Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a8dae7c-2f8d-3c29-b81d-844678e19c2f.roa
File:                     4a8dae7c-2f8d-3c29-b81d-844678e19c2f.roa (raw, json)
Hash identifier:          Oytrl1STIlmcCGe0KVjjCYJhEQI55USna0NkHzxvDeY=
Subject key identifier:   C3:D0:A3:84:FD:9E:45:86:3F:9E:A8:E5:89:15:0D:1A:C2:37:A9:45
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849C902FB06C010F00C91031480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a8dae7c-2f8d-3c29-b81d-844678e19c2f.roa
Signing time:             Thu 08 May 2025 12:57:19 +0000
ROA not before:           Thu 08 May 2025 12:57:19 +0000
ROA not after:            Wed 06 Aug 2025 12:57:19 +0000
asID:                     215595
IP address blocks:        170.130.106.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 08 May 2025 17:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:02:fb:06:c0:10:f0:0c:91:03:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  8 12:57:19 2025 GMT
            Not After : Aug  6 12:57:19 2025 GMT
        Subject: CN=6eeaee70-4b63-48bf-8d22-15829a66dcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:49:7d:2e:1f:5c:fa:f2:59:2d:54:3c:9f:
                    4f:e1:9a:66:f8:10:98:c1:1a:63:48:0e:f5:11:55:
                    15:02:2a:19:5f:e5:3a:a0:ee:25:7c:8d:a5:40:fb:
                    84:1a:d2:ae:d5:45:f1:a2:eb:97:d5:57:1c:a5:1c:
                    64:4d:e8:a3:0e:3c:b3:ca:56:2c:87:9a:c9:29:6f:
                    c7:38:20:d0:8d:69:77:52:7a:e7:7f:19:d5:b0:20:
                    ad:6d:1f:b3:d0:10:0a:81:b5:1e:4c:c7:c6:ea:ae:
                    84:f1:74:1c:e3:d4:3f:48:9d:3d:7a:88:0d:2e:59:
                    e2:95:83:6b:47:f1:c2:0f:15:04:16:26:21:94:d1:
                    6c:15:e0:89:60:16:1e:99:57:f9:64:ef:a3:a3:83:
                    c3:f4:ee:9b:c3:2c:79:e5:1c:2f:0a:62:c6:51:65:
                    a7:df:d3:0e:4d:98:c2:7d:44:f7:4b:63:e2:d6:5f:
                    f1:f3:63:9d:a5:53:56:0b:0f:88:ac:dc:75:ec:b0:
                    63:91:8e:64:a4:c9:bf:c3:35:be:20:9e:90:e3:bf:
                    a6:63:ed:4e:67:f1:24:6f:2e:ac:8d:df:93:ae:f2:
                    a9:f8:6b:d2:38:c0:02:e3:c2:76:d4:a4:eb:39:02:
                    e7:1e:89:a7:35:60:60:fc:de:aa:9e:37:7b:48:d9:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D0:A3:84:FD:9E:45:86:3F:9E:A8:E5:89:15:0D:1A:C2:37:A9:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a8dae7c-2f8d-3c29-b81d-844678e19c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:3f:d2:47:1e:46:07:00:b4:60:31:33:6b:3a:bc:54:07:
         f3:5f:ab:9b:3a:fe:c1:67:6e:db:0d:a2:46:c3:4d:5e:c9:7a:
         7d:95:9e:6a:48:ae:12:56:f4:d4:28:8d:6b:29:8f:4d:bb:60:
         cf:57:dd:e6:2b:62:d3:52:06:61:c3:ee:12:ed:34:da:74:b0:
         26:d6:e1:0d:76:6e:cc:7a:b4:f6:2c:50:9e:7c:f1:34:ca:12:
         74:17:5b:ab:22:37:e5:88:d3:33:16:8f:b4:e9:db:5f:61:2f:
         9d:41:30:75:44:8a:d1:ba:28:09:62:64:cd:7f:f8:19:32:6d:
         ae:c4:40:24:5e:ab:3e:0e:6a:d5:24:6b:3e:47:cd:8a:ae:ae:
         a9:a3:0a:75:93:82:da:8b:56:bc:57:5a:87:03:3b:2b:16:98:
         6c:10:7a:41:e1:8f:49:59:f2:40:09:88:81:a5:a0:df:81:23:
         bf:fe:32:83:d8:48:a5:d7:c0:79:7a:0b:d4:13:c1:da:e6:cf:
         39:25:e1:54:10:b6:03:5d:45:a2:21:d2:b6:d6:2f:57:48:bc:
         ee:da:b3:71:9f:d5:0e:f4:45:4c:41:62:84:7f:c4:28:91:14:
         36:f2:00:34:5e:1c:35:e5:07:84:b7:22:f2:56:00:45:3c:fa:
         8c:f8:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:34:50 2025 by rpki-client