Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32322d3232203d3e20383334.roa
File:                     3130342e3134352e3231322e302f32322d3232203d3e20383334.roa (raw, json)
Hash identifier:          Ap/0jct1ExVgR4AhwogqOswcPcYUBJNr3c/xC8HuoAE=
Subject key identifier:   7A:27:20:A8:6E:EC:96:25:E8:1C:02:C4:6B:A9:3E:FD:75:CF:BB:82
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       62D55F5B02AB07609F1C1A46B76BF03C1D4B8DF5
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32322d3232203d3e20383334.roa
Signing time:             Sun 01 Jun 2025 10:37:28 +0000
ROA not before:           Sun 01 Jun 2025 10:32:28 +0000
ROA not after:            Sun 31 May 2026 10:37:28 +0000
asID:                     834
IP address blocks:        104.145.212.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 02 Jun 2025 16:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d5:5f:5b:02:ab:07:60:9f:1c:1a:46:b7:6b:f0:3c:1d:4b:8d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  1 10:32:28 2025 GMT
            Not After : May 31 10:37:28 2026 GMT
        Subject: CN=7A2720A86EEC9625E81C02C46BA93EFD75CFBB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:9f:f2:9b:7f:73:b4:38:88:78:fb:e6:c5:
                    6a:19:b9:79:7f:ff:77:e5:43:4f:a2:ed:41:cd:04:
                    ba:ed:b3:54:d6:e7:2d:ad:0f:d7:fd:20:bf:f5:04:
                    0b:15:60:9d:76:d0:89:97:cb:e1:e5:94:1a:27:87:
                    bb:3a:ef:25:bb:a6:20:96:89:39:5e:16:89:8d:cc:
                    50:b1:6e:7a:ce:45:73:d6:a1:49:44:c4:70:4c:61:
                    0a:cf:b1:46:86:0f:fe:da:6e:89:ad:ca:d0:5c:d6:
                    c9:c6:3d:9b:31:d1:2d:86:22:f1:40:ee:d5:1d:51:
                    81:b0:7a:5e:9e:26:cf:4f:53:4c:c4:54:93:1e:bf:
                    b3:0b:6d:44:6d:c6:98:f7:5b:8d:d7:af:45:0c:d0:
                    ce:ef:16:db:fd:78:2f:97:96:cb:49:ee:f9:82:54:
                    99:9b:9e:f5:5c:84:c9:28:b9:05:7d:7a:f7:1c:e4:
                    a5:1d:09:8c:88:6d:01:63:d6:fd:be:4e:de:df:ce:
                    41:70:40:15:92:6b:1f:46:7f:00:3e:ce:9b:db:3c:
                    12:c1:08:ce:71:88:3c:e9:73:46:f6:3e:2c:9a:63:
                    5d:77:cd:0a:84:e7:c0:a9:98:a3:d4:26:ac:00:16:
                    e9:45:d0:2e:e3:08:58:ae:ff:ec:9a:7a:7f:0f:c2:
                    69:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:20:A8:6E:EC:96:25:E8:1C:02:C4:6B:A9:3E:FD:75:CF:BB:82
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32322d3232203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:dd:c8:b3:01:99:6a:c4:6d:a6:74:64:01:e5:a3:67:8a:fb:
         87:76:bc:73:fe:99:b5:6c:8f:00:17:35:cb:0a:ac:f5:0d:13:
         54:6b:de:19:dd:a4:04:37:4c:f5:b2:dc:b7:4e:cf:e9:fd:fd:
         fb:a5:3e:6f:e2:da:ce:ef:3f:f5:2c:2d:c5:29:c1:02:ba:c8:
         e8:47:29:86:d1:90:95:11:32:10:6c:38:c7:42:6b:45:e9:58:
         7f:ab:8b:85:f2:2c:b1:b5:b8:5e:55:46:b7:1a:9b:c4:7d:59:
         68:83:6f:7c:e0:eb:40:1e:c4:52:f3:ca:c0:e9:bb:1b:74:0b:
         01:de:4b:26:3f:99:b8:b5:7f:49:c1:09:c1:44:00:dc:c1:83:
         27:c5:bb:5e:c4:ad:a4:d1:0f:fb:01:9b:ee:46:c4:05:d5:af:
         a8:6e:73:31:47:af:0c:02:21:a8:55:f8:fd:8d:b0:bb:62:8e:
         7e:09:34:9b:39:a2:21:e5:ab:74:3e:31:4a:8a:86:8b:b6:08:
         d9:36:76:9b:bc:d4:9e:a5:d1:1a:6f:30:8d:59:6f:c0:7e:92:
         5c:78:cb:4d:e8:1d:68:2f:2b:ca:98:51:50:44:98:c5:b3:0b:
         77:23:f0:db:f9:f7:95:2e:39:22:4a:ca:77:67:b3:02:ac:78:
         c0:c4:c0:8c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUYtVfWwKrB2CfHBpGt2vwPB1LjfUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdhOGVkZDlkNDk1Y2NlNDYyN2I1Zjk0NDUyZGZiYWNl
NjU0OWI5ZjY0ZDRiY2ZjYmQwHhcNMjUwNjAxMTAzMjI4WhcNMjYwNTMxMTAzNzI4
WjAzMTEwLwYDVQQDEyg3QTI3MjBBODZFRUM5NjI1RTgxQzAyQzQ2QkE5M0VGRDc1
Q0ZCQjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgef8pt/c7Q4
iHj75sVqGbl5f/935UNPou1BzQS67bNU1uctrQ/X/SC/9QQLFWCddtCJl8vh5ZQa
J4e7Ou8lu6Yglok5XhaJjcxQsW56zkVz1qFJRMRwTGEKz7FGhg/+2m6JrcrQXNbJ
xj2bMdEthiLxQO7VHVGBsHpenibPT1NMxFSTHr+zC21EbcaY91uN169FDNDO7xbb
/Xgvl5bLSe75glSZm571XITJKLkFfXr3HOSlHQmMiG0BY9b9vk7e385BcEAVkmsf
Rn8APs6b2zwSwQjOcYg86XNG9j4smmNdd80KhOfAqZij1CasABbpRdAu4whYrv/s
mnp/D8Jp8QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHonIKhu7JYl6BwCxGupPv11
z7uCMB8GA1UdIwQYMBaAFEAjs/cyIhklQMzcMWcchQZjMd2iMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzMzODMwMzQ2MTkxMjQxY2ViNjkyOWM0ZjY5MTJlZjkxLzAv
NDAyM0IzRjczMjIyMTkyNTQwQ0NEQzMxNjcxQzg1MDY2MzMxRERBMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2VkY2ZlOGQzLTZhZjktNGQ2MC04ZTk2LWY2ZGZiNDU1MzYxYy9lN2E4
ZWRkOWQ0OTVjY2U0NjI3YjVmOTQ0NTJkZmJhY2U2NTQ5YjlmNjRkNGJjZmNiZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8zMzgzMDM0NjE5MTI0MWNlYjY5Mjlj
NGY2OTEyZWY5MS8wLzMxMzAzNDJlMzEzNDM1MmUzMjMxMzIyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJokdQwDQYJKoZIhvcNAQELBQAD
ggEBACDdyLMBmWrEbaZ0ZAHlo2eK+4d2vHP+mbVsjwAXNcsKrPUNE1Rr3hndpAQ3
TPWy3LdOz+n9/fulPm/i2s7vP/UsLcUpwQK6yOhHKYbRkJURMhBsOMdCa0XpWH+r
i4XyLLG1uF5VRrcam8R9WWiDb3zg60AexFLzysDpuxt0CwHeSyY/mbi1f0nBCcFE
ANzBgyfFu17EraTRD/sBm+5GxAXVr6huczFHrwwCIahV+P2NsLtijn4JNJs5oiHl
q3Q+MUqKhou2CNk2dpu81J6l0RpvMI1Zb8B+klx4y03oHWgvK8qYUVBEmMWzC3cj
8Nv595UuOSJKyndnswKseMDEwIw=
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:04 2025 by rpki-client