Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f68a35d-95f4-336d-a1bf-f8f25131e1f7.roa
File:                     1f68a35d-95f4-336d-a1bf-f8f25131e1f7.roa (raw, json)
Hash identifier:          mwJVtr/O5oiRqnV+zsoIMWpJhJk4pcZc+sF5E2VLDQM=
Subject key identifier:   5B:B4:3A:D0:18:34:16:A7:86:14:DD:91:14:59:C7:0F:7A:32:B9:8D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E1A51943833069FF7114A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f68a35d-95f4-336d-a1bf-f8f25131e1f7.roa
Signing time:             Thu 01 May 2025 16:29:47 +0000
ROA not before:           Thu 01 May 2025 16:29:47 +0000
ROA not after:            Wed 30 Jul 2025 16:29:47 +0000
asID:                     65012
IP address blocks:        98.186.157.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:a5:19:43:83:30:69:ff:71:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:29:47 2025 GMT
            Not After : Jul 30 16:29:47 2025 GMT
        Subject: CN=cd85f51a-25cf-4cf3-93cc-dd67d606e04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:9b:e0:5d:7e:4f:d1:65:ae:98:e4:ac:bf:
                    99:2e:79:3b:ae:28:d7:7c:57:4d:ec:44:51:a3:57:
                    2c:69:f4:4a:84:09:40:d1:0f:6f:8d:78:ce:fb:51:
                    fc:e5:bf:d9:6f:01:9a:db:7e:d2:f8:62:73:c9:31:
                    2b:dd:9b:60:d3:92:9a:a5:d7:0f:e9:da:3c:13:90:
                    84:24:74:dc:0e:92:9c:53:1e:a0:5b:a5:76:87:16:
                    f8:70:21:6c:07:9e:a8:01:29:79:d8:ef:bd:69:21:
                    58:5f:94:69:ad:24:07:e8:d2:c6:a6:da:7c:e0:02:
                    3b:fa:64:e1:2a:dd:ef:55:94:cd:8c:8e:e7:e6:17:
                    6d:78:9a:c7:6b:aa:65:1a:b0:07:83:aa:7d:93:a3:
                    1e:bf:27:a9:6c:27:33:d7:39:78:a0:87:f1:d0:01:
                    41:10:5d:9e:cd:9f:83:fb:2f:b5:54:51:f1:7d:1d:
                    ce:e9:3f:61:a8:86:c2:2a:cf:47:88:f0:a4:66:87:
                    0f:0c:a3:2c:9d:72:e2:aa:b3:bb:ba:02:45:fc:76:
                    89:93:15:a5:4b:f4:75:80:a3:46:a6:5c:70:09:25:
                    35:b2:b0:ca:2d:a8:3b:23:d0:f5:63:31:70:11:e0:
                    48:eb:fa:e4:e2:d9:a2:a5:91:0c:19:7c:53:ee:9c:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:3A:D0:18:34:16:A7:86:14:DD:91:14:59:C7:0F:7A:32:B9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f68a35d-95f4-336d-a1bf-f8f25131e1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.186.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:2c:9a:c3:40:5d:26:7b:57:c1:e2:ee:0b:84:1b:37:8a:e0:
         f5:b1:22:99:4d:8a:02:67:2b:4c:e8:6a:e4:cd:be:cc:b8:f8:
         dc:3a:d0:d7:ce:7b:53:d9:5c:b0:3b:70:78:63:89:57:b7:91:
         28:a2:7f:02:5a:77:84:9b:14:58:f7:52:b9:9f:8d:c9:ad:4d:
         bb:55:ea:b9:66:e8:07:74:bf:cc:d5:55:06:b9:0d:25:d8:81:
         71:89:7a:0e:59:73:2c:50:cc:91:eb:5d:e3:b4:27:ec:cb:22:
         66:31:8a:81:c5:cf:38:a4:ea:91:b8:42:9d:98:4f:29:40:56:
         79:7c:6a:ae:9a:78:25:df:12:2b:0d:3e:ba:49:de:ed:fe:66:
         9f:fa:04:05:1e:43:f3:5c:7e:06:cb:fe:ca:a0:30:51:00:4b:
         9f:99:0f:b8:0d:ee:7c:55:32:e4:f7:7d:e2:1c:f0:78:b1:66:
         42:47:23:c4:53:57:b8:56:93:78:fa:38:e4:b2:d2:b6:3e:cb:
         fb:fd:a8:b1:36:23:9f:15:aa:0c:ee:12:ef:90:e5:ff:83:6a:
         0f:3a:5c:bb:ed:09:dc:35:f5:0e:7e:59:f9:74:4f:50:82:02:
         bc:1a:9e:28:4c:ac:b8:d1:06:8b:6d:b3:21:fd:26:5c:80:cb:
         93:0b:ba:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14aUZQ4Mwaf9xFKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2Mjk0N1oXDTI1MDczMDE2Mjk0N1owLzEtMCsGA1UEAxMk
Y2Q4NWY1MWEtMjVjZi00Y2YzLTkzY2MtZGQ2N2Q2MDZlMDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdGb4F1+T9FlrpjkrL+ZLnk7rijXfFdN7ERR
o1csafRKhAlA0Q9vjXjO+1H85b/ZbwGa237S+GJzyTEr3Ztg05KapdcP6do8E5CE
JHTcDpKcUx6gW6V2hxb4cCFsB56oASl52O+9aSFYX5RprSQH6NLGptp84AI7+mTh
Kt3vVZTNjI7n5hdteJrHa6plGrAHg6p9k6MevyepbCcz1zl4oIfx0AFBEF2ezZ+D
+y+1VFHxfR3O6T9hqIbCKs9HiPCkZocPDKMsnXLiqrO7ugJF/HaJkxWlS/R1gKNG
plxwCSU1srDKLag7I9D1YzFwEeBI6/rk4tmipZEMGXxT7pwsFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFu0OtAYNBanhhTdkRRZxw96MrmNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY2OGEzNWQtOTVmNC0z
MzZkLWExYmYtZjhmMjUxMzFlMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrqdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIsmsNAXSZ7V8Hi7guEGzeK4PWxIplNigJnK0zoauTNvsy4+Nw60NfO
e1PZXLA7cHhjiVe3kSiifwJad4SbFFj3UrmfjcmtTbtV6rlm6Ad0v8zVVQa5DSXY
gXGJeg5ZcyxQzJHrXeO0J+zLImYxioHFzzik6pG4Qp2YTylAVnl8aq6aeCXfEisN
PrpJ3u3+Zp/6BAUeQ/NcfgbL/sqgMFEAS5+ZD7gN7nxVMuT3feIc8HixZkJHI8RT
V7hWk3j6OOSy0rY+y/v9qLE2I58VqgzuEu+Q5f+Dag86XLvtCdw19Q5+Wfl0T1CC
ArwanihMrLjRBottsyH9JlyAy5MLun4=
-----END CERTIFICATE-----
Generated at Thu May 15 01:33:48 2025 by rpki-client