Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a36acfc-ae25-39b8-832e-0c1f66d10f51.roa
File:                     4a36acfc-ae25-39b8-832e-0c1f66d10f51.roa (raw, json)
Hash identifier:          nxUFK8ZlDLtVwe1HCULUCa4sQ73EOU0ew9GK/6wSLjE=
Subject key identifier:   76:54:E1:71:EB:FA:D4:8D:C7:4C:67:27:59:C3:7A:F3:62:14:CA:D1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE98110FD933B4EF227B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a36acfc-ae25-39b8-832e-0c1f66d10f51.roa
Signing time:             Thu 01 May 2025 16:23:38 +0000
ROA not before:           Thu 01 May 2025 16:23:38 +0000
ROA not after:            Wed 30 Jul 2025 16:23:38 +0000
asID:                     22773
IP address blocks:        70.163.136.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:98:11:0f:d9:33:b4:ef:22:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:23:38 2025 GMT
            Not After : Jul 30 16:23:38 2025 GMT
        Subject: CN=317689bf-a456-426c-bd26-f5c62d0870e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fd:7b:1e:f8:e4:cf:33:52:36:55:60:ea:01:
                    b2:7d:bf:e8:29:25:3e:92:7c:b8:1b:eb:61:0f:23:
                    92:a1:62:36:d6:e6:b2:ac:54:86:c2:a2:ef:7b:12:
                    a7:f4:f5:c9:5a:d1:84:62:10:ac:8c:35:34:fc:03:
                    8a:79:7f:9a:11:7d:a6:01:aa:bc:1a:5b:b3:88:7b:
                    96:0c:10:3b:56:64:76:78:86:e8:84:a5:9d:96:64:
                    7c:b7:ad:c1:45:c8:45:6d:6a:8a:ac:6f:b6:4f:d2:
                    cb:83:e7:19:c0:28:7f:54:fe:5d:63:dd:bf:82:4d:
                    cb:ca:35:b5:bc:7d:24:b3:04:33:7a:db:24:39:8f:
                    5b:bb:ca:81:32:b1:50:a5:6a:a4:50:b2:8d:aa:60:
                    fb:c1:f5:c4:1c:92:27:b8:8b:51:2d:d6:3c:21:02:
                    a4:b9:f2:5d:55:c0:ed:6b:7d:a3:2b:77:8d:02:d1:
                    b3:6a:2b:c7:b2:96:6a:39:87:35:4b:23:9f:f0:0e:
                    d9:7c:18:e9:2f:e6:a1:3d:d8:d5:00:c6:a5:e1:84:
                    83:dd:98:c4:3a:fe:ab:cb:00:c6:94:3b:cd:c5:30:
                    54:4f:3d:f7:51:62:55:5f:38:6c:55:f3:a5:27:54:
                    ac:9c:d6:b5:34:d9:bf:c1:8b:c0:c8:bb:db:ec:85:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:54:E1:71:EB:FA:D4:8D:C7:4C:67:27:59:C3:7A:F3:62:14:CA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a36acfc-ae25-39b8-832e-0c1f66d10f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.163.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:8f:b3:44:9a:b9:d8:90:69:52:91:c0:eb:0c:43:b5:d3:
         4b:7e:dd:fd:38:71:2b:e8:45:e8:ba:69:d4:59:e4:fa:b5:b4:
         8a:37:a2:ed:1e:ab:3c:14:93:8d:15:0f:75:70:3b:c0:7a:30:
         9f:0d:58:9e:0f:5d:04:3f:2c:bd:84:27:b4:d2:16:9f:3b:90:
         26:12:bb:0f:51:8f:6b:3d:06:af:99:54:8f:64:6d:e7:6a:f7:
         89:ad:2d:e0:ea:7f:23:c7:d5:d8:9a:32:b4:71:c8:d7:93:ac:
         15:9d:d3:dc:c9:7f:62:50:5b:de:f5:25:cd:2e:2e:6e:bb:71:
         98:b0:1f:20:58:a6:de:6a:ad:24:67:2f:c4:b4:d9:fa:93:df:
         9b:2e:ef:86:e2:8c:16:86:fa:08:7a:3a:e4:ba:00:51:5d:5d:
         76:7e:69:f1:1a:fc:bd:bc:5e:2b:62:d2:11:d4:67:60:12:54:
         f6:9e:1c:86:90:55:00:9d:c1:af:1f:ac:57:29:b8:49:64:e1:
         22:49:4f:04:fb:e1:a2:46:6b:a4:95:0e:73:1b:38:cd:8f:f5:
         54:7e:ea:ae:6e:7e:fa:59:de:5a:a0:13:b9:50:6a:e7:59:ba:
         6b:f0:c7:49:69:0a:73:3a:4e:3b:be:17:f6:25:4b:23:87:10:
         7d:cd:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:00:20 2025 by rpki-client