Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/a06671aa-8a42-3af5-a494-1a0571d48769.roa
File:                     a06671aa-8a42-3af5-a494-1a0571d48769.roa (raw, json)
Hash identifier:          /HRPpXuUHhIlVDz/fN5JshQYZNI/jZ4yH/ERRKdhy+Q=
Subject key identifier:   C1:5E:85:10:0D:71:75:A4:D2:44:7D:AA:E0:A5:C7:57:64:31:9F:06
Certificate issuer:       /CN=de519df3-4594-450e-ac51-a7e085408381
Certificate serial:       010D0C9F4328584A7C88A72CB74744D0023B0480
Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/a06671aa-8a42-3af5-a494-1a0571d48769.roa
Signing time:             Fri 11 Jul 2025 20:16:20 +0000
ROA not before:           Fri 11 Jul 2025 20:16:20 +0000
ROA not after:            Thu 09 Oct 2025 20:16:20 +0000
asID:                     16589
IP address blocks:        209.205.232.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 14 Jul 2025 22:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7c:88:a7:2c:b7:47:44:d0:02:3b:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de519df3-4594-450e-ac51-a7e085408381
        Validity
            Not Before: Jul 11 20:16:20 2025 GMT
            Not After : Oct  9 20:16:20 2025 GMT
        Subject: CN=2fc0346c-8782-4c4a-976b-d7a33d88e4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:ee:c8:18:09:9c:21:b5:c7:ec:ae:60:33:
                    7b:f9:37:6c:77:51:1c:0e:c4:0a:11:0d:cd:7e:8b:
                    59:9d:b8:ab:c3:c2:6c:4c:9a:32:ea:fc:38:05:c2:
                    d0:7a:1d:f4:28:94:c5:0d:4c:b5:68:ab:de:df:9e:
                    f7:7d:11:b2:9a:ef:b5:54:5a:a4:b8:5f:9a:a3:dc:
                    ac:81:13:31:51:dc:4b:6e:e5:f2:ef:02:c2:45:9c:
                    18:b9:8a:88:27:1b:ca:a8:71:72:62:fe:2f:4d:86:
                    1d:76:47:07:02:43:1f:23:d6:2d:77:64:40:e4:3d:
                    c9:34:51:a3:6d:08:6c:49:fc:85:ef:d6:26:37:3b:
                    e4:15:a1:5e:55:a8:5c:e2:c3:a3:f1:01:46:b5:a7:
                    eb:8c:3d:f8:ed:2d:df:cf:da:8e:ed:0f:32:65:eb:
                    0d:9c:3e:1c:3f:1b:a2:b4:52:8a:72:a7:a3:62:5f:
                    e2:f5:7a:58:32:43:e5:80:fd:9a:94:e9:b0:fa:95:
                    53:c4:2b:8c:ad:d8:58:89:d5:16:bd:61:6c:0d:5c:
                    28:62:e0:c2:25:43:3d:c4:88:28:3c:a3:6c:b5:80:
                    46:c6:18:63:a2:6e:08:ce:f8:ad:6d:d4:07:fe:43:
                    cb:b9:3d:af:ef:3e:e0:7d:72:cf:62:66:f2:21:56:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:85:10:0D:71:75:A4:D2:44:7D:AA:E0:A5:C7:57:64:31:9F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/a06671aa-8a42-3af5-a494-1a0571d48769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl

            X509v3 Authority Key Identifier:
                keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:06:d8:ae:e7:d3:c5:01:df:73:9a:c9:ad:2a:54:64:3c:50:
         df:93:85:16:ab:27:af:23:bb:56:4c:a5:0b:bd:1b:ee:b2:7e:
         d8:2c:49:41:05:f2:2b:20:ca:e7:d4:99:8e:80:73:37:8e:9a:
         10:43:36:82:3d:0f:27:b1:a7:f9:b3:a5:73:4e:2a:be:65:42:
         67:3f:c5:4e:7a:bc:51:54:12:88:ce:64:d0:52:dd:04:7a:93:
         ec:93:6f:e5:46:4a:d9:c1:19:b5:90:18:f2:de:a1:dc:94:10:
         e0:da:38:3b:77:f3:ee:55:f6:94:2a:ea:d0:51:31:91:4d:6d:
         29:2b:78:6a:db:c7:a7:77:35:d7:55:0d:31:e6:74:b1:d9:31:
         b2:9d:8f:53:5b:70:49:19:fb:32:ae:cd:19:3a:bc:92:56:f3:
         9d:73:02:b2:d1:e9:d6:d8:dc:6b:92:14:90:aa:4f:7e:d8:e9:
         45:2e:8e:41:99:c7:f5:ab:c8:4a:cf:4f:ae:ee:67:8b:7c:73:
         d4:ea:7e:57:05:4e:fe:b5:cd:f7:ed:39:00:6b:d6:89:b5:f7:
         ef:69:24:00:72:fb:50:a6:e4:8b:e8:64:d8:f8:a9:4e:eb:01:
         62:3a:ce:d0:c3:27:50:87:25:0e:c4:3a:87:45:e4:3b:2c:62:
         f4:4b:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:00 2025 by rpki-client