Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/daee49d9-0bb8-387f-8ced-d900f896e36a.roa
File:                     daee49d9-0bb8-387f-8ced-d900f896e36a.roa (raw, json)
Hash identifier:          6KUOYhQNHU4d6EYETaVy/qWMxRv0vGOhCtBy8wWFhM4=
Subject key identifier:   30:05:68:6C:08:4A:3E:56:D0:9D:E6:54:85:2A:94:1E:34:E4:5D:32
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285841D3DD6F5AE8D520A3E490C880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/daee49d9-0bb8-387f-8ced-d900f896e36a.roa
Signing time:             Mon 08 May 2023 12:00:00 +0000
ROA not before:           Mon 08 May 2023 12:00:00 +0000
ROA not after:            Sun 10 Aug 2025 04:00:00 +0000
asID:                     396982
IP address blocks:        34.143.79.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 22 Mar 2024 00:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d3:dd:6f:5a:e8:d5:20:a3:e4:90:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  8 12:00:00 2023 GMT
            Not After : Aug 10 04:00:00 2025 GMT
        Subject: CN=2f0d0b05-7d8d-49b4-bdb8-74df22c015cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:1d:50:6d:cb:45:4d:d3:a9:28:6d:4c:8a:
                    e2:8d:ca:cc:d8:81:42:fc:01:c3:45:42:cf:c4:cc:
                    8b:18:5d:8d:35:4d:4c:0b:1a:de:ff:36:fa:68:20:
                    40:45:bb:92:89:70:39:a4:bc:17:18:4d:92:da:08:
                    09:d1:40:26:ab:e0:94:e3:88:86:e7:f1:3a:62:89:
                    64:93:dd:8b:93:f3:2f:af:30:c5:de:45:e6:39:40:
                    32:19:0e:54:b3:e2:19:6f:d2:82:73:ba:4b:e4:b0:
                    ab:dc:e3:e4:91:d2:45:dd:9a:77:5a:12:b0:83:ef:
                    b3:fb:8d:8b:f1:e8:99:83:91:70:c2:ff:1d:41:a6:
                    38:66:d2:5d:59:44:fb:60:9a:96:09:7b:57:85:ef:
                    78:5a:d2:cd:8a:73:45:8a:fe:a4:91:dd:54:b7:99:
                    8c:d1:98:78:7b:17:47:52:9a:ee:9a:4a:a1:fa:c6:
                    dd:90:46:54:a0:a0:46:41:f8:5a:15:bb:23:eb:8e:
                    80:93:56:f9:ba:2b:dd:89:2c:a1:40:e2:0a:8c:c3:
                    19:a0:d9:69:08:32:62:93:f3:70:81:cb:69:cc:e2:
                    09:40:e4:c1:1e:87:6d:7c:f8:e5:67:e1:32:4f:5f:
                    45:fb:3c:1f:60:c3:98:c3:e5:d9:60:67:d2:03:ed:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:68:6C:08:4A:3E:56:D0:9D:E6:54:85:2A:94:1E:34:E4:5D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/daee49d9-0bb8-387f-8ced-d900f896e36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.143.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:7e:f8:ea:3c:5a:8c:20:e5:06:9d:d4:1c:0b:bb:fd:23:
         bd:45:0f:74:e0:8b:16:ab:66:7e:54:47:64:cb:18:1e:d7:db:
         d8:e7:04:ec:07:dc:0c:e4:5d:13:a8:fb:51:24:5c:13:2f:23:
         ba:8d:50:32:8d:b8:03:28:4f:3b:76:2b:b5:f3:ae:1b:5a:9e:
         ee:64:fc:1b:31:b6:f5:50:9d:29:e9:38:8b:a7:e9:86:b2:9d:
         4d:fd:ae:05:12:04:84:5d:03:76:3b:85:b6:7c:ad:eb:ef:9a:
         62:a8:2a:ad:84:8f:10:b2:35:9b:b7:29:8a:9a:86:66:fe:f7:
         a1:c1:e9:f4:b0:86:4a:ca:b9:a1:61:92:5c:f9:28:2e:78:9e:
         b0:25:3e:5d:b3:64:3b:02:64:aa:ee:d1:50:64:71:a1:92:2c:
         28:b3:69:25:19:99:5f:d1:fc:b4:f8:ee:01:c7:2c:98:d8:da:
         bb:1d:6b:92:6d:e8:e5:fe:43:3a:56:3d:3c:35:f5:5a:20:9d:
         c9:bf:23:0c:4e:de:90:79:59:56:be:91:8a:1b:a6:fd:c1:dd:
         20:b4:17:46:50:34:63:5d:cf:b7:19:30:19:c6:1f:e2:9f:a2:
         e7:fc:2a:32:da:42:da:8a:ae:ea:6b:b0:b0:2a:3c:62:8d:e0:
         d2:7e:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:58:55 2025 by rpki-client