Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a37eb6-f30b-357e-8b57-279911cced0b.roa
File:                     54a37eb6-f30b-357e-8b57-279911cced0b.roa (raw, json)
Hash identifier:          UurppvLKxQgZDSCxldU917Mz9AnNDve1k8jHh/SYsvw=
Subject key identifier:   9B:96:6F:7B:82:97:2C:29:68:E0:6F:E1:D4:F8:64:BA:1D:4D:03:09
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DFCBB72396655266A63600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a37eb6-f30b-357e-8b57-279911cced0b.roa
Signing time:             Thu 01 May 2025 16:26:03 +0000
ROA not before:           Thu 01 May 2025 16:26:03 +0000
ROA not after:            Wed 30 Jul 2025 16:26:03 +0000
asID:                     22773
IP address blocks:        72.201.189.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:cb:b7:23:96:65:52:66:a6:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:26:03 2025 GMT
            Not After : Jul 30 16:26:03 2025 GMT
        Subject: CN=253199d4-4030-494d-a0a5-fbab833f2ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:56:ef:4b:e6:c5:84:e9:d6:24:a4:b9:84:
                    e3:22:6c:f5:b8:d5:d1:4e:c7:c4:4e:63:c5:ad:71:
                    24:be:b3:63:77:92:0b:28:8f:ac:7e:da:17:f4:0f:
                    f9:dc:e1:93:f6:62:2b:5d:8b:36:d7:ec:67:70:3e:
                    09:04:5b:20:0e:40:fe:d7:bb:72:e6:07:04:d0:00:
                    bd:d2:d6:e7:ba:ed:a1:c1:0a:60:4b:9c:ec:39:b5:
                    53:b0:34:ae:a1:c9:0d:47:2f:21:36:af:e4:28:4d:
                    ac:4f:55:de:08:79:e8:9b:6c:da:83:d3:5b:ba:08:
                    c0:7b:d0:94:32:cc:b8:bf:f0:98:9b:43:b9:d2:3e:
                    a9:34:a1:d7:af:8f:8e:4f:f1:8d:37:f1:86:5a:bd:
                    ba:7c:c7:66:69:70:a8:b6:7c:2d:01:c2:b2:18:3a:
                    68:42:9e:48:2f:24:1f:48:ab:6d:7c:ac:77:1b:ff:
                    11:6c:c5:96:7c:da:5a:bf:f9:a0:14:b8:62:29:e2:
                    7b:91:4b:59:13:2b:0d:c0:cc:a0:67:e3:22:21:2d:
                    c9:6a:3b:89:a5:93:68:20:fd:00:b4:53:e0:04:20:
                    b8:d4:14:a3:39:6d:da:d6:69:2c:48:a8:19:09:7c:
                    6b:3c:33:59:c1:c8:53:96:45:16:9d:93:da:d9:09:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:6F:7B:82:97:2C:29:68:E0:6F:E1:D4:F8:64:BA:1D:4D:03:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a37eb6-f30b-357e-8b57-279911cced0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:3b:7e:26:64:28:fa:00:35:10:2b:4b:0d:44:e6:5e:20:
         f8:c5:a2:26:6a:87:61:22:cb:73:cb:87:b9:e3:1b:5d:8e:ee:
         05:1c:59:6a:fd:9d:ee:fa:40:8a:6f:0a:04:be:66:8c:b9:a8:
         7b:7e:40:e8:a5:c9:67:8b:45:bd:05:04:c3:08:8a:e7:f3:c1:
         b7:98:15:ca:fd:36:ac:59:8c:2e:3e:ab:3b:9d:af:f4:72:37:
         46:92:bf:0e:86:41:a8:a7:e1:b6:b0:85:c0:41:2d:cd:bd:8e:
         62:70:4d:9e:3a:cb:b0:f0:cf:2c:8e:a1:03:e9:da:a6:8e:a9:
         ca:56:d0:06:47:d0:7d:59:2e:a8:8b:84:bf:48:ce:ec:ee:57:
         1a:32:ac:bf:8d:95:83:b9:5d:ae:3f:16:15:8c:85:d4:98:05:
         e3:66:e7:e6:9e:3c:ec:86:ad:ce:65:39:d8:86:33:48:1b:30:
         62:63:8b:6d:3a:34:39:17:84:02:ea:4a:c0:34:02:66:77:f0:
         f5:92:9f:6b:0d:0b:1c:6b:32:a3:f7:0e:da:97:e6:9b:22:7f:
         e6:97:a0:f7:7f:2e:37:d6:8b:f3:d0:97:1f:c0:f6:c5:cf:d5:
         ec:04:f5:32:99:9c:52:ba:c6:91:3f:63:85:87:e7:9f:1b:b8:
         95:57:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:43:36 2025 by rpki-client