Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d525792-4f23-3c38-966d-758226953c58.roa
File:                     4d525792-4f23-3c38-966d-758226953c58.roa (raw, json)
Hash identifier:          uT1VyQoK/NpKbiUHmqe+XWMRXpX7VMB+H1ua5g2XerQ=
Subject key identifier:   C0:D5:89:D3:0B:E0:06:C2:DF:69:3E:2A:65:D2:E1:E4:4F:F0:C7:59
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E0888929DB16763E82F099
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d525792-4f23-3c38-966d-758226953c58.roa
Signing time:             Thu 01 May 2025 16:27:33 +0000
ROA not before:           Thu 01 May 2025 16:27:33 +0000
ROA not after:            Wed 30 Jul 2025 16:27:33 +0000
asID:                     22773
IP address blocks:        72.217.85.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:88:89:29:db:16:76:3e:82:f0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:27:33 2025 GMT
            Not After : Jul 30 16:27:33 2025 GMT
        Subject: CN=1253333a-3d35-44bd-9275-c5f89989a6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:f0:9b:2b:d4:4d:92:95:b0:12:47:a2:55:
                    44:3c:95:8f:d7:a8:65:74:f3:3f:45:42:f8:31:f6:
                    6c:d4:25:bf:85:d5:e7:7a:1e:39:85:e8:58:f2:78:
                    87:b0:05:bd:34:02:af:13:ac:7b:ac:4e:ef:23:78:
                    70:97:80:11:9c:e8:92:58:8c:16:7f:78:d7:5c:5b:
                    da:f9:40:51:8d:74:57:4a:53:98:16:29:62:59:37:
                    67:81:ae:61:c5:58:c1:7b:37:a7:86:7e:d8:b3:67:
                    cb:15:a6:5a:3b:62:8f:1d:1c:34:11:48:e5:f8:f1:
                    c2:38:70:f8:23:21:ac:a0:37:7c:f9:f2:6b:ef:e4:
                    21:34:76:05:7c:30:49:5c:4e:d8:e6:5d:f8:53:7c:
                    9e:b8:23:ef:71:11:79:51:7f:63:f9:b6:01:65:be:
                    bc:26:91:1b:bd:05:3e:07:53:9b:c1:5c:e3:ee:40:
                    f3:d5:6c:18:3a:93:3c:79:15:06:86:f3:76:34:01:
                    67:dd:33:49:95:35:45:e1:fe:95:e4:d6:7a:82:f5:
                    f8:0c:87:03:66:02:21:bd:6f:06:12:13:1c:b5:bf:
                    43:35:ad:c5:05:0f:31:da:f9:11:0a:ae:e5:3f:52:
                    e9:9e:59:17:dd:a0:88:80:49:b8:f3:ff:8c:d1:ad:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:89:D3:0B:E0:06:C2:DF:69:3E:2A:65:D2:E1:E4:4F:F0:C7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d525792-4f23-3c38-966d-758226953c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:1d:5d:b4:58:6c:19:23:8f:00:18:68:a8:03:6f:23:08:
         f6:0f:3d:25:d1:51:5f:ed:8b:93:51:6a:9f:60:66:b2:a0:db:
         b5:12:36:ce:8b:84:49:3b:a3:67:9b:fa:f6:21:7a:2a:4e:8b:
         82:84:9b:1e:b6:e1:51:9c:b3:c7:0d:fa:c4:b7:2c:29:7c:50:
         a0:1f:69:69:5f:f2:8a:5a:63:65:c5:a1:05:d2:70:b7:21:41:
         e1:b6:b8:c2:4d:f0:49:85:09:e3:41:73:02:f8:0a:54:d6:75:
         34:35:f4:6e:59:4f:db:d3:0f:2e:54:93:6f:60:75:38:50:60:
         b7:cd:d6:e9:7f:00:09:05:3f:58:ba:15:32:d6:60:44:79:e4:
         81:63:31:40:1d:8e:08:80:b3:f3:65:c6:fb:ff:ef:e9:4f:7b:
         b2:f6:ae:27:73:45:ea:2d:1c:05:85:68:52:25:ed:56:73:62:
         d3:bc:76:72:aa:b8:c7:7e:64:a5:dc:57:a1:25:b5:58:94:84:
         3f:24:4c:ac:4b:ae:ca:d1:3a:14:0a:cc:e2:22:74:de:e5:c2:
         da:c6:58:7a:a2:70:96:8a:56:1f:23:04:01:5f:84:ff:c1:e6:
         b1:8f:2a:17:3f:15:06:0a:4e:5b:88:a2:f1:ea:30:51:a5:b8:
         10:07:1d:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm14IiJKdsWdj6C8JkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjczM1oXDTI1MDczMDE2MjczM1owLzEtMCsGA1UEAxMk
MTI1MzMzM2EtM2QzNS00NGJkLTkyNzUtYzVmODk5ODlhNmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomnwmyvUTZKVsBJHolVEPJWP16hldPM/RUL4
MfZs1CW/hdXneh45hehY8niHsAW9NAKvE6x7rE7vI3hwl4ARnOiSWIwWf3jXXFva
+UBRjXRXSlOYFiliWTdnga5hxVjBezenhn7Ys2fLFaZaO2KPHRw0EUjl+PHCOHD4
IyGsoDd8+fJr7+QhNHYFfDBJXE7Y5l34U3yeuCPvcRF5UX9j+bYBZb68JpEbvQU+
B1ObwVzj7kDz1WwYOpM8eRUGhvN2NAFn3TNJlTVF4f6V5NZ6gvX4DIcDZgIhvW8G
EhMctb9DNa3FBQ8x2vkRCq7lP1LpnlkX3aCIgEm48/+M0a3OFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDVidML4AbC32k+KmXS4eRP8MdZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGQ1MjU3OTItNGYyMy0z
YzM4LTk2NmQtNzU4MjI2OTUzYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0eHV20WGwZI48AGGioA28jCPYPPSXRUV/ti5NRap9gZrKg27USNs6L
hEk7o2eb+vYheipOi4KEmx624VGcs8cN+sS3LCl8UKAfaWlf8opaY2XFoQXScLch
QeG2uMJN8EmFCeNBcwL4ClTWdTQ19G5ZT9vTDy5Uk29gdThQYLfN1ul/AAkFP1i6
FTLWYER55IFjMUAdjgiAs/Nlxvv/7+lPe7L2ridzReotHAWFaFIl7VZzYtO8dnKq
uMd+ZKXcV6EltViUhD8kTKxLrsrROhQKzOIidN7lwtrGWHqicJaKVh8jBAFfhP/B
5rGPKhc/FQYKTluIovHqMFGluBAHHW8=
-----END CERTIFICATE-----
Generated at Thu May 15 02:55:00 2025 by rpki-client