Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c542bbf9-3720-3145-8393-64848dce2d5f.roa
File:                     c542bbf9-3720-3145-8393-64848dce2d5f.roa (raw, json)
Hash identifier:          7x5b3mDOtbfJJXoVY8S/cXmAmM8xqVueY3XllLi9mOg=
Subject key identifier:   CF:3E:56:4E:9E:F3:C6:6F:57:EC:76:1F:86:14:A7:62:61:89:07:14
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E0F412B1D582B45C75A6A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c542bbf9-3720-3145-8393-64848dce2d5f.roa
Signing time:             Thu 01 May 2025 16:28:23 +0000
ROA not before:           Thu 01 May 2025 16:28:23 +0000
ROA not after:            Wed 30 Jul 2025 16:28:23 +0000
asID:                     22773
IP address blocks:        98.161.227.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:f4:12:b1:d5:82:b4:5c:75:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:28:23 2025 GMT
            Not After : Jul 30 16:28:23 2025 GMT
        Subject: CN=c2e1ff86-a92d-4518-aa17-711d2ff48713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:88:61:a6:f1:98:05:51:37:57:5e:7d:9e:
                    35:77:37:d4:0a:d3:e1:4f:92:00:5d:b4:51:be:e0:
                    bb:aa:d0:d1:5c:84:12:9f:a9:dd:e9:cd:d1:df:3c:
                    9c:66:48:f5:d3:2d:f7:3e:7d:cd:26:50:4f:82:86:
                    ae:be:d2:69:26:a4:91:0e:9c:2c:b8:06:07:86:58:
                    6c:f8:df:0c:5c:97:7e:fe:49:ef:61:34:55:6c:9e:
                    b9:b9:6a:a3:ba:37:a8:25:89:5b:41:ef:93:3e:bc:
                    be:db:fa:2e:8e:33:f5:d7:5c:a1:2d:92:2c:44:88:
                    66:47:49:63:23:fe:da:a3:89:4d:d9:8f:e8:b4:4f:
                    b4:23:b4:ae:ef:f5:8e:bc:fc:a4:88:6b:88:91:86:
                    4a:13:21:44:2d:bc:3b:9c:39:95:e5:36:7f:85:d0:
                    f0:8b:24:4d:42:32:f3:fd:53:02:c2:94:67:34:19:
                    15:cc:b7:82:2d:d6:f1:f5:be:90:6a:5b:c6:dd:fa:
                    34:2e:58:6e:40:73:e9:1b:4b:da:e9:bc:4a:54:f7:
                    48:63:d7:51:df:2c:74:06:6a:13:c1:cb:d2:6f:c7:
                    ff:de:dd:9f:1d:56:35:28:81:d9:ac:a0:d4:40:50:
                    75:52:f0:32:c5:d3:6a:a1:cf:9c:67:dd:24:7f:40:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3E:56:4E:9E:F3:C6:6F:57:EC:76:1F:86:14:A7:62:61:89:07:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c542bbf9-3720-3145-8393-64848dce2d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:4e:0e:02:c9:fc:e6:55:bb:ad:cc:04:d9:fa:05:fc:f5:
         0e:60:eb:f1:44:87:3f:10:9d:e9:e2:fa:57:71:9d:e1:93:33:
         80:01:b3:d2:3d:de:69:22:ca:e1:d2:82:8b:04:56:dd:5c:ce:
         d3:99:b7:1a:b0:4d:a4:a4:2e:63:6f:0b:9e:ba:45:db:b6:8a:
         3e:58:8e:f8:20:1b:57:2c:b5:b9:f4:e2:56:4d:69:be:90:ef:
         1b:0e:da:99:6e:92:d8:b7:85:17:16:f7:c4:55:f4:3f:c3:b8:
         7f:ef:b5:d6:a5:72:32:de:7f:70:a8:e0:a0:35:78:ed:d2:8b:
         f1:09:b0:13:a3:7f:1b:97:78:42:12:2d:97:e0:57:f3:89:a4:
         06:aa:6e:bb:69:14:15:5d:c2:08:8b:5d:11:d6:40:0a:1a:b5:
         4c:18:c6:7b:4b:56:a6:75:4e:4a:96:ab:72:68:62:72:00:0b:
         66:7f:f1:1c:4f:68:8a:c6:dc:71:26:a0:52:4e:7c:78:81:42:
         d5:56:5e:34:bf:01:ee:73:63:8a:30:c1:8e:82:8f:82:29:6c:
         c3:31:ba:26:c7:22:58:51:86:ad:42:cf:77:18:a5:83:bb:34:
         dd:d8:5b:75:7a:e3:69:47:58:48:e8:c0:69:6b:29:d3:00:e3:
         11:27:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:51:42 2025 by rpki-client