Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbf68f50-e33f-3f84-b4cb-9f2f3cf50a6a.roa
File:                     bbf68f50-e33f-3f84-b4cb-9f2f3cf50a6a.roa (raw, json)
Hash identifier:          CkaRt9ve+GpzQu49+XtwEJeBWDfI3qbZhS1qljlqqPE=
Subject key identifier:   C7:A0:F7:96:8E:DC:08:50:73:1B:9F:BD:79:14:DB:61:24:F3:15:65
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE7C3BB1BCA29EBC81F400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbf68f50-e33f-3f84-b4cb-9f2f3cf50a6a.roa
Signing time:             Thu 01 May 2025 16:23:25 +0000
ROA not before:           Thu 01 May 2025 16:23:25 +0000
ROA not after:            Wed 30 Jul 2025 16:23:25 +0000
asID:                     22773
IP address blocks:        70.162.146.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:7c:3b:b1:bc:a2:9e:bc:81:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:23:25 2025 GMT
            Not After : Jul 30 16:23:25 2025 GMT
        Subject: CN=a2acf769-368a-4559-96b6-643fc3feaefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b9:01:c5:84:22:75:3e:39:f7:08:94:a9:bf:
                    37:59:bb:dd:01:7b:69:d5:4b:03:b4:df:71:91:89:
                    75:59:94:10:82:96:24:a5:d7:99:b6:fb:35:d6:fb:
                    b6:3f:87:50:cc:e9:e4:ca:81:37:2d:19:27:ed:12:
                    f8:81:69:21:13:69:a3:7e:b9:0d:3d:1b:f1:28:c9:
                    19:81:eb:6d:55:4d:d1:2e:77:23:f0:1e:92:71:73:
                    61:8e:4c:3f:a7:b9:8f:6b:da:8c:42:0a:f1:62:dc:
                    3d:6d:c3:ae:22:09:94:d9:11:4e:60:82:db:cd:e0:
                    73:05:ec:e2:a7:7b:ed:8d:86:13:a9:16:1f:58:ab:
                    37:a7:5d:d9:6f:18:f6:24:88:99:75:29:5e:e5:04:
                    9c:13:1d:e1:60:59:23:0d:2f:06:a3:e8:1b:31:56:
                    e8:b5:57:81:f4:77:46:37:94:c8:3b:c1:30:74:30:
                    41:39:49:82:dd:d7:b0:e2:cc:69:23:d4:a4:79:d3:
                    5e:4f:d4:9d:0d:9b:c8:aa:d7:fb:22:a8:85:7a:73:
                    f0:d3:ef:d9:ea:73:7a:a7:90:12:38:1a:07:d4:fb:
                    0f:3f:87:c8:f3:9e:5c:2f:e6:8d:01:fa:3e:34:12:
                    1f:61:76:a4:94:6c:e6:0f:65:89:56:5f:d4:8d:42:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:F7:96:8E:DC:08:50:73:1B:9F:BD:79:14:DB:61:24:F3:15:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbf68f50-e33f-3f84-b4cb-9f2f3cf50a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.162.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:54:c5:2b:32:ea:88:41:da:a9:53:78:e5:36:c6:00:76:8a:
         a3:73:8d:60:95:b6:28:9f:68:f1:1c:95:7b:34:23:58:bb:e8:
         d2:cc:1b:d7:7b:d6:83:d5:ba:f7:22:36:62:cc:fa:82:70:a0:
         66:d5:b6:c0:36:3f:00:20:1a:9c:b1:3f:eb:f8:92:37:1b:b5:
         27:b6:b6:56:26:9d:76:1d:c0:b5:42:87:ed:b1:cc:e0:d9:fb:
         5e:4f:fb:b5:7f:f5:a6:d3:66:53:ef:c3:29:12:d7:3f:fd:2e:
         83:6e:49:06:36:42:be:93:fc:12:fe:6d:8d:64:8a:b3:90:91:
         e2:db:45:59:10:86:69:91:d1:23:1d:3d:2f:17:51:3f:02:e8:
         99:b2:5b:7d:27:d6:d6:2e:5b:f9:17:de:0b:e5:a0:3e:17:40:
         86:d7:ef:ad:c9:c0:90:50:2d:68:4d:9d:c8:5f:45:06:7b:f1:
         7d:2c:78:25:50:eb:29:fe:52:5a:7e:d0:4c:cc:dc:e4:bb:92:
         7f:4c:99:63:81:fe:53:f7:21:60:22:fa:c4:93:d5:e7:7e:88:
         0a:96:74:ff:ec:dd:06:5e:4a:43:a0:58:08:5d:2a:48:c5:4d:
         d4:f1:8e:90:97:d3:40:9b:fd:1e:e5:d2:01:6b:b1:5b:b5:26:
         97:79:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:36:15 2025 by rpki-client