Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bafc55a-a474-3b56-ad3b-1703396ffc5e.roa
File:                     2bafc55a-a474-3b56-ad3b-1703396ffc5e.roa (raw, json)
Hash identifier:          b4H/KJTWY1xSeps6JvHNgV7o3fJCj9uDwQ8MMC05LqA=
Subject key identifier:   BE:F3:CF:A3:6F:C1:AF:38:89:A6:F2:93:A4:A1:E7:CF:18:FB:3F:85
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DFA84E1A7FCE933F4C9CC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bafc55a-a474-3b56-ad3b-1703396ffc5e.roa
Signing time:             Thu 01 May 2025 16:25:47 +0000
ROA not before:           Thu 01 May 2025 16:25:47 +0000
ROA not after:            Wed 30 Jul 2025 16:25:47 +0000
asID:                     22773
IP address blocks:        72.201.28.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:a8:4e:1a:7f:ce:93:3f:4c:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:25:47 2025 GMT
            Not After : Jul 30 16:25:47 2025 GMT
        Subject: CN=0cbf733d-3cab-4277-bda5-ef431d22063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:e0:9a:2b:c7:80:f9:34:4a:9f:03:b6:1b:
                    5d:66:b3:4b:d3:5d:da:89:34:2c:59:b8:45:f3:b1:
                    3e:c1:90:a9:92:8b:0c:97:d2:57:09:61:24:e9:2a:
                    c3:b8:c0:07:86:4a:41:61:13:59:0d:20:9e:a7:0c:
                    c9:66:64:72:8b:c0:52:08:1c:92:ee:59:2e:f3:c5:
                    40:d8:ac:cd:64:75:cd:83:50:1b:b8:71:d7:57:b5:
                    2f:8e:51:3f:64:c0:7d:02:eb:96:73:48:8b:de:cb:
                    2f:ae:94:ed:09:38:89:f1:be:1b:9d:88:b2:e0:8e:
                    8a:7f:ff:c5:1f:f4:48:04:8f:26:af:3f:c5:28:ca:
                    4e:f1:f4:e1:97:6a:01:3b:b6:a8:9a:17:0b:a0:1d:
                    39:1c:16:a1:6b:f1:eb:a5:7a:f4:79:e5:96:f3:31:
                    78:7a:48:13:44:cb:a6:76:a7:4d:2d:ee:f4:95:43:
                    9c:59:68:37:84:2d:aa:5d:e2:29:1d:79:19:76:b3:
                    c4:a1:38:4e:d4:76:21:48:85:29:c4:bc:ca:4b:d2:
                    4d:9c:14:b7:da:60:fc:f8:23:04:24:0a:f1:bb:fb:
                    c8:b3:27:93:61:e8:3b:77:1a:4e:65:6a:a2:92:b0:
                    68:34:1e:d1:9f:7f:06:3d:28:6d:dc:d4:76:bf:14:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:CF:A3:6F:C1:AF:38:89:A6:F2:93:A4:A1:E7:CF:18:FB:3F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2bafc55a-a474-3b56-ad3b-1703396ffc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cf:f9:8e:73:44:0c:ec:9d:b0:48:c2:99:3e:ff:d8:e9:d5:
         f0:c6:66:cd:41:d2:18:0a:a6:33:8c:77:21:03:7a:20:63:6f:
         b0:ff:69:0c:f0:f3:4b:11:e0:37:74:06:6c:fb:d4:01:3a:21:
         e7:47:f6:cf:7a:ab:75:b3:3e:42:78:8d:e6:ca:f1:f3:bc:1a:
         c7:32:3b:c2:ca:c6:63:b8:ae:68:05:96:13:e1:ef:b7:25:20:
         45:a8:da:f5:72:56:11:f9:79:2c:5a:6e:59:e3:b8:0d:d7:d3:
         7f:86:31:47:1b:78:48:59:61:15:08:1a:b5:94:b1:0d:b4:7a:
         9e:b9:a4:c7:e1:dc:72:4d:35:9c:f1:9d:45:91:5d:97:39:d1:
         53:7e:80:d1:c5:a6:cb:8d:cf:eb:da:de:57:8b:b6:f3:13:8a:
         35:70:66:8b:3f:2c:76:c0:3a:80:45:a8:1d:e5:6a:37:12:c1:
         f3:1f:04:23:21:fd:b5:fc:55:b8:3e:d9:2c:7d:f6:76:b9:35:
         15:92:a7:5f:41:ec:1d:2f:4b:10:cb:37:6e:1a:5d:22:40:ef:
         ae:19:2e:0d:18:21:6b:3f:af:d2:ba:68:4e:bc:a8:bd:80:af:
         a8:89:28:59:c7:f3:80:35:ef:f2:97:95:87:9d:bd:c7:92:44:
         9f:45:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:37:14 2025 by rpki-client