Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23e35342-10d0-3611-896b-be58a7a70660.roa
File:                     23e35342-10d0-3611-896b-be58a7a70660.roa (raw, json)
Hash identifier:          l1c4uLLNG2J4GfZ0GQXhbJZSuvrANVO7d06ehR+0rJc=
Subject key identifier:   6D:7A:40:BC:41:9E:2B:05:DE:52:C0:9E:A9:E0:E8:33:F6:2B:0E:70
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584916E7480024CF9508C77DFD20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23e35342-10d0-3611-896b-be58a7a70660.roa
Signing time:             Wed 05 Mar 2025 17:47:37 +0000
ROA not before:           Wed 05 Mar 2025 17:47:37 +0000
ROA not after:            Tue 03 Jun 2025 16:47:37 +0000
asID:                     834
IP address blocks:        50.114.204.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 07 Mar 2025 18:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:16:e7:48:00:24:cf:95:08:c7:7d:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  5 17:47:37 2025 GMT
            Not After : Jun  3 16:47:37 2025 GMT
        Subject: CN=608a719d-0dde-402c-8077-301cabcc096d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:76:27:1b:12:09:c1:b4:c9:62:bc:7c:f4:
                    d0:27:9b:37:21:5b:f3:08:38:a1:06:7b:e5:72:49:
                    5e:30:82:ea:be:3a:ef:a6:9e:ce:7b:54:79:a6:15:
                    9b:e2:f7:79:52:0e:f8:91:44:18:0b:46:15:4d:b2:
                    88:89:b6:7d:4b:58:24:f1:b1:42:a0:de:92:57:7a:
                    7a:54:e7:20:de:fb:93:f2:82:a4:4b:cc:79:fe:e1:
                    4f:cd:8d:a5:ec:7f:7f:13:54:c2:dc:ac:43:1e:b9:
                    90:6f:60:19:f7:f9:08:4f:83:4d:0b:8c:46:29:54:
                    7c:bd:e3:6f:83:ff:02:c6:8f:d1:5a:ed:34:60:4b:
                    2f:71:24:73:7d:a3:34:c1:c4:bc:ac:c9:b4:e2:26:
                    a9:26:cd:85:28:34:f6:3c:87:f6:37:67:76:51:bb:
                    10:0c:87:73:9d:2c:3d:bf:da:06:c3:16:c6:91:07:
                    de:1b:4e:e1:0b:50:4b:91:af:21:62:a3:2d:cf:a7:
                    a0:c9:4c:75:92:0e:7e:85:ea:2e:08:71:ec:b1:f6:
                    5b:62:3c:00:5a:05:48:9d:a1:67:aa:d9:a5:3c:ac:
                    00:54:5d:6d:79:fc:20:09:5f:c6:88:4b:b8:a2:3b:
                    f7:3c:4c:09:53:1c:e1:2a:4e:68:bc:d1:f6:f4:c5:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:40:BC:41:9E:2B:05:DE:52:C0:9E:A9:E0:E8:33:F6:2B:0E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23e35342-10d0-3611-896b-be58a7a70660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:85:d6:1a:a7:b0:33:e7:fb:f7:0e:42:7c:e7:fc:1e:e9:
         94:3c:2e:1e:31:96:c8:bb:b2:b3:82:d6:d9:28:67:b6:75:3e:
         29:fa:39:b7:df:94:ea:b5:d4:ae:cd:79:00:7c:1d:6a:30:4a:
         8e:3e:b0:d4:7a:9c:e5:7a:44:32:92:f3:89:21:7b:79:dc:fe:
         ce:ad:ac:d7:e3:a6:b4:86:14:67:19:3f:a9:f9:40:da:5a:93:
         ec:8d:3e:06:4a:b2:ee:ce:34:07:92:33:72:6a:50:44:88:72:
         05:11:aa:50:57:d5:24:77:b1:9f:ae:57:b0:94:f9:48:a7:56:
         7f:06:fa:c7:04:27:5e:12:a4:5c:58:a2:aa:1c:c5:99:1b:43:
         18:08:0f:f1:6d:e6:11:62:ba:4e:b5:9b:03:f1:2f:fb:23:0e:
         76:a9:c8:22:fc:3c:f9:d5:f6:59:da:5b:08:90:dc:89:71:44:
         3b:12:e8:43:1f:12:cc:1e:c0:a4:47:bc:82:03:48:79:7f:21:
         f8:6d:d8:ec:45:6c:71:3d:b8:77:c9:20:57:d3:02:d9:1b:e1:
         94:d9:25:36:68:ca:c4:ac:da:a8:8f:b2:0c:73:d5:86:89:8d:
         cc:61:16:88:5b:8b:68:65:b1:15:8d:75:5f:f3:16:94:de:a2:
         7d:10:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:34:42 2025 by rpki-client