Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f9b319c-2845-3681-8ee0-289b0739bb8e.roa
File:                     4f9b319c-2845-3681-8ee0-289b0739bb8e.roa (raw, json)
Hash identifier:          HeQwwo9Ylq8nliV/vaTAoR9r/0ih/cXMycCCqmy3zuA=
Subject key identifier:   8D:02:8F:85:60:66:77:B0:DF:09:C1:92:B1:E3:0F:A2:BC:44:B3:9F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DCFFA832158B3F2D907780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f9b319c-2845-3681-8ee0-289b0739bb8e.roa
Signing time:             Thu 01 May 2025 16:20:25 +0000
ROA not before:           Thu 01 May 2025 16:20:25 +0000
ROA not after:            Wed 30 Jul 2025 16:20:25 +0000
asID:                     22773
IP address blocks:        68.0.185.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dc:ff:a8:32:15:8b:3f:2d:90:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:20:25 2025 GMT
            Not After : Jul 30 16:20:25 2025 GMT
        Subject: CN=5260eee5-db9e-4dc1-9f5b-66d3b25eba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:65:d8:0c:cb:0e:ba:62:0a:f3:90:e5:2e:
                    02:8a:e6:55:e0:e1:48:b6:43:3f:75:c4:39:cd:e3:
                    ee:b9:84:2a:04:4c:87:dd:4f:48:4b:7b:ed:08:9d:
                    04:cb:0e:8d:85:3f:ac:43:b9:40:6c:36:70:ef:5f:
                    02:fa:9e:c3:2a:8a:65:09:8e:bc:cc:b4:9f:f3:de:
                    71:95:74:a3:f1:15:9a:5d:42:d1:83:56:32:44:58:
                    fd:08:c3:83:81:c3:1f:c2:3d:c5:0c:bb:f6:1d:1c:
                    18:46:31:36:fc:1b:ae:10:6b:7b:fa:f6:47:b6:0a:
                    d7:a5:de:3a:a3:ea:a9:07:b9:2a:b9:3d:d8:f2:86:
                    cf:1a:e4:7c:b8:0a:07:5a:eb:40:fc:f4:c2:40:91:
                    78:4e:ed:50:cd:a6:01:f1:53:b2:5e:b3:ee:8b:b4:
                    60:8b:9b:12:81:a8:49:1f:ce:87:b7:b3:32:8e:7c:
                    7a:4b:4e:16:15:4d:47:f4:8e:3a:9e:16:02:40:e7:
                    31:90:38:27:2e:57:8e:17:db:5d:63:7c:a4:27:16:
                    7b:f2:27:e1:63:f0:dd:f2:2e:5e:c2:5e:ac:b0:fc:
                    1a:85:80:e5:8d:91:3a:9c:e5:c5:d1:cc:9a:3f:1c:
                    04:57:e5:d8:f5:39:31:23:4f:00:07:ab:46:69:16:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:02:8F:85:60:66:77:B0:DF:09:C1:92:B1:E3:0F:A2:BC:44:B3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f9b319c-2845-3681-8ee0-289b0739bb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.0.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7c:c9:e4:ea:79:27:e0:40:ba:bd:3b:98:b6:86:3f:3c:c7:
         b5:3b:dc:b2:4e:07:c0:4a:dd:4a:82:26:2e:f4:bb:5d:dc:6e:
         46:88:a4:cc:6a:8a:5c:79:99:3c:f9:e6:50:89:33:c6:7a:ec:
         0f:c6:62:cd:71:68:c9:33:46:fe:98:94:42:44:25:53:fa:33:
         7d:c4:17:12:21:e6:e3:9c:b2:22:50:47:f8:b0:ef:76:d6:f2:
         86:89:94:fb:34:90:b6:38:00:90:4e:bd:ac:b1:db:03:fc:dc:
         4a:74:b7:32:79:9c:22:3c:d8:5b:0a:4c:33:27:c0:d4:d9:ee:
         d6:71:96:59:cc:17:25:c4:2e:9e:8e:a8:63:1a:f7:d8:74:97:
         8a:03:b7:dd:94:02:9a:e5:bf:8e:a7:18:a3:0d:98:55:ae:7c:
         e9:51:c3:33:36:77:e9:3b:39:9f:7b:01:4c:d9:e8:cc:81:28:
         31:5a:07:92:f3:24:25:3e:80:22:6f:69:09:3f:ff:5b:f8:37:
         84:e7:d9:68:03:12:18:4b:0e:cd:62:82:98:eb:69:08:9e:d0:
         0f:84:b0:bb:b9:9e:f5:b7:7e:05:9b:4f:3a:fd:61:be:33:8a:
         a3:07:f8:3a:b3:92:75:db:78:d8:40:d8:38:0b:1a:ba:48:a5:
         c9:03:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:49:39 2025 by rpki-client