Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52e183be-0e2d-39e9-8170-1def15ce56ec.roa
File:                     52e183be-0e2d-39e9-8170-1def15ce56ec.roa (raw, json)
Hash identifier:          6cnuTRP3Zn8Z8DfbzsWoXUexUUg0OPuRf0TfuP5gTVQ=
Subject key identifier:   DB:7C:1B:B1:A2:89:02:6A:A4:FB:A1:4D:C9:0F:04:FB:F1:4C:E0:7E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F98CFB4AF00DE3FDA6CF60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52e183be-0e2d-39e9-8170-1def15ce56ec.roa
Signing time:             Thu 01 May 2025 17:17:57 +0000
ROA not before:           Thu 01 May 2025 17:17:57 +0000
ROA not after:            Wed 30 Jul 2025 17:17:57 +0000
asID:                     22773
IP address blocks:        68.96.100.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f9:8c:fb:4a:f0:0d:e3:fd:a6:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:17:57 2025 GMT
            Not After : Jul 30 17:17:57 2025 GMT
        Subject: CN=28580e3c-adbd-40c0-b3d9-3583ee42562a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:de:6b:f9:f3:e8:2d:2e:5b:f2:3c:2c:cf:
                    97:b5:74:4f:aa:ca:ab:fc:36:85:ec:c5:78:e0:03:
                    39:38:ab:1a:65:72:ab:0d:20:64:a1:b4:f3:fa:4b:
                    7c:18:00:7d:53:16:16:1e:9d:24:ee:28:cb:dd:51:
                    e6:62:bb:4e:cd:08:35:41:a7:69:13:00:be:c8:47:
                    3a:83:34:16:b4:c9:a4:c3:ae:68:cc:b8:18:0a:c3:
                    2d:e5:6c:69:2f:08:6c:7a:c7:eb:6e:6b:eb:0f:75:
                    ca:52:03:88:c1:a1:f1:42:76:a3:da:d0:fa:50:ba:
                    a2:62:a5:c3:6a:8f:32:66:8f:a7:99:7e:30:b5:85:
                    cb:45:4d:36:21:0a:7b:b0:9d:fc:2e:77:de:0c:ab:
                    da:a4:e1:04:d8:d9:45:fb:70:f6:8c:65:55:6a:eb:
                    df:27:04:fe:4d:40:74:5d:fa:83:14:f2:7e:1d:82:
                    c2:ac:dd:63:57:3b:0e:6e:ac:3c:3b:5e:de:5e:2f:
                    9b:e0:b7:81:2d:bd:45:25:51:13:92:e0:da:eb:fb:
                    dc:96:16:fa:5c:43:0e:4a:06:bd:f7:9c:94:c4:63:
                    fa:a5:1f:03:f0:14:bc:12:04:3d:2d:81:8c:78:53:
                    0d:98:02:da:56:23:d0:33:cf:3a:dc:fa:c5:f1:a7:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7C:1B:B1:A2:89:02:6A:A4:FB:A1:4D:C9:0F:04:FB:F1:4C:E0:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52e183be-0e2d-39e9-8170-1def15ce56ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:d1:00:0d:bc:9f:bc:0f:03:21:22:11:14:31:60:5c:7b:
         4f:12:88:ea:f1:6f:f3:2e:26:9e:c0:77:e9:29:7d:a7:df:4a:
         b2:ad:f5:57:4e:02:ae:79:85:af:72:33:bd:f1:f6:b9:fd:19:
         a8:04:cc:9c:54:ea:d0:a4:0a:87:c7:a4:6f:eb:59:46:a3:fb:
         b6:01:95:06:5f:c5:0f:8a:6f:6e:9e:d7:07:4a:99:d0:2c:f4:
         2b:d4:fa:19:41:ed:76:53:bb:cc:00:b8:b0:63:7a:ac:3f:04:
         f6:ae:9c:d7:25:60:36:93:0f:83:e1:05:9c:c3:6c:8f:74:5a:
         ad:a8:9c:41:d3:92:6e:af:fe:68:90:ac:51:20:10:4c:a3:16:
         21:b7:94:30:89:e7:49:48:66:b1:50:b9:d8:3f:61:7e:6e:94:
         65:93:01:36:5f:55:96:30:26:bd:39:7f:77:86:31:c6:f9:c8:
         8d:07:30:bd:f8:15:ae:54:d7:e7:bb:16:8f:c3:22:54:6f:8d:
         5d:95:d2:79:f6:3e:f9:c4:10:89:5c:a5:64:11:0a:ce:d9:91:
         06:e6:62:d2:0e:6c:e4:70:aa:f6:c0:f5:6c:30:3f:10:bf:9d:
         be:ce:e3:99:0c:3e:d0:26:a6:b3:95:76:0b:52:75:69:44:51:
         1e:18:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:31:41 2025 by rpki-client