Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20383334.roa
File:                     3130342e3134352e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          DmNGLjCRpXAgrytVr38UPvO7Kj0RKOL89QPgawC6OqY=
Subject key identifier:   1A:BD:DC:AF:75:D8:BF:18:C5:92:E6:BC:F4:D0:55:15:0F:B2:F1:48
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       7C24F173249F57CDA5617A9822F98E1025CB95D5
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20383334.roa
Signing time:             Wed 18 Jun 2025 03:12:36 +0000
ROA not before:           Wed 18 Jun 2025 03:07:36 +0000
ROA not after:            Wed 17 Jun 2026 03:12:36 +0000
asID:                     834
IP address blocks:        104.145.214.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 20 Jun 2025 05:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:24:f1:73:24:9f:57:cd:a5:61:7a:98:22:f9:8e:10:25:cb:95:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 18 03:07:36 2025 GMT
            Not After : Jun 17 03:12:36 2026 GMT
        Subject: CN=1ABDDCAF75D8BF18C592E6BCF4D055150FB2F148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:bd:cb:03:ed:74:55:c0:dc:63:ea:e9:20:
                    c6:a1:ea:15:4d:7d:2a:15:b3:b3:4c:43:58:c6:e4:
                    95:da:6a:4d:a3:99:c4:d9:a5:65:4b:12:39:75:d6:
                    82:ff:14:3d:63:82:40:95:2a:06:c8:21:e9:77:13:
                    c4:de:05:35:d9:df:07:86:c8:04:65:9b:17:7e:54:
                    69:3b:65:ab:9a:5c:93:f2:3a:25:e4:7e:6b:e1:c3:
                    66:ba:1a:6e:b5:4a:52:52:bc:f2:e1:0a:fe:a1:bd:
                    c1:69:b8:21:05:7b:52:33:ce:ca:2c:77:e3:27:e7:
                    f1:fb:61:75:15:5e:8f:35:59:36:c7:8d:16:b6:04:
                    ba:ed:2f:a1:50:ae:ed:49:18:d4:72:2a:d3:ef:bb:
                    25:b6:17:2a:d6:31:e2:e4:60:66:e6:3c:29:91:a1:
                    65:aa:2a:93:15:b5:28:c7:e3:b3:c1:d5:06:8c:a9:
                    da:8b:b6:70:1a:43:7a:6b:10:da:98:05:e4:e3:0f:
                    49:26:f1:34:10:b1:33:7d:50:1b:bc:29:05:41:db:
                    ec:92:59:8f:70:5a:00:99:31:79:11:02:e0:f9:0f:
                    52:c0:e3:a2:c9:7d:c3:2f:d3:65:8c:d3:7c:5b:ec:
                    54:de:75:68:19:52:ac:a2:8f:53:a1:0c:cd:4a:2b:
                    4c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:DC:AF:75:D8:BF:18:C5:92:E6:BC:F4:D0:55:15:0F:B2:F1:48
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:4e:7c:fc:47:79:52:58:77:85:84:d5:b6:d1:a3:8b:92:01:
         a2:29:8b:6e:e5:1b:19:c0:f1:4a:73:b1:b6:0e:0e:c7:10:c9:
         02:97:9f:f2:8c:c2:55:83:1f:e1:ab:66:a8:2a:74:09:d5:b5:
         b5:19:55:46:5b:e3:ae:c1:94:16:42:f8:30:ab:24:66:99:47:
         9e:ed:89:34:c8:b8:e4:62:3b:9c:fa:93:7a:8c:3a:bf:3d:34:
         7e:3a:64:a3:bd:fe:ca:30:cb:b2:73:e3:2d:41:cd:b2:a1:3a:
         1a:14:0a:f1:66:93:ba:62:18:4c:c8:c6:e2:4f:d2:c1:89:11:
         9d:97:81:0b:98:41:dd:c4:a4:15:f8:03:8f:31:e4:02:a4:e8:
         51:9b:6a:f0:f4:54:2b:bf:81:65:ff:9c:df:7c:3f:1e:c4:e0:
         85:37:a8:cd:48:bf:ec:7e:c9:e4:21:cb:60:d0:29:a6:3a:70:
         e4:d5:df:bb:57:ee:c9:52:83:2f:ef:3f:12:3b:39:38:48:0a:
         a2:43:90:06:c1:4f:f4:dc:02:0d:8f:a9:9d:1b:3e:13:50:e9:
         7e:09:b8:7a:2f:b6:8d:e4:60:b4:64:72:74:f8:97:6a:11:75:
         47:ee:26:5d:5f:81:a5:5f:9b:f2:98:74:f7:5f:c5:f8:dd:90:
         7b:a6:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:30 2025 by rpki-client