Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b424d398-cd9e-3dbd-b6c2-a651452a80de.roa
File:                     b424d398-cd9e-3dbd-b6c2-a651452a80de.roa (raw, json)
Hash identifier:          QyjC/pIJWAJUdsDaIkR/nKifyXYiwE93XFNSw9n1XVI=
Subject key identifier:   2C:28:A2:39:C8:5A:76:45:48:B0:97:A6:7E:E6:BA:00:1C:17:5A:46
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E074465B22F36558BB5FC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b424d398-cd9e-3dbd-b6c2-a651452a80de.roa
Signing time:             Thu 01 May 2025 16:27:23 +0000
ROA not before:           Thu 01 May 2025 16:27:23 +0000
ROA not after:            Wed 30 Jul 2025 16:27:23 +0000
asID:                     22773
IP address blocks:        72.216.124.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:74:46:5b:22:f3:65:58:bb:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:27:23 2025 GMT
            Not After : Jul 30 16:27:23 2025 GMT
        Subject: CN=80e8ddd8-5c77-442b-923e-3e18159b7ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:11:c1:83:29:7d:00:ba:5e:f4:58:d2:0e:
                    27:29:67:7b:43:d0:4e:45:7f:eb:12:46:33:7c:8a:
                    c5:8b:87:6a:7c:05:9b:83:06:61:6f:f2:32:10:29:
                    3b:36:92:52:6a:d2:71:10:31:4a:dd:75:dd:a7:59:
                    93:ae:5a:9a:d2:20:7d:a5:2c:51:dc:f4:3d:ba:0f:
                    c6:46:e9:28:7d:e7:44:58:b9:bf:7a:32:43:62:dd:
                    0e:7f:cd:1f:f0:79:c3:74:a9:e5:31:63:ba:4c:ed:
                    da:30:63:f9:7e:17:01:68:93:f9:fe:7b:cb:d6:95:
                    c0:c2:8c:30:68:ef:05:ad:f3:29:0e:77:0c:1c:ad:
                    4f:3d:ae:6f:fd:8e:44:0b:92:d5:56:e7:6e:1d:d8:
                    d7:d5:a5:91:cc:f5:d2:69:a4:4e:7e:c8:3b:04:f7:
                    19:78:c5:74:6d:78:d7:27:81:9a:3e:d0:a4:d9:2c:
                    4a:70:93:63:a6:33:43:b6:bd:88:f0:19:10:f7:2c:
                    9f:e9:4e:b5:1f:ca:c4:47:cd:eb:58:60:75:a6:06:
                    4b:42:49:f0:32:7a:43:5a:cb:65:43:a0:77:9b:f6:
                    d6:48:98:98:41:c0:11:08:cb:2d:ce:c8:56:3a:93:
                    4f:29:e1:aa:ea:c7:27:c4:87:e1:ca:54:64:80:84:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:28:A2:39:C8:5A:76:45:48:B0:97:A6:7E:E6:BA:00:1C:17:5A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b424d398-cd9e-3dbd-b6c2-a651452a80de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:05:a0:ec:2c:b1:c1:32:df:8b:2c:e8:8f:34:1d:1e:01:
         5f:3c:86:a1:61:24:09:3a:84:14:db:e6:5a:07:be:fe:cc:f3:
         30:bb:55:09:62:1d:00:ff:00:16:f8:45:82:9d:fb:d0:1e:95:
         cf:2d:5b:b8:8c:21:d0:d6:9b:d3:c0:d6:12:d9:10:a9:bc:3d:
         b9:ab:fc:bc:e1:d6:74:47:3c:67:b1:48:d1:a1:c7:38:d8:68:
         36:de:26:4f:27:08:9f:65:75:09:6f:4d:d6:a6:7a:e7:36:9c:
         cf:89:a7:72:6d:76:70:06:c1:19:9b:74:7d:12:b8:00:93:7d:
         68:f7:eb:43:1c:02:c9:fb:14:1b:9b:de:e9:b4:65:e6:40:99:
         6f:00:d0:6b:17:57:dd:d3:2f:ab:f6:25:0b:9e:d9:55:5e:3f:
         2b:16:3a:60:80:85:ee:65:6c:cb:c4:58:85:1c:aa:4f:a5:11:
         32:43:c1:d4:1c:ed:a6:ec:b0:47:58:9d:f1:25:e4:46:0b:81:
         f5:83:be:a5:48:5e:1f:e5:a5:23:f5:9e:be:1c:54:a7:b6:ca:
         d1:ae:1c:a6:2b:54:04:95:54:ae:25:98:0d:28:30:41:7b:a1:
         b5:e2:b0:df:2d:49:99:c7:83:d1:9d:bd:39:94:1a:00:b9:3d:
         0f:2b:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:38:32 2025 by rpki-client