Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f29bc2c2-e1de-3d7b-8dac-87d29d8d7bec.roa
File:                     f29bc2c2-e1de-3d7b-8dac-87d29d8d7bec.roa (raw, json)
Hash identifier:          01PLV8y+Yvt34k9BUNTIM6giJlyE6SjLb8HrLJd/Y54=
Subject key identifier:   6B:50:7A:70:65:A2:7C:39:32:F7:90:D7:9B:DE:95:7F:99:85:B5:58
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD834CFD9E4E677FE27F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f29bc2c2-e1de-3d7b-8dac-87d29d8d7bec.roa
Signing time:             Thu 01 May 2025 16:21:27 +0000
ROA not before:           Thu 01 May 2025 16:21:27 +0000
ROA not after:            Wed 30 Jul 2025 16:21:27 +0000
asID:                     22773
IP address blocks:        68.99.89.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:83:4c:fd:9e:4e:67:7f:e2:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:27 2025 GMT
            Not After : Jul 30 16:21:27 2025 GMT
        Subject: CN=e9f33f9b-0385-43e1-8126-911c74c55d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:84:05:2d:ce:a6:33:6f:9d:14:bf:20:2f:
                    60:fa:fe:8d:97:2a:62:07:24:0c:4b:4c:69:b9:85:
                    5c:c0:87:eb:12:44:9b:6a:6e:63:49:ff:91:86:3c:
                    90:d0:71:52:3e:ac:c8:15:17:42:e1:ee:f3:b1:97:
                    49:7b:dd:48:fc:6f:16:fa:e3:29:11:32:7f:53:66:
                    ca:2b:af:67:77:1b:c7:6c:e9:86:8e:ab:a2:b6:53:
                    04:6a:48:91:2b:55:2e:43:53:9b:c0:ca:91:42:19:
                    5f:70:ad:a1:87:fa:a6:3b:c1:d1:27:76:1c:98:06:
                    05:ad:ea:01:31:9c:6b:7e:46:48:57:e4:78:6a:d2:
                    16:5d:0e:97:43:8f:d5:39:16:55:40:72:b4:5f:a4:
                    0e:4f:67:5c:0c:8c:31:d4:4a:f2:68:94:ca:1c:53:
                    b1:99:74:14:c6:b9:2b:e7:98:bf:50:c3:13:fb:f3:
                    d1:ae:24:b5:86:72:0b:7c:b6:c4:d5:67:42:e6:c4:
                    b3:1e:13:16:c7:4a:22:0e:cb:68:63:8c:71:9d:dd:
                    e7:ab:cc:1c:49:fb:04:c3:2b:2a:04:2d:15:d8:1b:
                    41:3a:b3:24:27:4b:96:eb:8c:44:91:dd:e7:b7:8c:
                    f6:68:57:9b:61:04:5c:bc:6a:01:76:70:c0:ee:cf:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:7A:70:65:A2:7C:39:32:F7:90:D7:9B:DE:95:7F:99:85:B5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f29bc2c2-e1de-3d7b-8dac-87d29d8d7bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.99.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:16:3f:e5:45:51:a2:66:17:f7:92:a5:40:2b:13:86:27:72:
         3d:88:2c:9b:64:3a:31:d0:5d:af:40:ed:36:44:ac:47:d3:6e:
         83:4f:37:d1:59:33:cb:d6:23:fc:e5:63:c9:ac:42:fb:11:85:
         cd:81:64:c9:45:04:60:60:db:27:4d:35:dc:bc:90:ae:a7:53:
         85:fa:87:53:61:51:d6:b2:a5:7e:23:11:24:6a:d8:e3:11:63:
         3f:fe:6c:70:01:5e:dc:db:c1:e9:76:fd:91:8d:ef:7f:0f:af:
         00:62:6b:74:51:0f:24:95:c5:1c:cc:79:7e:d1:ac:b2:3e:1e:
         80:e5:1f:8f:bd:6e:e9:ce:7b:56:5b:4f:23:e1:68:e7:14:cc:
         c6:58:16:d1:4c:b9:9f:a2:c7:70:91:06:d6:e1:e7:cc:b5:5f:
         df:d7:24:17:89:5b:7d:8f:15:9e:a0:f2:3e:5d:6f:1b:60:e7:
         97:87:56:e0:67:b6:4e:07:4c:28:e2:a9:fa:59:9d:59:c2:76:
         3a:e8:85:0a:71:15:ad:be:70:a4:3c:f6:f2:43:4a:15:b1:5f:
         6a:32:df:08:d6:11:73:30:2a:f8:19:ef:6c:04:42:cb:92:dd:
         60:78:52:c7:ba:db:4a:4b:ff:33:6e:12:f2:d4:78:13:11:6a:
         fc:cc:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:12:10 2025 by rpki-client