Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68e5f671-3a75-359e-ab09-d6a9e136e03c.roa
File:                     68e5f671-3a75-359e-ab09-d6a9e136e03c.roa (raw, json)
Hash identifier:          7MHn2h4DVt5AT+nwGWi62/Z6hAweRyLGaQa7XPVLHkE=
Subject key identifier:   51:3D:FA:E0:65:D4:65:5B:10:6A:56:77:F0:64:65:E6:33:F5:A4:BA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E035DC7D047CB150D3DC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68e5f671-3a75-359e-ab09-d6a9e136e03c.roa
Signing time:             Thu 01 May 2025 16:26:54 +0000
ROA not before:           Thu 01 May 2025 16:26:54 +0000
ROA not after:            Wed 30 Jul 2025 16:26:54 +0000
asID:                     22773
IP address blocks:        72.210.43.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:35:dc:7d:04:7c:b1:50:d3:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:26:54 2025 GMT
            Not After : Jul 30 16:26:54 2025 GMT
        Subject: CN=d2fcf3f4-d91d-4c3c-87c1-6c67009b3686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:62:49:3c:29:b0:7a:bb:17:5f:26:92:16:
                    37:92:14:d3:fd:a5:93:8d:8e:d1:de:97:39:ad:2c:
                    fb:c8:54:67:54:60:8c:dd:28:57:6b:1a:38:50:06:
                    f6:e2:1e:31:74:b3:d0:a5:9b:31:82:9e:20:e4:33:
                    aa:69:44:d2:99:ca:06:70:52:a2:00:9d:03:69:10:
                    3b:4e:8b:c2:c7:6f:73:5d:2f:60:b9:cd:6a:34:22:
                    85:ad:19:ed:7b:48:4e:59:39:76:7b:48:47:64:7c:
                    ed:bd:95:40:5b:99:e6:ac:05:59:ae:86:18:2a:18:
                    fb:75:a5:d0:a8:b5:51:b1:1d:6d:a5:59:e3:72:3b:
                    40:fe:47:c4:97:79:4b:c6:31:29:8d:b2:df:9c:24:
                    0b:2d:a4:65:ae:5a:74:41:90:56:5b:d8:dd:6c:3c:
                    44:07:2b:84:23:d3:4a:cc:7b:4f:4d:83:20:16:90:
                    55:c3:65:c2:c6:09:6d:ba:9a:84:f1:17:d4:68:1e:
                    15:5e:01:38:f9:8a:3c:e8:c7:72:69:5a:ee:9a:dc:
                    a9:c1:91:ae:db:8d:5f:cf:9e:d2:56:9d:48:92:76:
                    76:bb:1b:7f:9a:38:8f:6e:49:32:8a:18:4c:68:89:
                    9f:f3:74:b5:eb:88:c2:e3:6f:b9:b8:03:08:03:da:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3D:FA:E0:65:D4:65:5B:10:6A:56:77:F0:64:65:E6:33:F5:A4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68e5f671-3a75-359e-ab09-d6a9e136e03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.210.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:6e:de:41:05:d9:cb:6c:e8:fc:fa:8c:c5:c0:63:e0:22:
         66:dc:77:31:12:7d:fe:0f:91:47:3a:99:2d:35:0c:d0:16:80:
         0f:84:a8:d4:be:37:f1:82:51:2e:d9:8b:48:4f:ac:c2:f6:a2:
         7c:8c:85:00:61:b3:22:24:3f:72:bd:65:80:61:86:98:92:ef:
         db:09:43:e4:d9:6b:c1:96:33:d2:24:96:3f:77:c2:c6:d8:a2:
         93:cb:69:43:ed:54:ae:72:a4:8e:50:f2:44:a3:1d:3c:31:0b:
         f9:bd:33:1c:81:98:8f:80:64:8d:68:98:4f:d2:74:56:ae:f9:
         67:07:bb:0e:30:df:06:44:69:40:f6:93:06:54:8a:64:82:5f:
         c0:25:42:26:82:b2:62:e3:a1:89:dc:cc:c4:b9:41:36:e8:06:
         cb:f5:0d:1a:76:7e:3c:25:dc:24:d9:d2:a7:51:1d:5f:49:24:
         fb:10:cb:65:79:1f:4e:1e:ea:1b:67:07:ca:c2:be:11:e6:fa:
         c9:72:9f:bc:65:06:6b:2c:e1:1d:3a:6b:b1:be:9f:97:9a:97:
         7a:ec:49:d0:a0:83:e3:0f:cf:5b:a4:f3:14:ee:5e:ff:c0:34:
         60:13:90:4b:49:87:01:66:85:00:b8:88:81:07:00:67:53:2f:
         32:f6:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:25:39 2025 by rpki-client