Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/90849b4f-9b91-3a30-bf40-28ba963f8d0b.roa
File:                     90849b4f-9b91-3a30-bf40-28ba963f8d0b.roa (raw, json)
Hash identifier:          SHFnnxFRCd4CWi46f2yZqR1LSdPnizx4dD6lub2wmwg=
Subject key identifier:   CA:82:9B:64:34:D5:92:58:E9:FA:91:53:C3:62:4C:8D:82:9A:81:27
Certificate issuer:       /CN=4a669737-4387-4a5c-829a-5cf431c6469e
Certificate serial:       010D0C9F4328584903255D1D3BB9FC7A68720280
Authority key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/90849b4f-9b91-3a30-bf40-28ba963f8d0b.roa
Signing time:             Wed 26 Feb 2025 15:56:32 +0000
ROA not before:           Wed 26 Feb 2025 15:56:32 +0000
ROA not after:            Tue 27 May 2025 14:56:32 +0000
asID:                     393453
IP address blocks:        192.138.12.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 26 Feb 2025 16:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:03:25:5d:1d:3b:b9:fc:7a:68:72:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a669737-4387-4a5c-829a-5cf431c6469e
        Validity
            Not Before: Feb 26 15:56:32 2025 GMT
            Not After : May 27 14:56:32 2025 GMT
        Subject: CN=9ee5cac1-2918-4d78-b087-e11500962b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:de:fb:d0:47:67:3e:ae:b7:e1:86:de:10:
                    06:48:d5:6c:f8:4e:84:e7:19:2f:52:9e:6b:3e:7e:
                    ec:74:fe:33:51:ca:12:dc:f1:f7:f7:df:fc:69:0d:
                    94:3b:7f:32:02:7a:ca:95:8e:cb:75:51:c3:f1:f9:
                    b7:cf:a3:70:97:c6:3e:96:2a:f0:3e:c3:8c:7a:76:
                    0b:3a:40:83:dd:9c:7a:05:8a:b3:e7:30:cb:ef:77:
                    79:ce:f7:c1:ad:7a:98:b1:64:d3:1b:7b:e4:a3:7a:
                    11:cd:cf:3f:79:36:0d:64:bf:7f:97:d6:b5:d2:43:
                    ff:d3:c7:80:b0:ae:22:82:2e:7f:b1:ee:63:89:db:
                    e7:58:33:2d:8c:77:9a:78:c5:09:2b:cc:b8:cc:6d:
                    7b:73:55:fb:fc:26:44:bc:ab:fd:0f:00:c4:64:84:
                    37:b5:6c:79:30:18:ab:b8:d3:5a:69:b1:36:85:c0:
                    dd:5f:1d:fb:8c:5d:b6:26:84:10:95:d2:56:0c:07:
                    9d:82:d6:74:7e:77:83:1b:c0:85:0e:5d:b4:7e:91:
                    61:93:76:77:d5:df:5e:24:91:3c:9f:9e:4a:85:ff:
                    c3:9d:c6:e1:86:39:6b:2f:93:75:e9:2b:f0:d4:b7:
                    9d:2e:01:6d:45:3d:a1:b9:d1:d0:c8:6f:ce:c2:9a:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:9B:64:34:D5:92:58:E9:FA:91:53:C3:62:4C:8D:82:9A:81:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/90849b4f-9b91-3a30-bf40-28ba963f8d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl

            X509v3 Authority Key Identifier:
                keyid:C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:96:fe:11:58:c3:a5:b2:c8:92:99:d1:3f:d0:fa:73:90:d5:
         da:27:9e:49:9b:29:08:d7:fe:0d:5f:ac:45:b1:46:c1:77:ec:
         52:37:e7:75:27:c0:18:55:da:ff:d7:82:dc:ba:95:6d:2e:9e:
         e8:98:56:10:ad:e7:1c:4e:a6:ba:ad:ed:05:d0:0a:e0:b3:14:
         83:df:ab:48:25:84:09:79:11:6c:44:2d:d8:cb:b3:53:ae:57:
         b4:2f:ca:37:99:7d:76:88:5b:dd:04:10:55:74:a3:21:dc:a6:
         50:a6:22:83:3a:ac:cd:0d:49:6f:fc:98:97:ff:b2:23:51:73:
         21:06:0d:04:f1:c6:15:0f:8d:f7:0c:b8:ff:e9:fc:10:38:ea:
         cd:b0:a8:6e:23:02:78:c0:37:1b:48:3a:5c:fe:26:93:fc:df:
         04:56:ed:66:bc:77:38:b2:33:a6:1d:7e:d5:e5:83:04:40:d4:
         53:8d:17:f9:23:ef:83:e7:9b:69:e5:91:13:b0:33:62:e9:66:
         7c:69:48:e7:73:0e:b5:39:dd:69:50:43:a7:4a:a1:5c:94:e6:
         ff:f9:ac:b0:2f:52:5e:b6:d5:34:44:6a:cb:03:48:a9:f6:83:
         fe:2a:b2:5e:20:59:5c:e5:06:bb:a1:08:3e:fd:8f:f4:20:92:
         08:ee:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:17:15 2025 by rpki-client