Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43e0a4bd-fbb4-38b1-90c2-f903b77b0bb4.roa
File:                     43e0a4bd-fbb4-38b1-90c2-f903b77b0bb4.roa (raw, json)
Hash identifier:          exBjMM1hl+QRglTel4NE8kDAS2bmQPJoEPOFGh4z8W0=
Subject key identifier:   AA:28:CD:01:69:C0:DC:5C:35:06:81:70:1E:63:EB:A7:56:AD:AB:7F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD2B784491BA5611FFFB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43e0a4bd-fbb4-38b1-90c2-f903b77b0bb4.roa
Signing time:             Thu 01 May 2025 16:20:46 +0000
ROA not before:           Thu 01 May 2025 16:20:46 +0000
ROA not after:            Wed 30 Jul 2025 16:20:46 +0000
asID:                     22773
IP address blocks:        68.2.243.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:2b:78:44:91:ba:56:11:ff:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:20:46 2025 GMT
            Not After : Jul 30 16:20:46 2025 GMT
        Subject: CN=b585e384-d929-490c-b1c9-c99761145cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:1a:aa:5c:3a:0c:19:71:1c:49:c1:f2:99:
                    cf:f2:0d:11:62:e2:2c:72:25:9a:9f:2d:b8:5f:4b:
                    03:b6:f6:62:09:a4:89:29:eb:7f:65:ae:d4:43:8c:
                    fb:0a:c5:fb:4a:d5:77:f5:b2:85:28:cf:6c:ee:0e:
                    1a:41:fa:a4:00:f1:3c:21:cd:7b:fd:e2:9b:3a:aa:
                    b1:a6:e4:3c:d9:65:54:48:73:86:47:17:1a:75:5f:
                    9b:77:3f:aa:1b:a8:79:14:b2:7f:7a:a2:6b:a7:80:
                    59:0f:a2:00:d4:2e:4c:55:d2:a0:2a:6a:06:1d:7f:
                    a3:d5:5c:8c:12:6d:3d:c4:b4:8e:dd:a5:51:b1:de:
                    2f:6a:6b:23:46:e4:bc:2a:31:4d:b0:ec:15:0b:76:
                    86:88:c2:05:d9:1a:91:0a:76:b3:7e:de:16:a0:26:
                    ac:6b:58:9d:ee:a8:3e:96:69:d7:a7:80:79:a4:bf:
                    73:e1:b5:c6:43:96:d1:fc:d4:d1:09:4e:2e:1e:7a:
                    c9:ae:a5:f1:69:34:a4:64:0b:63:db:7f:fb:06:5a:
                    34:9d:e4:db:fa:d8:94:6c:72:ed:a9:12:7b:4c:78:
                    fe:e5:46:04:71:3e:ad:80:b9:0b:c7:f2:03:8d:50:
                    a7:20:6b:9b:69:a3:10:65:d4:5b:5f:97:90:43:0b:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:CD:01:69:C0:DC:5C:35:06:81:70:1E:63:EB:A7:56:AD:AB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43e0a4bd-fbb4-38b1-90c2-f903b77b0bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:01:55:b8:3e:e3:53:61:74:2d:0e:bd:e4:98:c2:94:b1:f0:
         65:38:0c:ed:9e:0e:15:1c:65:5e:b3:77:f0:3e:47:0c:36:4e:
         eb:3e:c8:b8:d4:ba:d8:d9:a4:a3:38:c6:ea:2f:d4:ef:fc:58:
         c2:4d:66:1b:c5:c2:15:c1:a8:ae:d1:ef:fd:55:a2:89:d7:bf:
         ab:81:88:7b:16:0c:c4:2a:85:f6:e8:5d:0c:58:97:bc:0e:f4:
         a1:5a:0d:1c:13:fa:32:0a:3c:0c:68:6f:20:59:95:92:46:ec:
         da:d1:07:d9:7d:f4:0b:2a:0f:83:31:f0:ed:fc:3f:97:3b:16:
         f8:6e:7c:d3:f0:2a:13:2c:03:40:f7:48:aa:e4:85:0c:57:23:
         c7:b6:8f:db:37:f4:7b:d8:90:1d:75:25:9b:f9:ef:59:02:cf:
         36:2e:20:62:92:5f:9e:aa:09:5d:31:fa:14:22:15:84:5b:0b:
         24:ad:13:63:46:de:f8:61:c4:cc:8d:4a:b9:9b:b0:81:e7:c6:
         8f:16:2d:84:2a:bf:ef:97:af:4c:3e:57:b8:f0:dd:bf:c0:e1:
         29:65:97:63:18:c3:ab:97:35:61:0b:0b:d3:05:e2:04:d3:60:
         ef:71:ab:72:e3:81:e1:02:4b:4b:c3:30:45:ad:1d:43:fc:bc:
         5f:d8:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:11:11 2025 by rpki-client