Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0bf1f60-5daf-38c7-83d8-780905dc482d.roa
File:                     d0bf1f60-5daf-38c7-83d8-780905dc482d.roa (raw, json)
Hash identifier:          vngpkQmZfCbXdqA9dn4rhzBm60eT40xVtF9IPZ2dTCQ=
Subject key identifier:   01:E7:C0:31:28:70:53:F5:75:BA:E6:7F:FC:EE:8B:4A:37:D2:E5:8F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DDF611CA43315B0A334E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0bf1f60-5daf-38c7-83d8-780905dc482d.roa
Signing time:             Thu 01 May 2025 16:22:22 +0000
ROA not before:           Thu 01 May 2025 16:22:22 +0000
ROA not after:            Wed 30 Jul 2025 16:22:22 +0000
asID:                     22773
IP address blocks:        68.226.16.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:f6:11:ca:43:31:5b:0a:33:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:22:22 2025 GMT
            Not After : Jul 30 16:22:22 2025 GMT
        Subject: CN=ec6131c8-aed6-4ae8-9c46-a558607b2503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:ed:1f:d8:36:2a:c8:52:77:c7:26:9b:9a:
                    20:73:df:b5:36:24:36:29:ae:4a:3f:63:da:31:75:
                    c3:2a:d4:dd:04:2f:70:df:c7:54:59:11:c7:cc:61:
                    fd:b2:70:a0:25:84:2c:43:88:5d:99:46:7b:27:19:
                    68:9c:75:a1:8f:bc:fd:6a:ee:2c:88:ef:47:36:26:
                    89:5f:f8:97:7e:a9:f3:dc:40:30:fc:8c:f9:5a:19:
                    bf:3b:81:2b:52:5f:22:2d:50:0b:bf:65:89:2b:e0:
                    5a:5b:2b:ec:ad:28:af:de:fb:8b:6d:23:b4:49:22:
                    f5:5e:a1:68:05:d1:e4:6c:59:3f:7b:89:8c:d9:6f:
                    48:4d:5f:93:17:b9:62:44:12:5c:69:76:4e:cf:d3:
                    79:53:a6:f1:87:91:46:2f:eb:8c:f1:72:01:59:bb:
                    82:4c:34:7d:00:d6:56:ce:6e:9d:fe:26:a6:12:a8:
                    39:3e:36:68:0c:bb:9a:d5:ac:ba:cc:1e:04:87:01:
                    33:9f:68:29:f6:a0:07:f3:d2:d5:a1:03:2a:01:09:
                    e5:17:43:18:e7:1e:1e:a3:35:84:b3:e8:6b:45:1d:
                    ce:d6:11:06:9f:18:39:ed:35:68:e2:82:47:be:3a:
                    77:be:f9:f0:0c:e2:c9:e0:c0:16:ba:58:d0:75:98:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E7:C0:31:28:70:53:F5:75:BA:E6:7F:FC:EE:8B:4A:37:D2:E5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0bf1f60-5daf-38c7-83d8-780905dc482d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.226.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:89:4a:e7:33:2c:8b:02:5b:9e:0d:49:cd:41:68:81:37:c3:
         a7:60:e7:a4:3a:43:5e:ec:f6:a0:3a:a6:a2:a7:6b:fb:38:23:
         ab:93:33:70:1f:86:bc:53:b8:2e:d3:ba:17:16:a9:4d:62:eb:
         1c:95:e6:f6:94:19:3f:61:c1:28:cc:42:42:11:2c:70:49:ee:
         78:d7:4a:ab:ae:db:fb:f2:98:2f:06:d3:bd:18:6c:21:89:74:
         ae:97:fd:c9:01:18:57:a5:24:5f:44:bc:fb:66:76:96:7c:d0:
         20:5d:c6:e0:44:e0:7a:87:a2:9f:81:4f:f0:3a:3f:b6:f9:78:
         6e:28:c9:b9:88:94:64:fb:51:5b:b2:12:fb:e0:11:58:35:5a:
         40:01:94:11:bc:3c:29:38:a6:be:ff:65:a1:a3:7f:98:01:ef:
         7a:0e:cb:eb:d0:03:e3:58:2b:e9:9a:98:8e:3e:f4:66:b2:aa:
         c7:9f:36:b8:23:3e:e2:5c:0d:ce:40:15:ca:db:39:0e:a3:c9:
         0a:7a:1f:1d:54:50:b7:47:6a:a7:0b:5b:a5:e7:44:c4:7d:e0:
         14:7b:ce:33:2a:fb:83:cf:52:74:73:a5:e8:05:74:03:23:6d:
         a5:80:3b:31:a2:1b:a9:c6:99:5e:71:e6:46:98:a9:ad:07:ea:
         59:a0:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:26:05 2025 by rpki-client