Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/606d5a96-bb04-3f40-a5bf-8cd01713f080.roa
File:                     606d5a96-bb04-3f40-a5bf-8cd01713f080.roa (raw, json)
Hash identifier:          EG2o8RmWtHGJbj2FbVmtVIq3itT66slq6SVSJbqFaiQ=
Subject key identifier:   94:3C:0F:89:89:F6:18:54:10:54:4B:B3:67:D0:63:BD:2F:59:9E:00
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD0D359D099048E415B0E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/606d5a96-bb04-3f40-a5bf-8cd01713f080.roa
Signing time:             Thu 01 May 2025 16:20:32 +0000
ROA not before:           Thu 01 May 2025 16:20:32 +0000
ROA not after:            Wed 30 Jul 2025 16:20:32 +0000
asID:                     22773
IP address blocks:        68.2.86.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:0d:35:9d:09:90:48:e4:15:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:20:32 2025 GMT
            Not After : Jul 30 16:20:32 2025 GMT
        Subject: CN=fedc892d-50d0-411d-8b1e-fc3cf04468c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:94:40:2e:c5:12:21:0a:6f:c8:5b:b4:2d:
                    6a:7f:94:45:dd:04:1d:73:f4:6c:42:da:ea:d8:0a:
                    10:63:7f:58:fb:d2:0f:1d:e7:61:6f:81:b4:fc:61:
                    38:e2:37:30:1c:54:3b:9a:d5:cf:e3:42:ef:a9:42:
                    47:c1:b2:90:7a:67:78:5b:d3:63:2e:84:12:54:67:
                    c2:ac:49:13:ad:f2:4d:0f:7b:9d:48:28:f5:9f:0c:
                    bf:33:f4:9d:02:d9:e3:b1:46:96:5a:df:d4:8d:95:
                    7c:7d:84:79:36:b5:a0:74:03:fb:af:e6:c5:12:c5:
                    2e:46:8d:38:78:b8:d1:da:67:9e:ab:7f:3b:cf:cb:
                    29:20:5f:1b:b0:fd:74:d6:ed:e7:91:fe:ac:b5:a8:
                    57:bf:db:65:27:5c:46:6e:10:05:af:b7:27:ac:50:
                    ce:ec:de:b4:9b:55:68:f9:cf:97:96:35:15:ff:c5:
                    f5:24:ec:03:7e:61:1a:94:00:f7:41:28:f9:4f:9b:
                    99:63:9e:13:9e:1c:81:13:9a:2d:f0:86:52:64:01:
                    32:cc:16:fc:45:22:cb:58:68:a8:3e:b5:d8:6e:89:
                    61:5c:e9:94:a2:be:6d:50:f7:b8:f1:b8:bd:8d:ad:
                    a6:9f:6e:8a:e3:50:38:b1:02:90:eb:71:44:d7:a5:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3C:0F:89:89:F6:18:54:10:54:4B:B3:67:D0:63:BD:2F:59:9E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/606d5a96-bb04-3f40-a5bf-8cd01713f080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:58:ae:66:1a:6a:e5:60:5c:f7:bb:1a:77:d2:8c:26:5e:
         04:8a:91:b6:12:0b:43:10:85:41:29:58:e8:9b:51:d0:95:78:
         de:73:94:a8:ef:79:0b:03:1a:13:70:3a:11:af:4a:0a:72:8d:
         13:d4:d2:f2:b9:29:fc:7d:7f:77:8d:ab:b5:45:38:2e:85:96:
         e3:cd:6a:92:27:b5:b9:e8:c4:02:ad:73:82:2c:db:a4:eb:45:
         65:0b:21:ad:a1:51:a4:46:0d:f3:43:f0:76:59:16:b6:98:d0:
         fb:3e:a7:7c:48:c7:3e:c8:38:77:4b:44:e9:c0:9c:14:89:9f:
         77:96:06:ae:61:85:35:bc:80:1a:f5:f6:50:c6:42:38:bc:f6:
         c3:91:36:46:ce:3b:57:53:f5:d7:9b:44:2b:ec:88:63:3d:fa:
         ab:f8:71:c3:1c:43:50:4e:f2:96:b1:44:da:ea:45:bc:0e:ea:
         a7:43:68:48:e3:71:3a:30:e0:a6:df:9e:16:65:f0:aa:ae:1c:
         cd:a5:de:67:6b:17:ea:73:01:9c:5f:68:d5:98:ee:56:69:53:
         75:9f:a5:42:e9:f0:73:b6:65:17:82:3d:4f:e8:1f:0a:59:39:
         3c:06:45:e5:34:47:19:31:a2:e2:b9:e4:11:83:9e:99:c6:c5:
         27:f3:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:15:48 2025 by rpki-client