Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16bc3a73-907d-3648-9661-bf0ec9e23b6a.roa
File:                     16bc3a73-907d-3648-9661-bf0ec9e23b6a.roa (raw, json)
Hash identifier:          O1HqzKNIf63uBMcMixApv/BRq2TwMuSW2GTFB5xRmBs=
Subject key identifier:   A7:8C:99:C9:EF:A3:F4:90:71:A5:65:54:22:68:D2:FA:64:E4:17:D7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FAE456D64D1205DB097200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16bc3a73-907d-3648-9661-bf0ec9e23b6a.roa
Signing time:             Thu 01 May 2025 17:20:39 +0000
ROA not before:           Thu 01 May 2025 17:20:39 +0000
ROA not after:            Wed 30 Jul 2025 17:20:39 +0000
asID:                     22773
IP address blocks:        72.193.208.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fa:e4:56:d6:4d:12:05:db:09:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:20:39 2025 GMT
            Not After : Jul 30 17:20:39 2025 GMT
        Subject: CN=79c305d9-bb5f-4ae9-8415-51ec0b230584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:9f:e7:8d:a8:31:01:7d:3b:93:90:74:8c:
                    01:db:80:cc:c4:90:b4:d3:53:da:be:7a:1e:5a:24:
                    f6:49:37:b0:af:cd:90:cc:74:d1:4b:39:9f:fd:17:
                    ae:16:69:8e:9b:77:d0:d8:86:20:53:f7:56:d4:af:
                    e7:38:80:93:56:f4:fc:60:56:0d:dc:3c:50:b6:90:
                    34:5a:c4:29:9f:db:cd:69:8f:fe:62:b5:c6:96:02:
                    f5:02:a5:e9:6d:d2:1f:1b:da:de:86:92:ae:96:cd:
                    e3:30:27:c4:50:96:c1:3a:ca:df:bf:0d:9c:44:51:
                    7e:c2:db:28:a8:68:a4:12:e1:e5:2a:50:c9:da:36:
                    98:23:ba:9c:d8:10:b4:a6:ad:51:6a:b7:53:86:90:
                    b4:2d:b6:8c:6f:5f:02:a6:33:c3:15:44:80:a2:bc:
                    5c:18:74:bc:ba:80:de:ce:96:25:a4:2e:90:85:f6:
                    38:f0:6a:68:41:33:44:6d:97:de:e4:e9:be:de:2a:
                    5a:88:87:dd:bf:be:f7:79:4f:f4:45:04:2a:09:ce:
                    8e:ac:91:42:fa:57:c7:80:0a:af:94:45:eb:b7:98:
                    a0:fa:c0:e0:6b:32:33:c5:0f:51:ed:5e:c2:2e:e4:
                    15:ce:6d:29:13:31:bf:dd:1e:88:ff:02:1e:2f:d1:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:99:C9:EF:A3:F4:90:71:A5:65:54:22:68:D2:FA:64:E4:17:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16bc3a73-907d-3648-9661-bf0ec9e23b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.193.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:46:bd:04:05:52:6e:47:dd:17:5b:9b:34:06:54:1b:2a:
         65:45:9d:0c:a0:e7:1a:31:fe:3e:1a:04:89:5e:7b:31:40:7f:
         e2:e5:71:aa:61:3f:7e:7c:ba:98:02:be:7c:05:80:2c:38:e5:
         e7:56:e5:55:88:1e:2a:27:f3:52:7e:05:f7:0d:95:c8:b4:a0:
         c5:7a:a4:c3:6c:29:e5:6d:02:fd:bd:bc:97:c1:79:f2:7c:d0:
         c2:c2:ea:8a:15:a9:5a:51:51:54:28:45:ee:16:3c:ea:c1:5a:
         0c:5c:71:0b:f1:7e:ea:b8:c2:b4:d0:d3:93:69:d3:12:1e:e6:
         db:a4:b5:48:44:60:53:ba:f1:34:07:6a:fe:85:ba:ce:9e:93:
         63:2d:62:c3:f6:90:83:c7:db:2a:b5:66:e0:e2:91:e9:d4:03:
         3c:49:6d:ac:3f:03:d2:79:2d:a9:e0:d5:c8:aa:77:80:41:13:
         7b:02:49:c9:5a:e5:11:71:f8:95:04:c2:ad:17:ac:e5:31:a3:
         17:2d:12:5f:e3:40:63:50:90:c5:8b:fe:a4:04:ef:43:05:d8:
         c3:bb:96:12:75:43:08:d2:3a:90:a6:f8:af:e6:94:ef:43:56:
         34:b4:d7:ec:8c:2b:17:bf:80:2e:9c:9f:f4:20:9f:d0:9e:60:
         6b:9d:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:19:51 2025 by rpki-client