Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/324d227f-29e1-35ca-bdf6-d9cf7f2c45fd.roa
File:                     324d227f-29e1-35ca-bdf6-d9cf7f2c45fd.roa (raw, json)
Hash identifier:          xvClxeTK37Q9/QnnnBcv/PTnhkPT269BI1NE9W8TK+o=
Subject key identifier:   E2:92:6B:C2:3D:F4:5C:CB:26:5D:C9:0C:C1:B7:8A:CB:59:F8:19:48
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD6995B41CF6E3315AA440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/324d227f-29e1-35ca-bdf6-d9cf7f2c45fd.roa
Signing time:             Thu 01 May 2025 16:21:15 +0000
ROA not before:           Thu 01 May 2025 16:21:15 +0000
ROA not after:            Wed 30 Jul 2025 16:21:15 +0000
asID:                     22773
IP address blocks:        68.98.49.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:69:95:b4:1c:f6:e3:31:5a:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:15 2025 GMT
            Not After : Jul 30 16:21:15 2025 GMT
        Subject: CN=07d842fb-a2c7-4ef3-9f47-18feae671f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:a9:3a:35:0b:a9:77:5f:a5:2e:97:80:f0:
                    db:13:ac:cf:91:8a:0b:85:6c:9f:7b:c3:9d:0f:8e:
                    95:0d:3b:bf:e5:50:77:24:4e:05:72:90:9d:3f:22:
                    aa:2e:10:16:41:7e:4c:cc:a9:ea:ee:f3:d5:79:20:
                    e2:9d:97:11:11:08:37:29:74:e2:8f:78:c9:42:45:
                    f6:2c:78:a8:86:95:87:45:86:9e:83:39:46:69:bd:
                    aa:b5:e1:15:17:e6:1b:27:43:c0:69:89:58:5c:63:
                    f4:0a:b3:53:b4:8b:c5:f2:77:7b:5f:23:a7:1c:24:
                    50:bb:94:aa:d9:45:20:c6:2c:fd:d1:bc:e0:36:ed:
                    89:7d:cf:43:35:2a:47:f7:87:3e:be:01:8b:d1:75:
                    29:09:f3:4e:03:3c:9f:7c:2a:ba:0c:d8:ad:a6:77:
                    f5:3b:5e:9c:7b:a3:bf:26:78:2b:f1:f0:a7:32:db:
                    97:90:9c:22:07:8c:0f:67:5e:19:f8:33:ac:33:c6:
                    e3:d2:c0:5c:59:d0:00:8b:a4:65:70:19:f5:d4:2d:
                    c1:32:8e:c5:a2:54:1a:1a:db:af:a4:8c:e9:33:b7:
                    88:b7:28:e4:86:02:cc:84:6b:d3:f1:92:63:ad:32:
                    fc:12:d8:31:bd:d8:42:6d:c9:fd:37:1e:a3:d2:d1:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:92:6B:C2:3D:F4:5C:CB:26:5D:C9:0C:C1:B7:8A:CB:59:F8:19:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/324d227f-29e1-35ca-bdf6-d9cf7f2c45fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:d5:59:43:18:7c:76:75:38:46:cb:70:95:19:ea:d0:a6:
         9a:a2:0e:9b:0b:02:8a:c0:3c:da:76:7d:1a:9f:bc:8c:57:16:
         86:e9:c3:90:e6:5d:8c:67:2f:df:8e:0d:6e:ea:1a:60:12:74:
         b6:d3:5e:1f:90:5a:14:1e:20:de:bc:11:6f:df:94:cf:ad:60:
         81:b8:27:87:99:04:3a:df:16:99:04:76:5f:c0:d4:35:d6:16:
         53:61:60:80:96:e5:d0:3d:7d:c5:6b:19:ff:03:44:b5:76:a2:
         53:09:3b:93:24:16:58:14:81:ab:47:73:ad:ea:07:27:a4:4d:
         fe:ce:1a:52:32:03:93:3e:6a:2b:d1:e8:0d:55:9c:fa:c6:6d:
         47:a3:fb:96:1f:b1:f1:e0:11:a9:4c:1e:12:83:b8:b1:11:2a:
         12:e2:9e:b5:62:ae:3a:3a:95:66:a7:68:ae:17:4a:8a:e6:6f:
         29:90:c0:52:62:cd:a3:a6:8f:55:f8:fa:76:0e:9c:a8:22:02:
         22:1f:ea:1d:aa:1c:4e:8e:92:16:af:ef:d9:4b:a6:e2:b4:4a:
         bf:f1:2c:e7:e8:74:1f:0e:74:cf:38:5d:79:56:85:a8:3d:02:
         c4:27:a6:d9:80:d2:6f:8c:a3:75:06:77:26:1e:51:dd:8b:a7:
         c4:df:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:44:35 2025 by rpki-client