Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/120078dc-c45e-3110-b5d9-3b816c71f731.roa
File:                     120078dc-c45e-3110-b5d9-3b816c71f731.roa (raw, json)
Hash identifier:          PjEb8cKMSYvhaJpNSXnF/UJedWDc3Lau6VUE+x/se/g=
Subject key identifier:   3A:A1:8A:12:1F:5E:76:BB:57:AA:01:B4:06:8A:3A:BD:B3:1E:24:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C576D7CA9B16D9CDF723CD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/120078dc-c45e-3110-b5d9-3b816c71f731.roa
Signing time:             Tue 04 Feb 2025 13:40:35 +0000
ROA not before:           Tue 04 Feb 2025 13:40:35 +0000
ROA not after:            Mon 05 May 2025 12:40:35 +0000
asID:                     30036
IP address blocks:        173.20.85.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Mar 2025 12:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:76:d7:ca:9b:16:d9:cd:f7:23:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:40:35 2025 GMT
            Not After : May  5 12:40:35 2025 GMT
        Subject: CN=53adce89-0db8-4c0d-8c7d-957f9cb8d35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:e9:b6:2f:09:38:15:2d:1a:3f:ba:9b:02:
                    a3:4d:e5:4b:91:d2:0a:3c:f9:68:e5:24:a8:7e:ad:
                    38:d4:b5:23:a2:fb:2e:d2:0a:b8:4a:a7:45:58:76:
                    08:f1:7f:4c:fa:12:5e:9f:88:c2:68:8b:8c:39:d6:
                    ab:c9:08:81:86:72:9c:75:f0:74:0d:87:b9:0d:e8:
                    dc:21:84:c8:31:37:45:e3:e8:09:c5:37:80:da:b5:
                    d4:9d:c4:66:c4:2b:99:da:31:a7:16:4d:62:17:dd:
                    ca:9c:ef:4a:18:46:9a:bb:17:50:a7:1e:69:7c:02:
                    21:7e:6c:1e:e4:b6:f8:3c:d1:c3:b9:3e:b7:93:17:
                    ea:af:75:29:a0:fc:5a:e7:b0:fd:c1:f2:4e:88:9e:
                    dc:4e:00:2a:1b:3d:e3:5f:0b:2d:7f:4b:38:17:2e:
                    82:2d:c5:2f:3d:d9:61:d4:86:11:dd:08:9c:12:fb:
                    93:72:42:12:d2:9b:85:25:48:40:bd:a7:0f:98:ff:
                    36:ef:83:6e:cf:a2:8a:32:67:46:65:9c:f4:af:86:
                    26:57:b8:ee:11:19:43:98:f3:5f:6e:bf:67:52:a2:
                    44:27:97:ab:df:ee:a5:d6:dc:ab:99:95:50:c3:c3:
                    39:d9:c9:b4:a2:99:85:ed:21:23:aa:74:c9:e5:54:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A1:8A:12:1F:5E:76:BB:57:AA:01:B4:06:8A:3A:BD:B3:1E:24:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/120078dc-c45e-3110-b5d9-3b816c71f731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:49:64:36:8e:85:1e:0e:d8:b0:86:00:65:2e:f6:8f:07:48:
         78:d0:d1:8a:58:04:77:0c:7d:bf:47:c6:73:c4:1d:14:a3:8c:
         82:33:2d:56:c7:66:76:ea:85:d2:46:b8:4c:36:c6:74:f4:df:
         ee:0a:18:b2:3b:72:c1:9d:43:0f:04:19:12:90:08:a8:8b:6d:
         c4:75:d3:0b:57:86:bf:41:06:b0:a9:ee:96:24:e3:fb:c4:05:
         90:80:4d:ef:c8:e7:21:13:d2:0a:c1:81:89:89:56:d5:b0:05:
         d6:6a:17:18:c5:5b:11:6d:ec:04:15:3f:40:1c:b8:a0:5d:43:
         8b:19:54:d1:5c:3c:98:12:de:c8:7e:b8:2c:83:da:71:a4:c4:
         d1:42:33:44:ee:cb:1a:06:4b:69:06:28:43:b9:21:b8:12:80:
         10:01:70:67:21:21:b5:ad:50:da:82:1e:4b:2a:30:7f:68:15:
         cc:79:c1:b4:02:91:90:81:78:33:0c:eb:28:77:50:99:89:5d:
         5a:16:64:20:96:4a:b1:2c:d1:c2:f8:ea:a5:8b:0f:d2:d8:d6:
         d8:72:56:17:15:d2:80:3e:20:72:9e:94:8b:38:03:98:62:bf:
         22:e4:ec:cb:e5:5a:e8:20:f7:59:7c:80:70:30:14:20:41:e5:
         79:b1:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:20:02 2025 by rpki-client