Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e20383334.roa
File:                     3231362e3234372e3130302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          rg7xN7fo0G100cxpl+gQ5pIgrQ5NJMzbqBM3vMSIUHA=
Subject key identifier:   BB:A7:19:81:69:41:FE:B4:6A:52:88:45:42:48:15:B0:E6:67:6A:C2
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       094C3033025E3F83FF27293572512CCD7E4543B7
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e20383334.roa
Signing time:             Sun 01 Jun 2025 00:02:53 +0000
ROA not before:           Sat 31 May 2025 23:57:53 +0000
ROA not after:            Sun 31 May 2026 00:02:53 +0000
asID:                     834
IP address blocks:        216.247.100.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 02 Jun 2025 07:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4c:30:33:02:5e:3f:83:ff:27:29:35:72:51:2c:cd:7e:45:43:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 31 23:57:53 2025 GMT
            Not After : May 31 00:02:53 2026 GMT
        Subject: CN=BBA719816941FEB46A528845424815B0E6676AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:86:79:a7:0b:fe:fc:67:63:12:09:5a:6e:
                    60:5c:c9:2c:87:3e:c9:4e:d9:7b:41:b5:81:a5:0d:
                    19:4f:65:72:29:2e:de:b5:b9:34:bd:28:96:b8:5b:
                    d4:71:e7:f6:ee:31:4a:d4:65:99:dd:b3:43:a5:23:
                    c3:34:6a:8a:06:56:6d:7a:c7:01:c0:81:3e:15:b8:
                    a7:af:f9:4b:03:04:c2:22:9b:bb:44:a8:8a:f6:2e:
                    21:ff:e1:de:cc:a9:0c:7d:99:dc:70:20:af:f0:35:
                    bf:6e:5b:36:5c:6c:c0:e5:38:29:1f:1f:1b:f9:ad:
                    43:d0:23:36:79:50:99:4e:59:12:ae:06:c1:32:4f:
                    8a:ec:11:d7:93:0f:1a:0a:dc:24:46:42:09:fa:53:
                    68:47:c0:fa:0f:b1:e6:61:cd:38:9c:e5:37:9f:d5:
                    10:a7:ac:0c:8f:4b:22:b9:c2:ee:36:03:f3:29:74:
                    4f:59:5a:7b:3e:78:f8:74:b1:55:e9:76:71:17:92:
                    53:d7:f4:80:d1:d3:17:54:73:dc:d7:f5:29:ce:4f:
                    a3:f4:1a:7c:a0:85:53:b5:3e:53:ac:15:7f:5b:9f:
                    96:f7:69:1a:94:83:3a:42:4d:95:28:33:89:d7:40:
                    bf:21:9e:0b:0c:87:87:3f:65:af:1c:83:b8:83:f6:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A7:19:81:69:41:FE:B4:6A:52:88:45:42:48:15:B0:E6:67:6A:C2
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:f7:e7:82:46:46:e5:2b:5c:eb:c6:2a:cc:82:3c:9e:d1:7f:
         c1:61:f8:ec:e4:9a:bd:58:4b:64:47:ff:f8:34:a6:10:4e:7b:
         73:cd:a8:19:a8:5e:4c:2c:16:de:98:15:00:be:0b:99:33:0f:
         2e:ac:68:07:f5:41:55:37:ad:d5:15:98:45:64:05:08:5d:4f:
         93:53:f8:aa:67:f0:7c:4a:b9:ca:04:80:48:32:70:b7:c8:dd:
         f1:e3:7e:d4:f2:97:0d:51:4e:68:28:f3:cc:c8:3c:a0:c6:a7:
         4e:21:ac:ac:55:a4:a5:90:88:74:99:a9:a5:f4:cd:07:d2:df:
         45:bd:54:2b:8f:c4:0a:54:95:55:65:df:e3:9d:e7:71:22:7a:
         33:05:9a:09:6e:74:97:56:5f:8c:66:c9:fd:39:f6:67:e0:f6:
         1f:ba:18:cb:3f:97:ba:a9:55:3c:c0:9a:e7:25:2c:8f:54:3c:
         74:e8:af:49:cb:cc:4a:7c:b0:9d:b6:40:bf:16:70:0f:ac:57:
         24:e3:fa:b6:58:b3:16:82:ba:7b:73:16:71:ac:7b:00:e1:e7:
         95:d8:80:5d:74:c3:c5:00:b0:4d:b8:8e:a6:05:9c:6e:6f:23:
         36:d8:43:e8:87:99:da:93:47:c0:ec:f0:e6:c8:98:2a:18:85:
         36:a9:e6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:40 2025 by rpki-client