Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/511aa072-2ad6-3e22-a995-438747b56f3a.roa
File:                     511aa072-2ad6-3e22-a995-438747b56f3a.roa (raw, json)
Hash identifier:          FqVfrnoJ8xVI3f0ugjFw6urg7YUU12vbiDnyQGO8Ipo=
Subject key identifier:   7B:BE:61:86:E9:98:1E:92:2F:9E:28:C0:E9:41:B5:F4:69:EF:E3:B4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E10032CB2E61F2A25CC600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/511aa072-2ad6-3e22-a995-438747b56f3a.roa
Signing time:             Thu 01 May 2025 16:28:29 +0000
ROA not before:           Thu 01 May 2025 16:28:29 +0000
ROA not after:            Wed 30 Jul 2025 16:28:29 +0000
asID:                     22773
IP address blocks:        98.165.16.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:00:32:cb:2e:61:f2:a2:5c:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:28:29 2025 GMT
            Not After : Jul 30 16:28:29 2025 GMT
        Subject: CN=489e8d9b-9c2a-44ce-81ff-c93ce6d3f2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:84:a9:97:84:5f:4a:48:d5:39:c7:1b:ed:
                    6a:12:9f:97:c0:81:c6:da:81:0a:16:4f:9a:37:d6:
                    1e:41:a5:fe:9d:ab:89:9e:24:1f:f2:3a:a9:2a:a5:
                    b4:e4:3a:80:ed:91:6a:9a:fd:61:18:1f:57:82:bb:
                    26:2c:61:af:bd:da:e1:25:33:4a:ef:ae:d7:ae:59:
                    ee:79:d1:48:ee:f2:23:85:49:55:86:14:00:18:2c:
                    d5:c4:74:48:16:fd:05:84:9b:bb:7c:62:f5:67:d9:
                    0a:83:ef:6e:c7:2f:21:ca:47:a2:62:12:80:a1:05:
                    f1:96:45:98:49:ad:84:e4:32:d3:85:8d:fc:95:96:
                    07:cd:87:8b:07:07:fa:26:aa:ac:47:43:df:0b:8a:
                    fa:35:b8:8a:73:2f:01:23:49:76:50:e0:db:e0:e1:
                    93:96:f7:06:6c:e3:19:47:ff:3d:e9:7c:96:36:74:
                    7b:e0:3f:31:8d:2d:81:44:4f:c1:fb:f1:2f:0e:42:
                    b9:bc:24:c3:76:00:d2:59:c4:44:1d:fb:79:b0:95:
                    18:75:fc:7f:b7:86:6b:7b:27:57:bf:36:f4:75:60:
                    90:27:ac:7b:f2:8f:ee:e1:50:03:46:69:9d:9f:c4:
                    7b:eb:54:06:ea:cf:b9:11:43:fd:d2:72:d4:b1:3a:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:61:86:E9:98:1E:92:2F:9E:28:C0:E9:41:B5:F4:69:EF:E3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/511aa072-2ad6-3e22-a995-438747b56f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:b9:28:a6:4b:81:e8:82:7a:9a:94:9f:98:25:d2:62:02:
         d4:b7:95:b4:5b:7f:e1:2c:13:3f:cd:33:1d:ef:b8:67:04:d6:
         31:31:36:bb:da:26:cc:b8:af:bf:d5:03:8e:80:7b:5f:3f:2d:
         cd:ab:29:bc:e2:55:c0:a2:92:14:ee:f5:25:e7:9d:e4:62:c5:
         7c:a2:38:d5:fa:fd:07:18:bd:3f:e2:34:49:fe:9a:14:26:3a:
         76:d5:f3:e2:e1:97:27:b8:27:99:2c:c3:98:9b:2e:b7:a1:83:
         c9:c7:b7:fc:2c:d5:e6:a3:63:30:1d:e1:5c:15:db:49:0a:d2:
         6e:fa:ec:06:16:05:1d:78:04:f4:83:ae:f8:de:4d:97:f2:f7:
         db:63:80:66:c5:24:58:a7:71:6f:b8:24:87:c6:d9:c8:34:b0:
         8a:80:90:03:0f:b3:ef:c9:5a:ae:53:4b:6b:b3:7d:30:b6:94:
         49:a0:59:df:b7:60:b9:d4:94:b9:7f:97:f9:48:f5:20:89:0e:
         61:6f:88:3e:ac:27:70:88:2f:73:be:b0:27:b5:02:f4:74:7f:
         54:60:78:1a:0f:6e:9c:13:49:b7:44:3a:3c:07:b6:e1:47:df:
         e9:b8:8c:00:e4:e7:dd:98:d0:09:e9:c1:56:2d:28:a6:b1:2e:
         b6:b9:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:04:50 2025 by rpki-client