Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e20383334.roa
File:                     3230392e38372e3137322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          UE81+DHct2gA58uD8kYuCtxz5PXiSMg+esHwey/3u0k=
Subject key identifier:   F9:5D:80:37:D9:98:7E:56:8C:87:18:9B:C5:9D:72:8C:BB:07:80:25
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       4D2B88B515986342AB1CAAF1BD75F90A05624A04
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e20383334.roa
Signing time:             Mon 04 Nov 2024 00:02:18 +0000
ROA not before:           Sun 03 Nov 2024 23:57:18 +0000
ROA not after:            Mon 03 Nov 2025 00:02:18 +0000
asID:                     834
IP address blocks:        209.87.172.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Thu 07 Nov 2024 10:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2b:88:b5:15:98:63:42:ab:1c:aa:f1:bd:75:f9:0a:05:62:4a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Nov  3 23:57:18 2024 GMT
            Not After : Nov  3 00:02:18 2025 GMT
        Subject: CN=F95D8037D9987E568C87189BC59D728CBB078025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:0e:f0:e2:a1:bd:c7:e5:e5:0d:59:b4:67:
                    c2:07:36:c2:f7:20:fd:92:b5:0a:c1:c4:a6:72:6b:
                    28:35:8b:17:f3:3a:62:9f:35:ae:ed:f8:9f:30:bd:
                    0a:64:61:38:d2:99:dd:2f:36:49:4e:bc:a6:9b:36:
                    60:3d:91:0c:b6:88:8e:fd:ab:a8:67:9c:78:41:50:
                    5b:3c:d1:6b:42:91:2b:1b:3b:06:5f:db:a6:52:c9:
                    c1:c8:03:a7:7c:38:e3:b0:db:5d:e9:8c:5c:23:d5:
                    73:05:cf:b9:1a:81:2e:af:51:4b:6b:0b:02:33:27:
                    af:01:29:ae:f1:a7:fc:f0:e4:8d:87:0a:27:6a:b2:
                    f7:20:91:bb:a4:aa:ce:d9:77:87:44:60:32:86:62:
                    43:ab:18:87:3a:4c:fe:7d:b8:06:9e:6f:8f:a3:88:
                    c3:00:da:17:c7:ee:8f:92:4c:73:a5:9c:a6:46:6c:
                    85:e9:36:d7:a9:05:e4:b3:bb:2b:24:53:4e:eb:9e:
                    13:af:7c:76:4a:40:fd:0d:e0:64:26:cb:8a:58:0f:
                    81:da:7b:06:11:f5:a1:38:6c:42:67:eb:f2:ad:d4:
                    4c:11:98:dc:18:03:58:bb:b6:42:f3:be:bb:8b:43:
                    03:61:71:a3:f3:c8:88:10:b0:73:2c:32:80:d0:1b:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:80:37:D9:98:7E:56:8C:87:18:9B:C5:9D:72:8C:BB:07:80:25
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:50:ce:0d:ba:9e:22:48:e2:d8:35:83:a1:26:51:c1:46:
         c4:7e:f4:04:b7:70:c2:3d:7b:c2:9d:1a:e5:1c:b8:33:0d:0e:
         a2:aa:4a:67:30:5d:7c:20:00:f4:70:85:53:02:63:b5:3c:79:
         5c:01:bc:3f:40:53:f4:1a:b6:8e:28:6d:3a:27:3c:85:d4:b7:
         c6:9d:ac:61:84:85:67:48:da:66:dc:95:0d:a1:e2:ac:97:9f:
         a3:34:1f:5f:1d:93:dc:d4:a5:1a:fb:21:6e:65:2d:58:88:1d:
         16:55:38:92:f4:37:3f:d3:28:69:3e:96:23:cf:86:ab:26:e6:
         ab:38:11:7e:c4:35:f1:e0:72:15:41:b7:e6:48:14:26:67:52:
         cd:5b:4e:15:02:c9:8c:2d:af:05:d8:82:a2:4d:7d:a2:a3:4b:
         3c:0c:c2:d1:ff:ef:cc:c8:1a:f8:03:47:0c:89:9e:f8:e4:7c:
         23:95:9f:74:d8:70:c7:70:b8:94:66:94:b9:35:e4:5b:ad:5e:
         e0:81:62:b8:9c:15:3a:3e:26:c0:f9:3c:00:10:4f:bf:92:7e:
         bc:ea:a5:5a:38:b3:65:17:c5:fc:8b:06:6c:b4:f3:88:9c:cd:
         02:83:aa:7a:7b:03:20:22:7c:a1:7e:62:18:f1:07:c6:f0:a0:
         9d:df:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:28 2025 by rpki-client