Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f587cef-8a69-302a-b153-a560412d975d.roa
File:                     4f587cef-8a69-302a-b153-a560412d975d.roa (raw, json)
Hash identifier:          H/5Uoz9y6nzximo7ss3ONcdbjqKa4eAVub+nCYVRkHM=
Subject key identifier:   16:AA:B8:9A:AA:A2:65:3E:AB:D2:EE:70:4C:83:C0:38:73:00:06:14
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DEF413DB9A6A8DD00D31E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f587cef-8a69-302a-b153-a560412d975d.roa
Signing time:             Thu 01 May 2025 16:24:22 +0000
ROA not before:           Thu 01 May 2025 16:24:22 +0000
ROA not after:            Wed 30 Jul 2025 16:24:22 +0000
asID:                     22773
IP address blocks:        70.176.110.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:f4:13:db:9a:6a:8d:d0:0d:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:24:22 2025 GMT
            Not After : Jul 30 16:24:22 2025 GMT
        Subject: CN=903cec40-e2dc-499d-8611-a5058ce53813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:7e:36:ec:9f:fc:c2:b5:b9:55:04:5d:61:
                    1d:2a:bb:a9:c3:76:bd:f2:cf:55:54:91:e3:1d:ed:
                    f3:a1:b8:45:db:88:46:86:81:a9:9f:ce:f9:28:d2:
                    2a:00:64:a1:15:22:ee:58:8c:d5:ed:2b:d5:b4:76:
                    88:fc:a9:cd:10:b4:1e:70:9e:db:0e:0c:45:21:a3:
                    6e:5e:b1:b1:76:3e:c5:97:0c:22:6e:08:7b:8b:4b:
                    37:7f:31:96:34:60:47:1b:a3:e8:b6:88:c1:52:0e:
                    af:6f:53:23:5f:59:1a:7a:70:91:f3:c0:08:d9:fc:
                    49:8d:d9:70:b5:5c:d6:db:4f:6e:fa:e1:ba:fa:bb:
                    86:07:f8:7c:11:ab:2f:d7:3a:18:60:4d:45:ed:ab:
                    50:9b:4d:d9:76:ca:ec:1d:b8:bd:c8:c2:8b:48:e4:
                    8d:3c:11:8c:f6:36:50:d9:ce:18:cd:8a:58:7a:d3:
                    f6:89:7e:ca:7e:2e:ad:be:97:c2:76:af:50:62:ec:
                    ac:9f:ba:ef:d4:4d:1c:cd:22:a5:47:be:48:d4:23:
                    2e:44:df:40:18:ea:38:97:3e:ee:cb:eb:f8:74:de:
                    b8:88:17:14:d0:c5:20:be:fb:ff:91:9d:dd:a4:21:
                    11:35:e8:53:4d:a7:91:d0:3a:de:3f:c5:86:28:6b:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AA:B8:9A:AA:A2:65:3E:AB:D2:EE:70:4C:83:C0:38:73:00:06:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f587cef-8a69-302a-b153-a560412d975d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:f8:21:cf:74:59:8b:39:cc:33:ab:75:28:09:fa:b0:c3:
         19:0f:4e:fe:6d:22:a2:6a:5c:5e:8c:90:fe:ea:d6:e2:f6:db:
         bc:6a:30:af:5d:31:10:5a:9f:9d:83:6b:a0:e1:fa:71:cf:df:
         fd:58:60:77:a7:38:43:7d:ba:05:89:28:16:4b:ba:f6:53:fc:
         67:1e:77:ae:c3:0d:32:32:56:ba:a8:ed:96:4c:36:07:5f:09:
         2f:02:22:36:ff:fb:b1:95:33:11:54:ea:fa:cb:eb:24:1e:b6:
         44:73:b0:ef:f3:1f:91:31:c3:ae:9b:8a:46:20:fe:19:30:cc:
         84:fa:47:9a:b7:3a:67:6d:63:24:c9:37:79:19:f9:66:dd:8d:
         d5:e2:c8:9d:33:60:c4:7a:c8:74:ba:26:5b:61:e6:32:12:5e:
         92:3f:a1:b5:3f:01:bc:1a:82:f1:06:eb:02:45:1b:eb:a4:07:
         3a:bb:94:62:54:f9:2a:93:17:af:49:d3:9d:4b:17:ed:31:30:
         0c:bc:a2:0d:3e:cb:de:91:a3:b9:7b:29:05:dc:40:19:c2:50:
         08:a3:50:ab:6b:f0:57:f1:8c:04:b0:2f:cd:da:28:f0:1c:69:
         d5:28:a8:bf:ac:b7:76:b7:01:ec:d9:21:9a:ce:bd:96:58:49:
         5b:5e:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:36:09 2025 by rpki-client