Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/e694997a-058f-305d-b5eb-9d5c6eafd088.roa
File:                     e694997a-058f-305d-b5eb-9d5c6eafd088.roa (raw, json)
Hash identifier:          DcPtw0+Mo6XRuRccneZlfkE788wRqOVtwWVbFo2cXf4=
Subject key identifier:   09:41:CF:EE:57:48:D2:F0:66:00:C0:CC:A3:76:DD:D3:FA:57:75:56
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F43285849C6C2EA47619241C35A5E4600
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/e694997a-058f-305d-b5eb-9d5c6eafd088.roa
Signing time:             Wed 07 May 2025 17:36:36 +0000
ROA not before:           Wed 07 May 2025 17:36:36 +0000
ROA not after:            Tue 05 Aug 2025 17:36:36 +0000
asID:                     396242
IP address blocks:        12.166.46.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 May 2025 19:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:c2:ea:47:61:92:41:c3:5a:5e:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: May  7 17:36:36 2025 GMT
            Not After : Aug  5 17:36:36 2025 GMT
        Subject: CN=e6a6e50e-1a0d-46ff-97d7-badf090fae73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:2a:f9:69:65:04:b0:5e:c3:51:f8:40:ba:
                    e8:a3:c2:b1:d9:5c:42:db:b3:d6:da:3b:62:10:7b:
                    96:53:41:77:4c:23:9c:f2:15:f6:b9:47:be:ce:4c:
                    b1:a5:45:ab:bd:cb:da:ff:49:49:68:a1:e5:2f:dd:
                    d1:75:0d:5f:c1:a8:4a:2f:cf:ef:3a:09:21:54:48:
                    28:47:28:49:c4:4a:2c:e4:db:af:22:60:c9:b2:98:
                    56:8a:55:04:c0:b3:a1:38:1e:f0:ee:6d:f4:72:8e:
                    53:24:c9:f2:36:28:37:96:bb:df:76:f9:10:ad:13:
                    79:d4:1f:3f:5a:cb:a0:04:62:7f:1b:aa:2f:39:76:
                    47:7d:33:66:87:82:2f:b9:cb:e1:5f:ac:b4:66:77:
                    41:41:30:34:78:a4:5f:a9:e2:a0:fb:a9:6f:f6:74:
                    cb:57:4e:5e:27:c3:4c:ca:8c:d2:66:8f:c8:b3:fd:
                    8b:26:92:b3:10:22:fd:e6:ab:a2:31:32:c9:7b:06:
                    3f:ed:5a:32:af:ba:1c:9a:94:6f:7b:f8:ef:db:35:
                    3c:d6:bd:68:51:53:3e:57:04:30:52:33:d8:63:4b:
                    c1:b0:8f:fe:f4:d6:ae:68:ff:90:98:dc:05:53:62:
                    6e:49:79:6f:57:ac:8f:4d:8b:f0:d6:8d:e3:39:2b:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:41:CF:EE:57:48:D2:F0:66:00:C0:CC:A3:76:DD:D3:FA:57:75:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/e694997a-058f-305d-b5eb-9d5c6eafd088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.166.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:03:42:74:66:15:29:19:6d:89:79:51:9c:49:62:ed:9d:
         60:10:0d:ab:53:a1:d8:c9:d9:93:de:e4:ad:ce:1d:4d:f6:0b:
         2b:37:1f:37:59:4d:44:c3:6f:da:f7:5c:c9:8d:78:93:b5:9b:
         e4:1f:4d:09:ee:a4:e4:ad:01:b8:f4:ff:6b:b0:35:41:d7:00:
         52:b1:91:55:72:af:e5:d4:78:69:b6:3c:b2:86:8b:6c:55:f3:
         d2:bb:e7:5b:70:93:c8:39:12:27:7d:c5:7f:13:b2:91:16:fe:
         0d:47:0d:ee:df:32:16:76:93:a2:b9:cc:d8:7d:9e:0f:3a:2f:
         37:f6:e9:91:b1:85:6d:02:f6:f5:84:60:29:4b:46:a4:42:42:
         2c:4f:1d:65:c5:3b:da:1c:fe:5e:b0:ab:49:59:b7:67:f8:e2:
         2c:82:5f:ea:70:58:4f:e6:7b:f7:34:86:64:f2:c7:f8:30:f0:
         a7:2c:2d:42:61:76:4e:58:19:c0:e4:b2:c0:ce:f2:78:ee:d2:
         20:31:60:f8:10:fa:fc:3a:a2:0b:77:9f:9e:d7:16:30:ce:a6:
         7b:ac:24:2a:9f:f0:11:78:d5:1c:e3:c8:98:04:9e:fd:01:30:
         a1:93:69:7f:31:f0:6f:f4:e4:e6:e6:e8:ce:96:2e:f5:79:d9:
         ef:58:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:59:07 2025 by rpki-client