Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e2035363530.roa
File:                     3230352e3233332e3135352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          qN/lV3uOazsfnt6osQUCWEUbVTz7ln3G+puWXsgjWMU=
Subject key identifier:   46:06:63:4E:AD:B0:0A:65:27:45:8A:25:D7:63:30:54:4B:7A:66:24
Certificate issuer:       /CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Certificate serial:       5C8137C2BBD712FC2F209E65663C3DE813E672CB
Authority key identifier: 5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 16 Jan 2025 14:59:50 +0000
ROA not before:           Thu 16 Jan 2025 14:54:50 +0000
ROA not after:            Thu 15 Jan 2026 14:59:50 +0000
asID:                     5650
IP address blocks:        205.233.155.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 08:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:81:37:c2:bb:d7:12:fc:2f:20:9e:65:66:3c:3d:e8:13:e6:72:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
        Validity
            Not Before: Jan 16 14:54:50 2025 GMT
            Not After : Jan 15 14:59:50 2026 GMT
        Subject: CN=4606634EADB00A6527458A25D76330544B7A6624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:d4:fa:b9:51:f9:35:78:be:d5:c3:eb:b4:
                    b5:78:52:eb:4e:1b:fa:93:e7:e3:29:fa:89:1e:bf:
                    5a:23:16:7d:d2:b6:cc:f4:6f:1e:5a:2b:0c:21:1f:
                    d5:cf:d3:a1:d6:33:73:47:06:e6:75:b1:90:e2:b4:
                    09:f9:14:40:4f:b0:ef:13:e3:35:24:27:f4:90:81:
                    41:1f:dd:cd:56:33:97:97:61:77:96:ea:9a:cf:92:
                    45:4e:62:ab:2d:46:8a:0e:ea:12:06:9c:ef:7b:dc:
                    b5:1d:39:86:24:9d:58:c9:77:2f:75:dc:ae:07:f8:
                    ad:cc:e8:9b:91:ea:da:ad:51:c0:9f:94:0c:77:64:
                    ba:d4:25:14:37:44:9d:0c:d6:59:3b:0c:80:d4:9b:
                    12:b3:2f:b4:5d:14:74:1f:38:8e:b1:8d:bb:0c:04:
                    07:17:e1:99:a4:98:00:26:fa:49:f7:2c:5e:fd:fe:
                    16:c1:7e:62:90:ae:c8:71:89:dc:65:ec:eb:54:70:
                    c4:63:a1:7a:b1:61:72:76:5a:96:4e:38:f4:7b:ab:
                    cf:c7:0c:42:0e:a6:77:e0:77:49:fb:7d:bc:58:bb:
                    5f:92:fb:d6:d6:2d:bd:51:bd:ab:56:bc:5f:a0:cb:
                    c7:2e:9c:ba:60:97:38:6b:9c:40:4e:3b:39:29:55:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:06:63:4E:AD:B0:0A:65:27:45:8A:25:D7:63:30:54:4B:7A:66:24
            X509v3 Authority Key Identifier:
                keyid:5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:9d:5a:a9:3f:26:7f:2c:5c:56:b4:b3:95:2c:6f:0e:2c:
         62:09:93:cf:4e:88:cd:17:ca:27:a9:5e:ef:46:24:f6:16:97:
         9e:b2:15:10:c1:5a:b2:3e:3d:ec:3e:32:71:16:60:f3:96:2b:
         ae:ea:71:4b:8c:1a:7e:8a:3f:07:40:b1:a0:4c:d0:b6:16:78:
         ea:96:d5:dd:87:3f:88:72:00:0b:1e:4e:20:57:1a:55:c6:b8:
         6f:77:be:23:83:00:fd:e0:d0:ba:51:79:2b:87:9d:f6:2a:fa:
         03:df:b7:b7:68:af:a5:e2:2b:5e:5f:9b:f8:a1:83:cc:6c:20:
         31:fb:15:a0:a8:e1:18:1f:81:04:8e:b6:93:8f:d2:6c:cc:82:
         80:a3:6e:9c:46:3e:ac:ad:08:df:8e:5d:ab:13:7f:4b:2b:75:
         35:01:aa:9c:a4:69:d7:e1:a0:3e:ce:fa:a1:14:f4:b0:89:f5:
         8e:73:43:c6:34:e7:97:25:aa:3b:41:39:a0:a8:b7:33:04:5a:
         ed:8d:41:e9:65:fe:6d:83:7f:e1:02:3b:24:dd:a9:56:77:d7:
         17:90:31:b4:96:d4:5d:38:5e:e3:25:6a:18:d9:a2:66:85:f5:
         70:b0:7f:4d:66:d5:2f:d7:45:7c:58:31:ee:0e:7d:6f:b8:19:
         64:a7:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:49:26 2025 by rpki-client