Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7f7287e-c26f-3348-8d0b-ac9a0a3be790.roa
File:                     d7f7287e-c26f-3348-8d0b-ac9a0a3be790.roa (raw, json)
Hash identifier:          RVsbHQJLJxpQ3hqkt9pxfWWVxUfWhrVvJ0t59ehq71Q=
Subject key identifier:   78:D7:8B:0B:4E:F9:B8:EF:3A:5E:1F:23:34:08:54:8B:B4:66:A5:F2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841889A7C58873508B40AA5E480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7f7287e-c26f-3348-8d0b-ac9a0a3be790.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.57.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 20 Apr 2023 16:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:88:9a:7c:58:87:35:08:b4:0a:a5:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=c5ee2cf0-bce9-4a3d-b2ff-7babf4df667e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:dd:3a:9e:fd:62:04:70:28:18:1b:f5:ef:
                    cc:a7:8c:32:38:64:c3:41:ca:93:99:26:5f:6f:11:
                    d1:a2:0a:71:14:3b:a0:ce:b2:75:13:0d:de:19:15:
                    33:8f:c8:85:aa:bf:6d:66:7f:81:8c:6a:b3:e6:1b:
                    ba:56:3d:2d:c1:ee:fa:2e:12:f4:07:bd:41:29:cd:
                    7b:5e:cd:0a:b1:1c:c0:6d:85:bd:2c:3f:ef:b2:e9:
                    db:5c:d4:e8:e3:f0:d6:70:e5:b5:d0:c5:c2:2b:f7:
                    f2:9d:33:40:1b:59:60:bc:7a:5f:66:10:93:00:84:
                    fe:3f:9d:b7:79:fc:6b:fc:c1:1f:e9:ad:88:99:7e:
                    36:ae:96:b2:db:4a:10:12:ac:3b:b4:ac:bc:51:bf:
                    50:8a:03:21:ad:d4:de:4e:3e:37:69:ef:a6:0b:a9:
                    c6:ea:8d:a1:66:32:ea:49:e0:0f:f1:0f:cf:b9:ef:
                    12:70:05:e4:f2:f5:f6:d1:f2:64:9c:e0:5d:c4:0a:
                    d6:86:36:9f:f5:d8:68:20:26:9d:b6:eb:61:e4:00:
                    ea:65:44:00:ac:4c:60:82:d1:ce:87:16:45:00:4f:
                    03:65:b1:54:78:92:85:fc:b5:9a:dd:f4:c8:db:0e:
                    6b:dd:6f:f4:c0:38:2d:23:31:53:75:a1:7d:31:5e:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:8B:0B:4E:F9:B8:EF:3A:5E:1F:23:34:08:54:8B:B4:66:A5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7f7287e-c26f-3348-8d0b-ac9a0a3be790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:c4:4e:b1:8d:c8:7e:e0:63:57:d9:19:5f:7d:7a:36:c2:
         d2:b8:e8:ce:c9:87:46:34:69:ae:0e:72:74:d2:b2:e6:4c:62:
         ce:e6:33:34:e1:8e:93:8b:dd:0a:ed:24:1a:0e:2b:9d:f4:70:
         37:46:82:bd:25:b8:db:6d:fd:2c:1a:55:2c:48:47:5a:64:99:
         7a:9f:46:b0:27:48:aa:ed:4b:4c:79:a2:9a:c0:63:cd:5e:ee:
         9d:f1:55:5a:f9:0d:e9:96:8c:19:bc:f8:16:99:93:9d:cf:21:
         68:f9:89:6f:81:88:a2:96:6f:13:58:d8:99:9f:16:ae:80:86:
         ae:eb:72:18:48:ba:95:45:6a:9a:6f:ba:73:3e:5e:a1:fa:4d:
         23:6e:9b:ed:5d:80:7e:13:78:f3:83:09:7b:bf:6f:09:6a:df:
         a2:a8:e1:46:d3:b0:aa:0e:f1:e6:b2:1b:70:e9:55:18:65:82:
         b7:74:76:85:2b:f1:44:eb:32:0b:4e:17:de:b6:f7:80:ee:6c:
         aa:a7:73:a7:7b:92:20:a7:20:5c:6f:96:62:d3:5f:2b:ff:e7:
         fa:e7:4f:d3:db:f1:95:a1:39:a0:2b:04:f2:9c:18:85:87:35:
         ec:ce:48:e1:2f:49:cb:15:86:aa:83:51:3f:e5:f8:98:4b:d5:
         da:1a:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:15 2025 by rpki-client