Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e128c1-9ea6-3d6c-be7f-4a549c5b3b7c.roa
File:                     10e128c1-9ea6-3d6c-be7f-4a549c5b3b7c.roa (raw, json)
Hash identifier:          0L3TAMTBcrvZPZkNMytM79OJAcLZT4RcxpgWLnkW+1A=
Subject key identifier:   17:BC:25:98:D9:E7:A9:38:EA:D5:16:9B:67:DE:9D:F3:F1:14:56:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5585699432752EB5EF009F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e128c1-9ea6-3d6c-be7f-4a549c5b3b7c.roa
Signing time:             Tue 04 Feb 2025 12:39:07 +0000
ROA not before:           Tue 04 Feb 2025 12:39:07 +0000
ROA not after:            Mon 05 May 2025 11:39:07 +0000
asID:                     30036
IP address blocks:        173.16.174.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 08 Mar 2025 01:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:56:99:43:27:52:eb:5e:f0:09:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:39:07 2025 GMT
            Not After : May  5 11:39:07 2025 GMT
        Subject: CN=f32f1201-e111-43bc-9659-57692b2f58ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:e8:cb:9d:17:4c:fe:94:66:07:c1:47:ae:
                    44:12:72:fd:1e:45:ef:5b:07:85:2e:47:4b:3a:20:
                    c3:da:42:3a:41:ae:e5:78:1e:dd:e2:ef:d6:fa:ea:
                    54:b6:f7:ac:04:13:2e:98:fe:5f:ee:19:7d:2f:18:
                    ad:d2:b1:45:b3:34:47:f8:30:4f:61:64:0d:fa:06:
                    02:c9:ca:34:bb:e0:54:42:f8:59:8a:58:74:18:7f:
                    d3:91:71:f2:8a:e8:3d:b7:99:de:b1:a2:e1:64:5f:
                    77:46:80:0f:3c:ac:e2:95:97:49:22:53:65:69:03:
                    ab:3f:ec:4e:96:bc:ef:c4:70:33:d1:f3:cf:85:83:
                    e4:70:50:5d:2c:51:9d:e6:7b:1a:b8:fa:b6:fc:bc:
                    9d:ec:37:6c:13:a4:3c:79:bb:60:a2:51:6c:51:2a:
                    43:c4:c9:7b:b2:e9:5c:8b:12:d4:5d:28:a3:42:a0:
                    f1:05:55:67:74:9a:02:1e:cc:85:0e:12:59:93:ce:
                    07:3c:ba:8e:a2:48:93:17:8a:3c:72:9f:95:4f:b6:
                    e9:ff:60:13:b3:c2:c9:3c:60:19:d9:75:0d:83:2b:
                    d9:f5:b1:58:21:64:45:ed:df:66:c5:c3:e9:24:1a:
                    a9:df:70:dd:0b:ef:38:53:bf:c1:95:5d:20:80:49:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:25:98:D9:E7:A9:38:EA:D5:16:9B:67:DE:9D:F3:F1:14:56:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e128c1-9ea6-3d6c-be7f-4a549c5b3b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:18:f8:d4:ee:10:c5:7e:51:3e:6f:81:72:3c:2f:b9:cb:
         3e:ed:37:cc:0c:c4:b3:9a:37:a1:c0:6a:1d:3d:5f:60:80:56:
         f4:1c:88:9f:a5:b5:2e:48:5e:ce:fc:c4:b8:54:88:df:d1:ba:
         a7:38:56:b6:75:72:13:1f:4f:14:aa:0b:2c:cf:09:6a:13:40:
         8f:52:ca:21:81:bb:8e:85:22:1f:24:93:7c:d4:ad:d7:1e:a9:
         c8:3a:c3:28:f0:08:ae:aa:5a:1c:e9:f1:9f:60:6e:44:ef:d4:
         1f:44:19:36:e7:81:49:6a:0c:a8:5e:74:ad:5f:53:4d:11:88:
         5a:7a:e2:db:99:7a:76:57:41:e3:2e:e2:80:83:cc:80:df:21:
         74:be:0e:c0:7f:85:4f:8a:31:e3:e1:d3:19:d9:7e:ae:c2:38:
         b6:f3:de:03:89:eb:21:12:eb:8b:42:02:07:46:12:dd:e7:30:
         2b:ec:7a:b7:b5:55:0f:66:26:e9:b3:e9:e7:ec:79:16:f4:b1:
         80:1b:6f:a2:1b:2c:cd:bd:c6:77:ee:d0:e8:6f:a2:89:bd:ed:
         56:ca:2b:ec:f0:f5:33:55:c3:36:87:8b:39:ce:fb:df:bf:6e:
         87:5e:38:f6:e8:be:0f:1f:84:ef:28:dd:89:d3:a3:d5:59:09:
         1d:01:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:41 2025 by rpki-client