Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7560b34e-5316-3da0-905c-8f1446969a68.roa
File:                     7560b34e-5316-3da0-905c-8f1446969a68.roa (raw, json)
Hash identifier:          /WujU4dcS3cArPzlwhpXL9bAsXKEno6qUC02HyWJaOY=
Subject key identifier:   B5:07:C2:4B:A9:35:F8:FD:64:0F:66:64:D4:D5:EA:8E:88:67:E8:36
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584986F0405B132CD7C14478B680
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7560b34e-5316-3da0-905c-8f1446969a68.roa
Signing time:             Mon 14 Apr 2025 20:56:13 +0000
ROA not before:           Mon 14 Apr 2025 20:56:13 +0000
ROA not after:            Sun 13 Jul 2025 20:56:13 +0000
asID:                     36351
IP address blocks:        66.22.31.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 14 Apr 2025 23:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:f0:40:5b:13:2c:d7:c1:44:78:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Apr 14 20:56:13 2025 GMT
            Not After : Jul 13 20:56:13 2025 GMT
        Subject: CN=66429f19-fd99-4a8b-8ac0-973deaf8a09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:19:4b:d6:fd:59:f6:8f:00:6c:fa:81:65:
                    b3:23:3b:98:2c:05:e5:15:55:f6:bd:48:ac:64:8b:
                    bb:ca:68:c5:9d:d6:bc:b4:a6:8b:40:90:bc:dd:00:
                    8d:c6:ca:da:84:6b:b3:9c:fd:2a:b7:43:82:bb:82:
                    78:ff:e4:6e:3c:af:19:39:f6:be:89:6c:28:91:a9:
                    3c:31:02:a5:c2:7e:9a:ad:46:45:0a:a4:56:75:e4:
                    9c:79:7d:f3:fc:9d:77:90:eb:cc:bd:85:1a:8f:0a:
                    02:fb:3a:66:ea:f7:d7:39:b8:dc:fa:f1:4d:e5:cd:
                    e1:1b:22:48:3e:71:ff:09:52:31:b6:d4:d7:4d:8f:
                    35:0b:6e:20:30:0f:4b:8d:e7:d0:bc:e8:03:49:60:
                    f6:81:e6:95:35:27:3e:9b:47:38:da:cb:83:3d:c5:
                    98:db:9c:9c:f8:d4:0b:e5:67:9d:e7:81:3a:e3:d4:
                    73:4a:b2:b9:9b:1e:8e:e1:aa:e4:87:a4:02:18:35:
                    9b:29:b0:a2:bb:cd:44:a1:44:23:47:30:74:ef:ce:
                    20:e6:ad:05:40:f8:61:a4:99:38:b6:1f:d4:15:7e:
                    8c:fc:71:a5:fd:c0:53:a0:97:73:99:e0:d3:be:80:
                    39:49:a5:71:2d:6f:bf:20:1d:09:ce:20:34:24:0e:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:C2:4B:A9:35:F8:FD:64:0F:66:64:D4:D5:EA:8E:88:67:E8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7560b34e-5316-3da0-905c-8f1446969a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:45:aa:47:7f:d9:02:9f:ee:d3:92:74:5f:3c:0d:fb:65:9f:
         ae:30:81:70:0f:d9:72:0b:41:ad:d7:aa:fa:19:19:35:5b:77:
         0e:41:b8:0b:49:ea:25:f0:b0:b4:b1:55:42:49:dc:bb:d1:58:
         24:8c:11:b0:99:70:f9:e5:e4:b1:45:7c:7e:15:99:af:5d:fb:
         f4:e3:6c:0f:33:e2:45:86:f2:0d:87:76:30:a9:fa:fb:ec:4a:
         35:75:4a:dc:02:38:64:14:89:f8:a6:12:8d:a0:46:e1:d1:34:
         52:f4:6e:34:63:8b:a2:8f:9e:58:d2:1a:9d:a1:c3:7b:60:db:
         6e:fe:64:10:79:b3:a9:c0:1a:4e:32:18:d3:eb:51:d4:28:d2:
         0f:c3:ef:44:82:df:05:ee:e9:45:a4:c2:d3:87:da:11:fc:c4:
         ff:8d:a6:67:cd:3c:22:63:6c:70:ea:9b:ba:7e:f1:9e:b3:2a:
         bd:60:1f:c7:02:97:2a:f1:1e:61:5e:c4:51:9c:f4:54:19:29:
         20:9e:59:89:50:53:27:d7:84:15:a9:4d:70:8a:b8:d3:1b:0d:
         d0:09:9c:69:32:e2:87:53:f9:52:05:32:85:55:68:97:73:b3:
         47:18:e1:2e:c0:59:12:26:e6:8d:4f:f0:69:b1:7d:89:6c:32:
         a7:4b:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:17:03 2025 by rpki-client