Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbf1e9dd-7770-3ffc-8b36-bca97fb0e856.roa
File:                     fbf1e9dd-7770-3ffc-8b36-bca97fb0e856.roa (raw, json)
Hash identifier:          V8APAy0LRuyuqve7Y9nYOMsfM2KzUmC55mbPd9uLCiI=
Subject key identifier:   9B:79:88:30:70:78:E8:CC:34:A0:43:CF:F6:6D:1E:70:58:C8:DC:08
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DCD62336F2A0D13E585C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbf1e9dd-7770-3ffc-8b36-bca97fb0e856.roa
Signing time:             Thu 01 May 2025 16:20:06 +0000
ROA not before:           Thu 01 May 2025 16:20:06 +0000
ROA not after:            Wed 30 Jul 2025 16:20:06 +0000
asID:                     22773
IP address blocks:        24.251.185.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dc:d6:23:36:f2:a0:d1:3e:58:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:20:06 2025 GMT
            Not After : Jul 30 16:20:06 2025 GMT
        Subject: CN=54a9deb1-02be-4270-8795-c2465bda652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:e2:9c:c6:82:fc:69:61:10:32:73:37:45:
                    4c:b5:41:f5:fc:4d:1f:20:cb:53:99:5c:59:8d:77:
                    7e:fc:41:b3:44:24:c4:99:5b:ef:7e:a7:36:c8:9a:
                    fc:67:35:13:82:96:37:05:20:6e:a8:33:89:c3:3c:
                    16:ce:d0:b6:87:2a:3b:13:8b:44:f4:ca:57:25:34:
                    7e:ca:43:a1:b8:d2:b1:ce:7a:9b:e7:a6:86:8a:8e:
                    73:91:54:64:b3:66:41:bb:50:07:cd:c2:eb:37:0b:
                    2f:66:f2:b9:61:e0:52:ff:da:db:02:87:47:36:4c:
                    a6:f4:97:d8:da:dd:84:24:60:6a:05:5d:d3:77:80:
                    6d:84:dd:be:57:a8:86:7a:d7:5c:06:55:8e:85:22:
                    af:4d:5b:71:a3:32:27:00:dc:dc:e8:b4:36:1d:0e:
                    df:c2:2c:26:1e:c0:36:38:ce:28:95:10:eb:dd:7b:
                    d0:8e:62:f1:8d:09:1e:b1:57:fd:c1:0f:4b:75:96:
                    d9:72:95:92:53:76:b7:e2:fe:2b:82:0c:f9:2e:dc:
                    68:2b:78:96:4d:32:b8:aa:f4:5d:3d:51:39:4c:e7:
                    34:c3:eb:e7:ef:8a:12:31:18:fe:df:3c:c3:99:e0:
                    e4:0e:a2:05:87:28:9b:1f:6f:7b:55:16:17:48:8f:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:79:88:30:70:78:E8:CC:34:A0:43:CF:F6:6D:1E:70:58:C8:DC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbf1e9dd-7770-3ffc-8b36-bca97fb0e856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:36:95:16:30:4e:1e:9e:71:73:4c:9d:64:63:ee:f3:ba:
         39:00:de:e6:cd:7d:2f:a5:08:67:9b:0a:b5:4c:8a:75:84:93:
         70:87:5f:58:04:15:5c:36:77:8a:3b:cb:30:cc:f8:79:97:99:
         b2:b2:bf:90:03:45:06:c1:7c:9b:cc:b9:7b:0c:8e:03:e6:e0:
         15:7a:5d:73:f2:d9:7f:b8:d7:b0:bb:45:34:db:c3:22:9b:40:
         97:f8:bd:de:38:44:80:7e:f4:25:aa:f5:52:d2:3f:c0:8f:71:
         5f:f7:7d:73:eb:10:c5:b1:3d:94:65:65:5b:be:81:a5:84:e2:
         b9:cb:ea:e9:ca:5e:c4:82:c6:52:9a:91:c7:f7:21:22:37:e8:
         6d:b3:f8:e2:11:57:ef:10:73:a0:19:c3:6d:72:75:17:30:80:
         70:00:e2:8a:8d:c2:9b:11:e7:93:c0:56:90:b2:b4:c3:52:6d:
         56:45:d3:d0:45:5e:b2:49:5d:d2:50:69:15:57:ca:1e:bb:60:
         ba:74:27:2d:d6:45:4b:31:ff:ec:a6:16:b2:ba:07:3e:c5:04:
         d9:b3:67:34:e5:3c:08:86:00:a4:2b:e8:02:2d:8d:a0:2e:59:
         42:1a:81:1d:2f:a6:13:e0:3b:dd:c8:ab:e6:a0:5b:de:aa:e3:
         e5:87:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:26:42 2025 by rpki-client