Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7e06290-3e6e-3b86-af01-321abaaf4da9.roa
File:                     b7e06290-3e6e-3b86-af01-321abaaf4da9.roa (raw, json)
Hash identifier:          y6pGFkPf4XKSID0udObsiVSZF/jFquXGy8A4b+2MDHE=
Subject key identifier:   EF:99:CA:39:CC:CB:BA:CC:4E:63:88:CB:59:6E:52:9D:A6:CA:D0:98
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE5212F7B5F146A62CF400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7e06290-3e6e-3b86-af01-321abaaf4da9.roa
Signing time:             Thu 01 May 2025 16:23:05 +0000
ROA not before:           Thu 01 May 2025 16:23:05 +0000
ROA not after:            Wed 30 Jul 2025 16:23:05 +0000
asID:                     22773
IP address blocks:        68.231.138.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:52:12:f7:b5:f1:46:a6:2c:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:23:05 2025 GMT
            Not After : Jul 30 16:23:05 2025 GMT
        Subject: CN=399101b8-e01a-4be2-a9da-c1709de4ba85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:57:bb:ed:ac:2f:41:6c:10:3a:1d:6b:b9:
                    7b:17:ef:5d:81:76:02:dc:b2:b5:21:ef:e8:4f:2d:
                    b5:96:9d:49:6a:42:c1:f6:00:f9:c6:05:24:0c:32:
                    71:a8:03:2c:37:ec:13:5e:c2:1c:ee:1c:33:e5:0c:
                    30:4d:cf:54:d6:d5:c3:4a:17:b9:cd:9c:40:66:4c:
                    19:fd:96:c5:88:34:2d:15:67:44:5d:1a:e3:46:e0:
                    fb:30:a0:82:a5:8c:63:9c:33:91:25:9c:87:bf:12:
                    f4:e7:0c:f9:31:24:89:1b:cc:55:57:9c:90:95:39:
                    82:77:b4:2b:af:41:eb:78:6a:1e:62:a5:a5:76:73:
                    48:8f:b0:42:0e:ea:7b:b0:ae:2f:82:90:ff:f6:12:
                    5e:53:ca:af:01:39:20:49:a4:55:68:87:be:c5:5d:
                    dc:76:ff:cc:f4:ed:94:8f:97:af:c3:23:2c:93:c6:
                    b9:d3:d0:7f:f6:43:e5:9c:55:ac:9f:82:b1:e0:6a:
                    fb:39:cf:9d:b6:06:59:f6:48:83:05:e4:b2:fc:7e:
                    1c:46:f8:94:02:49:0b:a3:86:1d:27:cb:15:f8:09:
                    28:18:34:e1:d1:07:10:0c:2a:d3:1d:78:1d:eb:e0:
                    fb:b1:81:60:3c:9c:a4:85:b8:5a:e6:0c:22:81:5c:
                    41:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:99:CA:39:CC:CB:BA:CC:4E:63:88:CB:59:6E:52:9D:A6:CA:D0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7e06290-3e6e-3b86-af01-321abaaf4da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:8b:95:e7:57:50:e3:e3:c8:38:ad:f1:3b:fe:c3:7a:3f:
         09:f9:af:15:60:2c:36:21:b3:14:94:00:b1:24:fe:1c:1b:33:
         70:3e:6c:ce:f9:03:4b:d1:15:9d:2d:1f:d7:9f:f3:9d:1e:72:
         e9:c4:1d:b4:00:3e:79:82:98:54:e5:c3:3b:47:60:10:f0:aa:
         5e:01:64:97:e7:12:d8:80:4b:b0:aa:0e:73:52:bb:ba:a2:0b:
         36:98:e4:3a:4a:3a:98:27:c1:33:e1:08:a2:3a:f6:ae:f2:07:
         8b:45:c2:a9:d3:10:00:a6:47:be:6c:01:da:0f:5c:38:1d:9f:
         cf:57:56:e9:28:06:c1:ac:55:95:1a:d4:a0:e9:3f:19:b6:78:
         7d:6f:3c:a2:a0:b4:fe:c9:81:b6:29:bf:62:ff:37:47:b9:22:
         21:b7:5f:bb:22:19:f3:ab:c3:26:06:ce:51:7c:df:e5:87:b3:
         1f:15:0e:0d:d2:de:d7:59:36:54:53:33:d9:1b:26:3f:8d:41:
         49:12:5c:9e:29:d4:e0:50:8d:52:3f:53:c7:88:ee:6e:b8:dc:
         1a:bd:26:25:b2:43:ec:b6:3e:a1:38:8b:5a:98:c7:4b:30:13:
         e6:51:cc:22:d9:73:59:1f:9d:25:26:47:1e:63:f4:37:74:aa:
         a9:7c:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:33:58 2025 by rpki-client