Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46cfa292-d8bd-368b-b09a-05559a327b08.roa
File:                     46cfa292-d8bd-368b-b09a-05559a327b08.roa (raw, json)
Hash identifier:          WF6IaBt8B3y3c0I1cNnnoJ78xJbzJK9PTAsbokuiRgY=
Subject key identifier:   E4:B6:82:58:16:29:33:A4:31:04:9E:9E:DE:FA:92:1F:57:6B:46:06
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F9BA9F3C835317DA498900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46cfa292-d8bd-368b-b09a-05559a327b08.roa
Signing time:             Thu 01 May 2025 17:18:19 +0000
ROA not before:           Thu 01 May 2025 17:18:19 +0000
ROA not after:            Wed 30 Jul 2025 17:18:19 +0000
asID:                     22773
IP address blocks:        68.104.116.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f9:ba:9f:3c:83:53:17:da:49:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:18:19 2025 GMT
            Not After : Jul 30 17:18:19 2025 GMT
        Subject: CN=e1562e97-44e6-4aea-a24c-c9535d766c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:b6:e1:12:2a:9b:dc:ca:d5:32:4c:63:57:
                    9e:f9:3f:e9:99:06:a7:44:0b:85:0c:30:3a:ca:25:
                    c7:2c:30:24:cc:0f:57:5a:b5:33:51:4f:aa:de:9c:
                    3c:5a:94:a1:e8:5d:4a:72:6f:2d:4b:ed:4f:72:97:
                    bf:24:7b:18:e7:0a:58:d7:c7:aa:fa:97:1e:a8:07:
                    5d:0b:fb:45:d2:2d:71:85:c0:e6:ea:48:b8:6e:6c:
                    9a:ee:cd:2e:01:30:33:0d:11:09:dd:29:f9:89:87:
                    8f:64:ca:02:27:a6:0d:1f:69:83:1b:f0:b0:79:41:
                    cb:f2:b4:db:57:61:28:be:73:49:a0:c2:57:1a:30:
                    05:4c:d1:c7:61:57:0a:c2:ba:69:05:65:61:73:94:
                    c4:3b:d0:bd:33:49:a7:3b:c0:d8:a6:fd:4b:02:86:
                    01:98:f4:a9:6b:56:69:70:d8:2c:18:12:ce:61:04:
                    f8:f2:1b:3d:17:a0:dc:a0:51:38:89:e1:1c:5b:53:
                    aa:2b:79:5a:7f:f0:b0:b7:b6:7b:1f:d1:d0:62:76:
                    e4:21:45:c7:bf:91:af:01:06:36:6f:a7:2f:ec:6a:
                    4b:34:38:57:53:e3:d8:1a:39:a6:e6:52:bc:f7:a2:
                    cc:ee:b2:29:d2:c0:5e:58:ac:54:6b:05:55:6f:41:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:82:58:16:29:33:A4:31:04:9E:9E:DE:FA:92:1F:57:6B:46:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46cfa292-d8bd-368b-b09a-05559a327b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:8f:31:94:9f:09:55:ca:d6:f2:4e:26:b2:fb:53:72:d8:
         bc:79:54:b9:59:b3:05:ed:1b:99:64:b3:db:78:99:35:00:68:
         c9:63:0b:37:1a:76:09:02:9e:b4:71:21:bc:af:e3:4a:8a:5e:
         f6:39:43:3d:6b:1c:10:27:c9:41:e7:99:c5:ad:92:ae:f9:45:
         24:89:e1:ee:55:2b:39:33:d1:69:38:6a:e8:da:aa:7c:ca:94:
         c8:10:c7:af:29:dd:47:11:b0:ea:f0:b6:8f:44:b4:df:cf:2b:
         84:44:13:c5:74:6a:63:ac:ca:1a:bf:e6:fd:ef:b6:6b:e0:b2:
         33:4a:60:50:22:bf:5f:25:2d:5b:19:51:95:69:ce:4f:eb:ed:
         7a:91:95:fa:46:7e:4b:97:2b:f1:3d:a1:2c:72:d4:8f:af:cd:
         fe:51:c9:ea:d4:db:0b:5b:bd:0d:24:01:8f:e7:fd:f3:b8:83:
         a0:08:47:11:70:9f:e5:db:f2:fe:05:ee:7f:0e:60:a0:5d:04:
         c8:71:c4:c7:b7:b3:a6:c4:4d:e7:2a:64:9d:fd:cb:3a:7f:20:
         18:71:85:4e:13:ff:dd:7c:d1:30:42:8f:76:b5:f8:6d:b9:94:
         70:02:58:ed:9e:64:fa:22:0d:27:64:10:6d:4c:80:06:b9:a5:
         f1:49:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:47:45 2025 by rpki-client