53:1b:57:ab:66:07:09:37:15:52:a9:fd:29:06:14:4b:57:dd:
         df:e3:05:12:d6:fb:26:6a:e1:c1:7b:34:71:e8:31:a0:6c:e0:
         48:ba:00:f6:fc:da:01:28:f3:9b:be:6c:aa:cc:e0:a5:ff:6b:
         44:65:d2:fd:ac:f5:4b:77:63:2b:df:0e:01:71:2d:47:14:22:
         49:f0:dd:af:12:5c:64:03:5d:da:78:ae:ed:84:ff:16:31:cc:
         cd:48:d2:7a:d9:dd:98:ae:e6:8e:11:37:26:95:1c:ad:cd:8e:
         7e:3c:ef:a0:90:da:4f:4d:2c:2e:3c:5e:80:98:dd:14:77:97:
         bc:db:dd:eb:82:87:cf:09:6d:46:6f:8a:e3:33:d2:68:e2:1a:
         f0:f5:38:d9:f8:9d:4d:7b:2d:cf:b7:c5:8a:b8:17:3c:8a:33:
         08:b7:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:31:33 2025 by rpki-client