Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1dc784-9653-3694-8af9-0aaf9780ae17.roa
File:                     4f1dc784-9653-3694-8af9-0aaf9780ae17.roa (raw, json)
Hash identifier:          RTynaCe93aP16Ef7WVisoepOdx8h3h0/p9+W6jASG7Q=
Subject key identifier:   9A:A8:E4:76:6B:15:19:FB:31:59:62:89:FD:23:52:D4:AD:09:50:DD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE807528CEB1B7C29EA3C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1dc784-9653-3694-8af9-0aaf9780ae17.roa
Signing time:             Thu 01 May 2025 16:23:27 +0000
ROA not before:           Thu 01 May 2025 16:23:27 +0000
ROA not after:            Wed 30 Jul 2025 16:23:27 +0000
asID:                     22773
IP address blocks:        70.162.166.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:80:75:28:ce:b1:b7:c2:9e:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:23:27 2025 GMT
            Not After : Jul 30 16:23:27 2025 GMT
        Subject: CN=e641d5a3-045c-4afd-b0fe-0617f26bf07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:49:cf:d1:21:3e:3c:73:6d:de:f6:30:a0:
                    28:6f:65:7f:1b:81:ce:18:d2:ea:10:69:f0:e4:38:
                    7a:55:86:fd:cd:17:e6:0f:b2:04:69:ee:9f:7a:31:
                    3e:56:05:1d:14:77:b1:fc:1d:53:81:d6:65:bd:78:
                    ed:b6:89:92:9f:43:a7:2d:6f:4d:95:b0:6e:d1:90:
                    09:99:3f:9b:dc:d0:49:66:c2:d1:68:16:3b:60:99:
                    d8:92:01:20:91:bf:75:d1:8d:a1:e1:9d:c2:38:c8:
                    21:2b:a6:44:b9:5b:71:55:70:2c:c4:e4:60:2d:d5:
                    08:70:c7:08:29:3d:de:f9:47:16:b2:8f:1c:0a:a5:
                    1a:02:d6:e3:39:3f:90:2d:6f:69:3d:5f:6c:d2:af:
                    73:e6:02:f1:db:ca:1f:7a:17:87:cf:df:fb:61:4d:
                    7a:e8:45:6b:6b:01:c1:27:56:35:e9:02:09:04:a2:
                    4f:56:46:82:16:b2:d1:14:ff:46:f6:b9:87:a6:fc:
                    09:34:c7:b1:ee:b9:0e:f6:71:ff:d5:29:11:3b:a8:
                    f8:7d:6e:20:a2:36:1e:0b:f8:73:bf:17:12:a6:51:
                    ea:9b:4a:a4:33:f8:b0:4a:00:b2:ca:78:02:e0:1f:
                    89:a3:3d:72:1e:ad:c3:b7:43:12:39:93:08:7a:cf:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:E4:76:6B:15:19:FB:31:59:62:89:FD:23:52:D4:AD:09:50:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1dc784-9653-3694-8af9-0aaf9780ae17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.162.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a1:47:28:a3:c6:55:da:c0:fc:9a:bb:f9:05:4a:ca:95:56:
         89:21:5b:36:e7:36:8e:a7:94:5c:59:ed:d8:9a:8f:e2:93:d5:
         b2:de:33:a7:94:c8:d5:77:98:a4:91:a9:a5:94:20:a6:be:03:
         5c:50:38:3b:bf:ae:93:8c:36:ba:3a:e5:14:65:04:d5:e1:62:
         39:3b:7a:42:27:2e:a8:89:9a:f2:35:81:87:0a:bb:63:1e:29:
         57:28:09:b4:7b:a8:cf:35:f3:d7:78:7a:10:25:a0:98:31:d9:
         ea:05:eb:c2:d3:a8:4b:18:fb:1a:85:12:7b:91:94:d7:fc:d6:
         57:ed:16:4d:dc:c6:a1:21:7f:4f:ca:38:08:97:f3:dd:8a:68:
         30:18:97:c0:da:56:77:9d:61:c2:e7:57:7e:27:5d:2f:9d:d2:
         31:11:04:67:78:ed:9b:90:05:6a:9f:6c:c6:00:9c:3a:52:e1:
         b8:1f:5c:66:0c:8f:b1:d7:29:3d:57:49:70:5a:40:88:96:9a:
         af:48:0f:ab:d5:56:e5:52:de:5e:e3:7b:cb:04:c3:a6:58:27:
         eb:3d:0a:71:85:9a:8e:be:21:0b:23:14:a1:41:3e:ba:f1:8b:
         0c:a2:61:f3:a9:12:b1:c1:4f:77:12:be:1a:b5:0a:54:7b:38:
         ad:ce:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:53:38 2025 by rpki-client