Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b793fe6-c42f-334a-a306-12ad8ee1fcc3.roa
File:                     6b793fe6-c42f-334a-a306-12ad8ee1fcc3.roa (raw, json)
Hash identifier:          SyAYe+wQRB/KuywEXAAqfQKyEjxbE6GHQS/shJdwgmw=
Subject key identifier:   86:7A:14:35:23:BF:37:FB:DE:C0:D9:F9:9E:5C:25:F9:9C:F9:FB:CA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD94CA2FA3E0869DA694C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b793fe6-c42f-334a-a306-12ad8ee1fcc3.roa
Signing time:             Thu 01 May 2025 16:21:36 +0000
ROA not before:           Thu 01 May 2025 16:21:36 +0000
ROA not after:            Wed 30 Jul 2025 16:21:36 +0000
asID:                     22773
IP address blocks:        68.104.132.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:94:ca:2f:a3:e0:86:9d:a6:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:36 2025 GMT
            Not After : Jul 30 16:21:36 2025 GMT
        Subject: CN=22affd9b-aee5-4142-bcf9-19ed95ece3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:bd:5b:47:b4:f6:00:ea:04:66:16:59:ea:
                    50:71:fc:b6:e5:07:d7:03:ff:83:91:eb:f3:77:d9:
                    73:16:28:79:da:08:d1:55:72:e8:d4:14:fb:b6:ac:
                    25:ab:18:a6:48:b6:01:f1:05:b2:2d:ab:f2:c4:a0:
                    1f:a8:af:76:b9:78:c8:65:74:52:d4:06:dc:b9:ad:
                    6c:b0:f5:d4:00:43:ec:8d:a1:0c:7a:53:0d:ca:b4:
                    c9:79:99:dc:d0:7e:62:83:06:7c:05:9b:d0:80:dc:
                    33:bf:f0:9c:c7:de:a5:a2:8f:02:55:b5:50:32:a6:
                    cb:71:99:78:ab:97:1a:26:a5:bb:62:ed:55:da:06:
                    ab:bc:34:10:93:70:65:13:f3:22:a7:00:08:f3:af:
                    9e:cf:0f:b2:e6:51:e5:66:ea:2b:f7:c3:6b:cc:35:
                    78:0f:6d:a5:8c:b7:43:e4:21:f4:32:b8:d8:3a:d5:
                    0b:94:f1:f0:26:17:9d:a2:f5:fc:1e:b6:82:a8:95:
                    f6:50:ad:65:b8:3c:93:f4:d3:25:10:c8:44:1f:c3:
                    5f:56:1e:88:aa:6c:3d:dd:29:26:29:40:bf:eb:55:
                    b8:1c:39:8b:d1:67:a4:76:ba:c4:8b:e7:56:e0:51:
                    92:0c:0d:10:08:77:82:de:30:8c:ba:b5:17:f0:35:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:14:35:23:BF:37:FB:DE:C0:D9:F9:9E:5C:25:F9:9C:F9:FB:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b793fe6-c42f-334a-a306-12ad8ee1fcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:7a:65:ea:eb:54:f1:eb:7e:f6:64:16:71:17:85:27:d3:
         04:7f:0d:83:f6:e1:38:81:17:38:e9:89:55:f5:5d:97:92:7d:
         7f:41:d3:48:9a:a8:dc:31:1e:7c:12:02:4d:1c:5d:7e:28:fb:
         60:4f:cc:d7:f9:4a:c2:d0:ca:11:a7:fd:f2:f3:5a:70:81:81:
         dd:98:04:7b:3a:28:cc:21:61:b8:27:07:6d:ee:5e:3c:7a:70:
         75:a9:05:d5:e8:0d:8f:e6:28:3d:75:45:39:1a:c9:3d:fe:db:
         b9:06:10:44:6d:c8:11:82:a6:a9:b3:20:7e:c2:72:b4:b6:0d:
         59:19:97:63:cc:d0:d1:dd:96:dc:d0:18:85:15:61:22:36:45:
         36:13:0a:bf:e4:7a:b7:ff:79:c2:d8:47:53:d0:fb:94:97:a6:
         04:c8:d7:45:12:f5:53:6a:46:b3:61:65:8c:e6:d8:6c:2c:26:
         30:94:e8:a2:db:d4:ad:a5:1b:9d:aa:df:d3:55:e7:ce:6c:f1:
         6b:33:d9:15:0d:04:dd:28:3b:6c:ea:8b:02:64:3c:77:47:fe:
         0e:86:79:3e:c6:f3:0e:05:bc:47:c6:8f:aa:dd:78:36:38:11:
         b8:37:47:e0:42:ac:7b:6d:1e:e8:87:56:1d:aa:31:48:3d:e3:
         3e:80:09:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13ZTKL6Pghp2mlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjEzNloXDTI1MDczMDE2MjEzNlowLzEtMCsGA1UEAxMk
MjJhZmZkOWItYWVlNS00MTQyLWJjZjktMTllZDk1ZWNlM2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHu9W0e09gDqBGYWWepQcfy25QfXA/+Dkevz
d9lzFih52gjRVXLo1BT7tqwlqximSLYB8QWyLavyxKAfqK92uXjIZXRS1Abcua1s
sPXUAEPsjaEMelMNyrTJeZnc0H5igwZ8BZvQgNwzv/Ccx96loo8CVbVQMqbLcZl4
q5caJqW7Yu1V2garvDQQk3BlE/MipwAI86+ezw+y5lHlZuor98NrzDV4D22ljLdD
5CH0MrjYOtULlPHwJhedovX8HraCqJX2UK1luDyT9NMlEMhEH8NfVh6Iqmw93Skm
KUC/61W4HDmL0WekdrrEi+dW4FGSDA0QCHeC3jCMurUX8DVfAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZ6FDUjvzf73sDZ+Z5cJfmc+fvKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmI3OTNmZTYtYzQyZi0z
MzRhLWEzMDYtMTJhZDhlZTFmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGiEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/XemXq61Tx6372ZBZxF4Un0wR/DYP24TiBFzjpiVX1XZeSfX9B00ia
qNwxHnwSAk0cXX4o+2BPzNf5SsLQyhGn/fLzWnCBgd2YBHs6KMwhYbgnB23uXjx6
cHWpBdXoDY/mKD11RTkayT3+27kGEERtyBGCpqmzIH7CcrS2DVkZl2PM0NHdltzQ
GIUVYSI2RTYTCr/kerf/ecLYR1PQ+5SXpgTI10US9VNqRrNhZYzm2GwsJjCU6KLb
1K2lG52q39NV585s8Wsz2RUNBN0oO2zqiwJkPHdH/g6GeT7G8w4FvEfGj6rdeDY4
Ebg3R+BCrHttHuiHVh2qMUg94z6ACUk=
-----END CERTIFICATE-----
Generated at Thu May 15 01:35:09 2025 by rpki-client