Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b52c700e-7e03-30a6-a843-ebd88aa1eb8d.roa
File:                     b52c700e-7e03-30a6-a843-ebd88aa1eb8d.roa (raw, json)
Hash identifier:          zVN/1fZc6WCn9ZHHDi4gCCqM2WNNX+I/in2fm0Ozqjs=
Subject key identifier:   EA:C1:05:79:F4:A5:9B:E6:03:08:E3:43:E4:0D:F7:A6:F8:48:7D:15
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FB5E1893A29F769D0B7700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b52c700e-7e03-30a6-a843-ebd88aa1eb8d.roa
Signing time:             Thu 01 May 2025 17:21:37 +0000
ROA not before:           Thu 01 May 2025 17:21:37 +0000
ROA not after:            Wed 30 Jul 2025 17:21:37 +0000
asID:                     22773
IP address blocks:        174.68.146.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fb:5e:18:93:a2:9f:76:9d:0b:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:21:37 2025 GMT
            Not After : Jul 30 17:21:37 2025 GMT
        Subject: CN=d61ddd50-2900-4e37-be09-d3a29bc7ddf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:d0:38:d0:df:02:63:bd:c8:51:4f:7a:bc:
                    37:4d:73:7a:66:f8:ee:d2:f1:84:7c:ff:ae:21:6f:
                    33:04:38:f5:1c:1a:cc:6d:0d:11:bb:e9:66:20:11:
                    ee:9c:b3:8b:9b:a5:1a:d8:d9:f2:37:ea:cc:a2:56:
                    e9:dd:44:ea:d2:77:fc:b2:fb:be:8b:4e:1d:a8:bb:
                    69:69:8b:08:74:2d:b5:52:f6:52:f3:37:64:37:05:
                    8c:a1:34:5c:eb:04:af:79:1b:90:9b:a8:b0:2c:9f:
                    31:40:5b:ea:cf:5b:f9:2d:90:28:7b:12:ec:de:a8:
                    4b:e6:5e:5e:e7:83:b3:35:c8:a6:63:c7:c9:f4:fc:
                    d3:50:2f:84:8f:4a:b4:eb:13:51:dd:9d:26:65:8e:
                    30:8b:7c:69:0e:1c:e2:5b:b1:22:43:02:d3:71:15:
                    d4:e0:55:26:7f:6c:3a:2a:a1:e3:e9:10:2d:32:14:
                    54:b5:44:15:72:d0:fa:85:dc:c5:7d:11:5e:d2:ce:
                    72:77:26:d8:ee:5b:ea:42:66:47:57:9b:f8:6a:ad:
                    3f:d1:cb:15:f8:cf:67:6e:4d:1b:27:43:a6:3e:08:
                    df:d6:10:ef:d9:a9:24:bd:b8:03:e3:ef:04:8c:27:
                    c1:99:af:f0:3d:bd:9b:1b:77:4b:29:d0:05:96:bd:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:05:79:F4:A5:9B:E6:03:08:E3:43:E4:0D:F7:A6:F8:48:7D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b52c700e-7e03-30a6-a843-ebd88aa1eb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.68.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:8f:5d:b7:4a:dd:e0:8d:b2:ef:b8:5b:5a:c7:09:43:84:
         37:2a:fb:c5:53:c3:81:ee:60:5e:0d:56:18:47:34:df:b2:eb:
         67:f5:ab:11:16:8e:7b:5f:d6:a4:52:c9:69:ca:48:4a:5c:6f:
         a9:0f:41:0f:c1:7a:1f:6a:02:c8:22:77:57:a0:67:a9:74:1e:
         47:67:3f:06:7f:72:80:27:4f:fc:d9:da:2b:82:03:0a:79:28:
         36:b6:10:b5:d3:ed:8c:4a:14:ac:1c:27:1f:46:51:95:c0:58:
         e9:6b:52:58:7d:f6:78:f1:83:e9:53:c5:34:f4:95:cd:db:5f:
         36:d4:60:42:85:77:74:f9:08:41:60:65:50:55:84:56:f4:92:
         50:2d:53:9d:bd:5b:32:ad:fe:a8:29:5a:68:ab:ad:fb:b4:84:
         90:f3:74:53:6b:9d:d7:58:90:02:d3:ea:70:3a:49:ad:e3:4a:
         4b:29:63:14:78:5c:b6:2c:a5:46:71:77:54:30:9c:df:29:94:
         78:37:ce:92:1f:50:bf:52:03:92:31:04:b8:61:99:8e:6c:af:
         d7:90:65:cf:27:e4:3e:10:31:df:f8:c0:5c:ff:8d:d7:62:d0:
         de:ce:ad:ea:fd:bc:00:98:2e:50:1d:b6:eb:16:6d:14:29:42:
         b5:ca:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:06:24 2025 by rpki-client