Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34709cfd-b878-3c8d-a066-41c3dded6ee7.roa
File:                     34709cfd-b878-3c8d-a066-41c3dded6ee7.roa (raw, json)
Hash identifier:          efdH/VoIcG98B0C8s0QlHcUYyT/3nA1UUat+xgJ+sxQ=
Subject key identifier:   85:EA:2B:8C:BF:CB:9A:6C:AF:38:AD:EE:0E:D4:7A:6B:A2:D3:70:59
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858416EB1E11E1342A83B30334AE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34709cfd-b878-3c8d-a066-41c3dded6ee7.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 06 Jul 2025 04:00:00 +0000
asID:                     139660
IP address blocks:        108.165.93.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 04 May 2023 15:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6e:b1:e1:1e:13:42:a8:3b:30:33:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  6 04:00:00 2025 GMT
        Subject: CN=8acf90e9-b92f-41b6-a81c-aae9616b1e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:dd:dc:c7:47:06:be:9f:16:7b:80:62:ed:
                    77:5b:a5:b3:2b:36:9b:e8:5b:ed:af:b2:b5:1b:f2:
                    00:00:b2:3b:14:0a:53:f9:24:fe:bb:b0:05:db:b5:
                    41:8d:a6:07:21:fa:a3:b9:63:e3:5d:79:b6:a6:df:
                    cd:65:84:42:4b:b0:64:40:c3:12:0a:4c:84:b8:a0:
                    ca:88:6f:1c:4d:39:97:0f:3a:68:16:6f:72:6c:9e:
                    22:59:e0:47:1e:62:39:de:03:cd:4c:90:8d:ce:f0:
                    06:6f:f2:fa:fd:ed:7b:ce:3d:90:45:a0:c5:66:d4:
                    47:70:fa:92:5b:ca:b3:dc:8c:c7:95:06:0a:f4:b2:
                    69:b0:66:ee:58:b8:82:7e:26:44:3a:88:7d:5a:fb:
                    f0:0e:16:51:81:ef:45:4a:c7:3e:30:58:e6:36:e4:
                    e5:c3:9d:e2:93:49:4a:3d:c2:82:50:ea:a7:98:69:
                    8f:46:9a:cd:ee:16:b0:0f:b4:2b:9a:c5:25:29:f4:
                    ef:c2:a8:39:f1:7a:a7:9e:92:cc:24:13:c9:80:6c:
                    26:93:85:5a:f0:54:7d:b7:b6:6d:17:bf:43:91:67:
                    97:a6:1c:9e:68:6c:00:79:59:cf:e4:1f:b4:4c:4b:
                    a8:72:de:4c:54:e8:e8:f6:15:62:87:ea:2d:e8:b3:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EA:2B:8C:BF:CB:9A:6C:AF:38:AD:EE:0E:D4:7A:6B:A2:D3:70:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34709cfd-b878-3c8d-a066-41c3dded6ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:52:54:13:b5:93:29:b3:45:d6:61:19:36:b9:59:1a:d8:cb:
         e9:a9:2a:99:10:a4:35:96:0b:a2:29:09:4f:0c:cb:8e:89:a0:
         a9:a7:b4:b4:1a:0c:0c:e1:ca:0c:8b:5b:52:6b:9b:a7:f6:d3:
         1b:e2:f0:8d:cf:7d:dd:6f:84:05:15:eb:96:fe:8b:67:15:45:
         80:d8:a9:2b:7d:42:9d:91:1f:d2:d0:63:6e:a1:b5:a8:c9:ec:
         43:1b:7f:dc:ef:f9:4a:76:1e:57:77:cb:a5:52:3e:d7:b0:aa:
         fc:26:9d:4b:d5:44:17:3e:3a:44:06:00:0d:74:d9:b5:81:2a:
         fc:21:d9:da:42:eb:04:ac:92:c5:64:c6:d8:40:f1:93:49:02:
         3f:73:79:e4:b9:63:d0:7b:d8:9d:37:9b:a0:d9:d4:a5:a4:70:
         9f:42:da:e4:e5:d8:03:52:ef:47:26:7e:9b:b4:41:aa:35:e3:
         e7:cd:db:27:96:4e:41:73:6e:9e:a0:dc:18:9f:cd:db:3d:ee:
         50:f7:04:72:a7:5b:be:0e:f2:ec:44:f8:80:7b:5a:88:83:fb:
         67:25:00:78:6a:18:99:4f:6f:ee:f3:bf:71:cb:4a:56:96:e0:
         34:b3:ae:6b:ca:a0:c3:03:92:c4:eb:69:f1:41:ff:fc:56:02:
         96:fb:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 13:46:36 2025 by rpki-client