Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/83af221d-86a5-3c26-84a7-b1dd084b11b8.roa
File:                     83af221d-86a5-3c26-84a7-b1dd084b11b8.roa (raw, json)
Hash identifier:          JhJYMo8E6PHDmaQ9GDxnKlmIH1ijlkbEo4EQ/YNc1C4=
Subject key identifier:   90:68:1A:62:B6:A9:99:D8:52:6B:06:10:BA:4E:81:DD:B4:98:51:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5773DCFF74F9ED0395EBD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/83af221d-86a5-3c26-84a7-b1dd084b11b8.roa
Signing time:             Tue 04 Feb 2025 13:41:23 +0000
ROA not before:           Tue 04 Feb 2025 13:41:23 +0000
ROA not after:            Mon 05 May 2025 12:41:23 +0000
asID:                     30036
IP address blocks:        173.27.133.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Mar 2025 12:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:77:3d:cf:f7:4f:9e:d0:39:5e:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:41:23 2025 GMT
            Not After : May  5 12:41:23 2025 GMT
        Subject: CN=d2d33014-b459-46f8-ae76-ac4558957fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:42:0c:b2:fc:fd:5e:23:35:df:37:ee:ae:
                    43:b5:47:31:87:b0:e6:64:4d:a7:a6:70:65:8f:13:
                    e1:a1:58:70:5b:68:b2:4f:ff:d5:9f:ee:96:d1:cb:
                    50:b3:07:49:4a:20:a0:d9:08:0e:1c:1b:b8:19:42:
                    36:fa:66:cd:23:34:b3:c0:b6:a6:fb:e3:53:eb:f7:
                    e7:99:05:ca:f5:e2:87:d0:00:94:10:5c:d5:b9:a2:
                    e7:5b:4e:41:e4:d3:c8:61:c2:b1:53:28:f9:16:70:
                    17:c8:10:15:67:24:aa:d0:22:71:46:05:8b:b9:10:
                    92:b3:72:9a:4a:f4:b1:05:c6:89:44:a4:fc:24:8f:
                    76:20:b1:c7:c8:da:2c:eb:de:63:cc:b7:e3:e9:d1:
                    f9:22:22:08:be:46:59:a7:6b:99:75:88:63:18:c5:
                    21:bb:68:83:e0:ce:c6:1d:ad:09:41:10:ff:a5:67:
                    72:74:15:19:e3:db:f2:3c:01:e6:8a:80:e5:17:43:
                    a3:79:f2:08:86:69:6f:26:80:cc:1e:50:05:b2:65:
                    15:df:c7:11:0d:54:a5:12:dc:ce:a1:31:8f:52:7b:
                    c4:e2:41:c0:cd:18:0a:45:33:e9:c6:94:87:08:24:
                    bf:65:2e:47:5d:8d:f3:d8:f6:1c:ce:55:e6:c6:67:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:1A:62:B6:A9:99:D8:52:6B:06:10:BA:4E:81:DD:B4:98:51:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/83af221d-86a5-3c26-84a7-b1dd084b11b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:00:96:82:94:fb:3c:22:d9:7d:d7:79:20:28:8f:00:8c:5f:
         da:db:9b:e5:c9:8c:fa:83:94:3d:ee:1f:21:ea:cb:44:cd:c9:
         ff:10:06:84:69:d9:cf:84:16:42:af:24:8f:b1:e3:be:8b:37:
         c5:d0:69:53:a6:40:bc:24:8a:e8:e4:30:db:36:18:b4:e7:2d:
         62:87:69:9b:d1:24:85:28:d8:81:43:d1:b8:b3:a0:61:5e:3c:
         b7:f3:a5:26:13:0f:05:91:6f:d2:77:8a:a4:20:9c:a0:f2:67:
         65:98:65:78:e7:9d:04:69:b2:b5:00:ad:e3:98:b8:99:72:92:
         12:1e:03:5f:d9:bf:c6:a1:cb:b2:80:59:a4:90:9b:b5:a5:82:
         0c:12:f2:d2:c6:ee:5c:6c:3a:a6:03:da:bc:75:fc:80:d2:01:
         6f:5a:75:11:cf:72:da:4a:88:0b:0e:d2:d3:75:a9:26:88:92:
         fe:d9:3b:b3:06:6e:36:52:49:97:dd:93:52:8c:94:47:16:68:
         05:6a:51:d1:75:5d:fe:58:f3:6f:3d:07:36:63:49:40:2c:eb:
         36:4b:0a:20:c9:63:de:b5:d2:e1:a8:21:cf:e2:bb:d5:29:dd:
         6c:cd:c9:0a:9f:d5:00:41:67:21:7c:c4:da:21:7a:7c:5d:14:
         b1:8f:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:01:10 2025 by rpki-client