Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87ba6e0c-afaf-3c2f-9e05-7023ab4c364d.roa
File:                     87ba6e0c-afaf-3c2f-9e05-7023ab4c364d.roa (raw, json)
Hash identifier:          MEsOAHIgYhOuvcd9PPTkXrJVLwyJKJVGoiM6Az/NdZA=
Subject key identifier:   53:86:0F:5E:F6:D5:EB:19:B2:24:7A:CF:7E:7B:36:FB:26:F0:61:EE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E064DBD999F6D11DAEE5E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87ba6e0c-afaf-3c2f-9e05-7023ab4c364d.roa
Signing time:             Thu 01 May 2025 16:27:16 +0000
ROA not before:           Thu 01 May 2025 16:27:16 +0000
ROA not after:            Wed 30 Jul 2025 16:27:16 +0000
asID:                     22773
IP address blocks:        72.216.70.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:64:db:d9:99:f6:d1:1d:ae:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:27:16 2025 GMT
            Not After : Jul 30 16:27:16 2025 GMT
        Subject: CN=9521b654-9c8e-49ea-8b49-de7937ac36ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:4e:70:01:93:0d:27:4a:35:ee:0d:f4:de:
                    d6:11:50:d0:d2:d9:31:d2:da:4e:7f:bf:d6:9c:93:
                    75:b7:20:3c:ee:89:f7:5f:95:fe:92:be:4c:d9:eb:
                    1e:ea:56:cb:7f:d0:4a:d7:4f:fd:74:b9:e4:ee:17:
                    d1:70:40:e2:5f:72:7d:10:9e:a5:49:e3:3b:38:8c:
                    fe:87:41:07:64:61:35:b4:a8:c6:c8:99:85:9e:31:
                    98:c4:f7:4f:f2:59:78:b6:d2:52:de:ed:55:84:04:
                    37:d9:e4:c4:70:5f:b5:6b:3f:21:c8:db:8f:2f:14:
                    9f:8c:60:0f:21:b2:ad:81:a1:71:8d:e2:ac:68:9a:
                    0c:16:1e:74:25:0a:01:e2:d4:3e:fa:f9:32:27:31:
                    51:b0:e8:8c:46:99:11:0e:cd:a7:85:db:63:ee:a7:
                    8e:2c:c5:03:7a:4a:f7:d8:74:16:d0:76:7f:95:95:
                    27:e7:aa:07:5e:cc:ab:1f:d0:c5:3e:a7:dd:88:03:
                    78:d3:35:83:a9:ea:a6:7a:1d:3c:6b:c2:9d:23:2b:
                    88:30:57:31:de:3f:28:c7:07:29:14:3e:4e:18:c2:
                    de:19:84:c4:ba:d0:26:70:03:40:f2:ad:d3:06:ab:
                    45:f5:81:e3:c7:5d:a0:f9:01:0e:d3:20:6c:84:18:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:86:0F:5E:F6:D5:EB:19:B2:24:7A:CF:7E:7B:36:FB:26:F0:61:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87ba6e0c-afaf-3c2f-9e05-7023ab4c364d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:20:17:32:a7:3f:83:7a:14:d2:47:08:97:ec:a8:de:45:
         c9:fb:13:bf:48:83:15:06:9b:2d:6e:34:da:fb:d7:61:1b:7d:
         4b:65:d6:30:1e:75:7b:10:56:ea:8e:fb:d8:06:f5:12:58:db:
         37:46:17:24:d5:d5:94:d2:9c:d0:df:36:e4:bc:33:4c:da:df:
         f2:a7:0d:87:d3:10:35:eb:4c:bf:e1:86:d6:aa:d1:c3:db:d2:
         b7:5f:5e:e1:dc:cf:3e:eb:74:d5:c8:1b:84:b3:38:60:a6:fa:
         50:36:3b:3c:cb:bf:3d:ba:db:1c:8f:a7:8e:a2:97:0e:e1:40:
         67:09:48:0f:76:05:46:c5:b5:1b:5a:09:6d:cb:29:d6:98:9f:
         10:b0:28:51:47:54:b2:1e:a3:07:78:76:ef:50:de:92:15:97:
         29:64:06:03:c3:e7:f5:5f:a0:50:16:db:2c:56:99:94:e4:4f:
         38:4f:3d:79:c0:f7:65:13:d6:4b:10:37:4b:40:32:d6:c2:15:
         6a:56:71:65:2f:ff:af:73:00:dc:75:0b:bb:3e:a8:31:59:58:
         1f:1d:90:ee:a8:04:85:d2:5b:01:c1:b1:0b:d2:2d:b4:4d:52:
         e5:ed:4a:20:7f:36:dd:98:d0:96:77:6b:9f:e1:f7:29:62:c0:
         57:3c:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:01:26 2025 by rpki-client