Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/773537b1-fde0-3c1d-83e2-089928c40c90.roa
File:                     773537b1-fde0-3c1d-83e2-089928c40c90.roa (raw, json)
Hash identifier:          YdvDBWuiVhMtXzhxP63yEO0sphKT1HzctaNwgPhzv94=
Subject key identifier:   04:C4:D6:0D:90:91:A7:FA:17:4A:B9:4D:36:94:01:C2:BC:E6:AD:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848CE9BDCB527EB5190DFA7A8EC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/773537b1-fde0-3c1d-83e2-089928c40c90.roa
Signing time:             Fri 07 Feb 2025 20:17:27 +0000
ROA not before:           Fri 07 Feb 2025 20:17:27 +0000
ROA not after:            Thu 08 May 2025 19:17:27 +0000
asID:                     215224
IP address blocks:        166.0.97.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 02 Apr 2025 22:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:9b:dc:b5:27:eb:51:90:df:a7:a8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  7 20:17:27 2025 GMT
            Not After : May  8 19:17:27 2025 GMT
        Subject: CN=34f87ec7-a945-4ff7-aa13-2564a9e5f70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:9d:f6:b8:f7:45:71:a3:04:0a:5d:13:89:
                    6d:9e:01:f7:4d:80:80:33:22:07:8e:bb:a7:ba:35:
                    bf:f7:9a:6d:44:27:52:4d:9c:1d:fd:56:41:4d:de:
                    d1:55:1e:40:66:41:ba:bd:fe:4e:09:cc:1e:ed:79:
                    4d:66:47:e1:a2:bc:ef:e1:7a:e2:69:3a:dc:d1:73:
                    5a:30:61:5d:02:e5:8d:d8:ec:4d:76:fa:07:74:69:
                    e4:08:bc:a7:3a:16:c4:32:38:a6:79:04:9b:08:77:
                    6a:21:c2:93:ea:55:cb:ce:8d:f2:39:e6:95:ea:26:
                    37:1d:04:06:be:c9:fa:29:4b:85:19:e1:a2:3d:92:
                    e3:ee:1e:ee:7e:e5:4b:96:99:6f:16:32:5c:ac:14:
                    96:82:32:52:d6:e6:5d:21:7d:77:ed:2d:71:5b:3d:
                    a4:96:fa:bb:17:44:8a:db:74:6a:54:56:1f:fe:a1:
                    5c:f1:01:68:ff:be:c6:71:05:44:c3:d4:20:2f:a6:
                    ab:8e:fb:4a:c9:57:2b:57:d6:41:e9:bc:5b:65:57:
                    87:98:01:42:27:c0:23:9a:da:ae:3e:ad:2a:22:61:
                    8e:9b:54:f7:d9:e4:c9:ef:34:19:d4:e2:f8:00:73:
                    ed:1e:ee:a8:c7:84:0c:dc:61:9b:ed:86:9e:60:b4:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C4:D6:0D:90:91:A7:FA:17:4A:B9:4D:36:94:01:C2:BC:E6:AD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/773537b1-fde0-3c1d-83e2-089928c40c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:71:58:89:e0:0e:7d:52:e1:90:82:70:9b:28:09:7a:f2:
         8a:04:87:84:cc:61:fb:fc:f0:d2:b6:08:40:c8:0f:1c:0c:0a:
         40:db:27:2e:7e:93:68:b6:7d:a5:2e:17:b4:9d:4b:d5:25:cf:
         26:b2:b8:e0:ef:63:8d:d8:32:b6:87:aa:6d:be:2a:45:ee:0d:
         e8:d6:ae:5f:f4:db:18:c7:ee:0f:72:21:1c:44:fb:25:7d:72:
         e1:eb:2d:15:ed:6b:8e:92:d5:6e:b0:2f:89:e0:32:e5:bf:ea:
         c6:ea:c5:38:eb:e8:38:9e:d9:14:c9:c4:4d:97:f3:4e:ca:30:
         56:a9:2c:a5:b6:bd:81:4c:f4:0b:ae:2f:d5:3c:4c:ab:16:cd:
         32:83:53:18:9a:da:7a:28:3d:a2:58:2d:40:d5:e2:65:43:3d:
         82:06:ca:7f:0f:c1:07:a3:40:b8:d1:c3:6d:43:b1:9b:ee:32:
         2a:61:f9:ad:73:0c:e5:09:b7:4d:bf:0b:77:37:95:eb:48:72:
         78:21:68:d6:0d:45:8f:48:1f:b4:ee:3e:6a:2b:dd:3f:8f:8a:
         88:2c:c2:05:51:ce:28:80:4f:50:49:b7:3f:0b:d7:2f:0f:66:
         6a:6b:04:6e:8d:24:3d:26:88:74:ac:55:c1:be:13:c8:a3:3b:
         8c:e6:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:48 2025 by rpki-client