Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c87bab7b-419f-3fdc-ab54-d350fab69967.roa
File:                     c87bab7b-419f-3fdc-ab54-d350fab69967.roa (raw, json)
Hash identifier:          tLDmh4lJO3Eu2gmSB2L8iIHNrW90AabMcbI2DBmY7/o=
Subject key identifier:   13:2A:D8:4A:53:31:DD:18:7D:4D:10:BD:A9:26:34:C7:57:7C:45:A9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD252FD09A94DE81EBC480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c87bab7b-419f-3fdc-ab54-d350fab69967.roa
Signing time:             Thu 01 May 2025 16:20:43 +0000
ROA not before:           Thu 01 May 2025 16:20:43 +0000
ROA not after:            Wed 30 Jul 2025 16:20:43 +0000
asID:                     22773
IP address blocks:        68.2.208.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:25:2f:d0:9a:94:de:81:eb:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:20:43 2025 GMT
            Not After : Jul 30 16:20:43 2025 GMT
        Subject: CN=c851333d-a9f6-45cd-913b-fdf20b6bef5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:5b:35:6f:c6:60:eb:c4:28:50:0c:db:13:
                    c9:70:7c:ce:0c:bb:4d:65:b2:95:f3:7c:59:a6:0b:
                    46:da:63:39:bc:e6:ba:9d:fa:5a:a9:d1:7f:54:12:
                    00:b3:53:ae:39:aa:bf:c6:e8:d7:8f:08:d7:a6:88:
                    a5:b4:bf:04:96:7a:aa:ea:77:a7:1b:c7:ff:6e:45:
                    f0:74:09:28:4c:17:f6:f1:e1:70:c5:ba:60:4d:0b:
                    d3:3b:cf:b8:d5:0d:17:13:16:b6:82:4a:a1:3d:6d:
                    41:9b:c1:e1:82:bc:92:96:e9:c1:22:f9:15:01:04:
                    30:e1:b6:64:48:20:89:6d:11:3f:a8:64:bf:5c:3d:
                    33:03:d2:e3:b0:e0:a8:62:67:a4:86:b9:e2:a1:de:
                    f2:35:1c:6a:7a:2c:50:b7:82:e5:ae:c4:64:9b:d5:
                    f7:8f:2b:ed:75:87:62:de:32:c7:4f:8c:af:86:9d:
                    bb:8c:c1:60:a1:c9:a0:dc:36:15:bc:db:6d:4b:8f:
                    2d:a9:fe:bf:eb:92:a6:0e:7d:d3:1c:3f:b4:51:e7:
                    27:c4:75:e4:34:6c:08:41:9e:8f:e9:83:30:be:18:
                    75:e7:40:8e:90:57:68:d0:3f:61:62:4b:7f:49:b0:
                    3a:a8:d1:4f:fc:31:33:8c:f6:d8:09:34:b6:22:9d:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:D8:4A:53:31:DD:18:7D:4D:10:BD:A9:26:34:C7:57:7C:45:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c87bab7b-419f-3fdc-ab54-d350fab69967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:ae:27:e5:42:7d:8a:b6:83:2c:5a:f7:26:8c:d4:2a:ef:
         45:6a:44:75:97:ea:12:fe:90:0a:62:91:49:94:85:a2:77:ea:
         1b:ff:47:4f:ea:1f:68:e9:9d:23:77:5f:47:d2:3d:5e:8d:7e:
         48:b1:c0:cb:40:f6:5a:d7:a8:ab:bc:e3:4d:aa:57:32:df:2a:
         ea:25:fa:7b:28:5b:c7:e5:8c:a0:06:86:8b:5a:3f:de:d6:08:
         5e:9f:d4:12:49:c5:d2:15:eb:6b:ab:c7:eb:d9:d8:7f:6c:56:
         c7:51:00:56:fc:21:c4:b8:c6:e9:80:c3:79:3c:f6:5d:de:fa:
         db:39:70:16:54:98:c2:c4:6c:4e:c4:48:9e:f1:54:c6:04:17:
         19:3f:a6:e9:f3:7e:b9:c8:a5:72:38:1c:1f:8a:d0:fd:ca:04:
         f0:98:f0:ec:65:af:56:cc:f8:45:49:6c:c3:47:b1:81:9a:36:
         7a:b1:dd:bb:fa:63:fb:9c:ca:d7:a1:87:3b:69:e2:5b:e1:3c:
         14:e8:21:e5:cc:5e:c6:cd:b2:ea:4f:7e:7b:84:68:76:37:99:
         40:27:19:3e:8f:99:fa:01:ff:ab:68:e7:bc:a5:b6:a4:52:19:
         60:f1:5d:5a:3a:10:8c:ce:d3:56:29:6f:d5:3b:9c:d6:be:0c:
         c6:fa:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:21:49 2025 by rpki-client