Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88d80cc1-095d-3e8f-a58f-6ebc1cbc071e.roa
File:                     88d80cc1-095d-3e8f-a58f-6ebc1cbc071e.roa (raw, json)
Hash identifier:          AJkCbmNMgf+RuNGyGzjSVYXLtZkLLsNMf2Ril8XNFLI=
Subject key identifier:   EF:E3:27:C1:68:43:A9:34:01:45:7D:48:9B:96:24:6D:16:FC:F7:2F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD85626E06713368653100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88d80cc1-095d-3e8f-a58f-6ebc1cbc071e.roa
Signing time:             Thu 01 May 2025 16:21:28 +0000
ROA not before:           Thu 01 May 2025 16:21:28 +0000
ROA not after:            Wed 30 Jul 2025 16:21:28 +0000
asID:                     22773
IP address blocks:        68.99.132.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:85:62:6e:06:71:33:68:65:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:28 2025 GMT
            Not After : Jul 30 16:21:28 2025 GMT
        Subject: CN=0079a6ab-5ec8-4411-ae35-3406bbc7074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:66:b2:e5:70:c3:03:d8:9e:73:0e:a3:6c:
                    a4:47:00:e4:9b:e6:09:4c:ee:73:bf:ab:a6:7d:b9:
                    f5:fb:83:d7:4b:4c:f5:1c:bb:7c:fc:51:6f:bb:2a:
                    65:92:be:be:30:bb:55:2d:82:9e:4d:79:d7:eb:8b:
                    16:46:b0:bb:24:57:7a:5d:d2:86:55:c5:b7:e3:d5:
                    e6:08:a3:75:5e:7c:b2:6b:d0:e3:d5:72:95:be:76:
                    19:e3:a2:40:8f:aa:71:0b:e9:d5:da:58:02:37:6b:
                    48:35:b4:d6:12:15:40:5b:2c:2d:64:09:12:a5:33:
                    0c:e5:68:36:58:e0:52:8d:09:93:db:f8:34:e0:6d:
                    20:19:b5:ad:af:50:3a:1e:89:40:93:04:ae:a8:d4:
                    cd:fc:b7:ae:9f:5d:4b:04:b1:45:b6:45:0e:94:71:
                    f6:77:c9:82:83:5a:32:71:b8:40:19:b9:ff:71:90:
                    f4:d8:0e:7c:7c:e6:f3:1c:cb:b3:65:ab:6b:c7:59:
                    ec:58:c6:77:25:49:08:e7:29:68:f9:ec:3f:00:ff:
                    bb:7e:86:f1:e9:f6:7f:2b:6d:df:0b:14:f7:6a:a7:
                    cd:22:e4:4b:25:eb:8e:7a:e1:35:fa:e1:ac:87:ec:
                    cd:51:37:c5:09:15:26:68:9f:db:67:18:95:f3:e8:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:27:C1:68:43:A9:34:01:45:7D:48:9B:96:24:6D:16:FC:F7:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88d80cc1-095d-3e8f-a58f-6ebc1cbc071e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.99.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:f1:af:05:35:9e:3d:2b:69:f4:51:67:4a:3f:aa:92:e6:
         81:42:8b:e8:72:32:de:c9:b0:94:f0:3b:17:c7:8a:a9:81:50:
         b0:76:0a:48:7a:79:c2:08:63:bd:35:93:cf:43:0a:c2:50:dd:
         22:b8:9a:aa:d8:79:3c:df:22:21:c9:bf:e5:c4:7c:ba:3f:4a:
         70:39:e5:51:0c:f3:6c:15:33:97:ff:a7:10:b3:bb:d3:29:de:
         0a:e0:e6:c5:8f:62:88:6c:60:2d:ee:ed:a2:b3:d5:9a:dd:db:
         3a:15:43:af:58:3c:73:dc:e6:8b:9e:38:f4:f7:ea:ca:85:69:
         25:57:05:c5:d0:2d:11:00:cc:34:69:5c:6e:91:74:55:5c:4c:
         34:b6:64:cd:78:29:c5:89:86:fc:c5:37:94:47:b5:b9:90:77:
         da:f8:39:76:af:f8:27:38:6a:7f:a5:81:e0:8a:48:12:b8:56:
         15:64:94:ee:78:c8:3d:7c:8c:6b:9b:c5:4e:1f:60:7a:ac:96:
         7b:9a:76:4b:5c:d2:ad:81:ff:ea:89:21:a4:6e:5c:d8:1b:38:
         78:fc:84:8b:5f:0a:4f:99:bd:54:49:d0:c2:62:2e:06:94:a7:
         ca:ca:4e:1b:4d:cb:00:26:11:6e:8c:73:32:a3:78:67:c5:e5:
         b7:c7:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:26:58 2025 by rpki-client