Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c936dd46-3111-3082-9a3a-d5dfdfc5a806.roa
File:                     c936dd46-3111-3082-9a3a-d5dfdfc5a806.roa (raw, json)
Hash identifier:          Ojv7uuo2oJB7/fDymOjF4EonjcFc/tX6kMt4reorvVw=
Subject key identifier:   45:A3:84:14:18:63:6D:EC:D8:63:3F:79:50:35:25:4C:85:62:36:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DF90DFBF00EC990305A500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c936dd46-3111-3082-9a3a-d5dfdfc5a806.roa
Signing time:             Thu 01 May 2025 16:25:36 +0000
ROA not before:           Thu 01 May 2025 16:25:36 +0000
ROA not after:            Wed 30 Jul 2025 16:25:36 +0000
asID:                     22773
IP address blocks:        72.200.65.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:90:df:bf:00:ec:99:03:05:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:25:36 2025 GMT
            Not After : Jul 30 16:25:36 2025 GMT
        Subject: CN=a72cd461-b871-4415-9d51-d086b6197dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d0:f0:dd:43:1d:fc:e7:85:0f:f6:8a:7e:84:
                    c9:95:cd:d7:24:76:51:b2:eb:89:f0:78:cf:55:be:
                    90:e8:09:cc:b1:d5:3c:81:f0:1e:80:87:06:ac:7c:
                    78:87:ad:8c:32:e1:71:b4:39:38:ee:dd:92:55:99:
                    1b:66:55:28:2f:a5:e3:d3:c3:05:34:2c:04:c9:a6:
                    7a:1f:dd:0e:f1:a4:64:df:a7:da:af:b6:ea:20:b6:
                    d0:07:cb:08:d7:58:59:6e:98:11:f6:65:58:12:24:
                    71:f1:60:40:fc:a3:10:bd:bd:40:ef:ab:74:50:d7:
                    bb:48:33:52:63:8d:2f:39:8a:07:19:83:88:af:b6:
                    46:14:35:4b:74:72:66:1e:e6:1e:de:c5:af:f2:a9:
                    84:8a:70:79:8c:bf:dc:7d:e8:97:37:2f:7d:84:da:
                    16:ed:b1:78:90:84:14:32:82:08:0e:07:6c:ca:8a:
                    06:73:a5:2a:0e:41:27:fa:ea:3d:ae:3c:94:bd:35:
                    5f:42:7c:4b:0d:d7:5b:58:31:dd:3f:cf:74:3f:22:
                    c6:5d:75:3f:10:2b:63:50:42:7e:a4:e2:8f:5f:35:
                    e4:74:ec:21:f1:7c:f3:66:bb:46:5f:9c:ce:a2:32:
                    e5:58:2c:96:25:a4:79:5d:2e:a1:3f:ca:34:15:9b:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A3:84:14:18:63:6D:EC:D8:63:3F:79:50:35:25:4C:85:62:36:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c936dd46-3111-3082-9a3a-d5dfdfc5a806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.200.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:d3:e2:d2:3a:59:f6:a5:20:82:59:34:70:a5:4b:fc:1f:
         61:78:51:25:16:4b:99:05:8c:16:01:2f:dc:a6:5c:52:0e:81:
         c4:0e:b4:d0:59:bb:fb:25:3f:e4:74:b9:39:a8:01:a6:40:67:
         65:f4:59:97:9a:fd:d0:52:8b:b6:fe:d9:3e:82:c3:5b:c2:71:
         de:6d:cd:99:2d:a5:a8:9a:2e:e4:50:bd:ef:fd:73:1e:46:92:
         a8:bc:0d:6a:07:b5:55:ad:f0:65:76:9e:f4:fd:72:2d:f9:76:
         75:32:36:6a:c4:f2:f6:3f:2f:1e:87:67:d5:89:b3:97:1f:e8:
         94:7d:63:a3:df:ff:45:76:30:30:4f:43:4b:44:fb:b4:7d:20:
         09:dd:92:d0:4e:8d:31:d9:7b:87:03:50:54:1b:ca:fc:a9:9f:
         f1:ed:b8:24:5f:11:f7:6c:90:30:78:30:b4:e5:82:6d:cb:31:
         bb:2d:8f:20:df:9a:4e:44:ab:8b:f2:16:d0:52:ca:5d:9b:2c:
         1f:f9:1d:10:ba:41:b9:8c:e0:f6:02:e6:e4:37:80:8d:2b:51:
         a7:8c:f4:47:45:2b:27:ac:91:31:6b:94:08:d5:ac:fc:8c:dd:
         bf:5a:04:8c:58:3b:48:3f:60:86:3c:fc:19:2e:91:84:91:d0:
         d4:7c:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:41:45 2025 by rpki-client