Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfbff593-ff96-344c-8dd7-e10c1b8bd8eb.roa
File:                     dfbff593-ff96-344c-8dd7-e10c1b8bd8eb.roa (raw, json)
Hash identifier:          fFYuxvfvf2dD9fkwlSQT4KFPTmfSeV0SbRxxPXGgNJs=
Subject key identifier:   C9:A2:C7:0C:B1:D5:AB:52:C2:F3:07:70:1B:9F:C7:FC:8C:ED:CA:29
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841479A6974599E6464564EC800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfbff593-ff96-344c-8dd7-e10c1b8bd8eb.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 22 Jun 2025 04:00:00 +0000
asID:                     212953
IP address blocks:        108.165.128.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Apr 2023 14:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:47:9a:69:74:59:9e:64:64:56:4e:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 22 04:00:00 2025 GMT
        Subject: CN=7bc9309c-0be9-417f-8712-58fc4ca067e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:fc:9a:6c:94:9a:88:36:bf:3d:d5:70:6a:
                    d0:08:62:b7:82:d5:3b:be:d8:20:4d:6f:19:a6:b7:
                    06:0b:1e:0c:ba:b9:ef:9c:c3:2e:75:76:be:9d:72:
                    ec:b9:3f:47:4e:c2:89:6f:f6:a4:70:71:0e:02:1b:
                    1c:e5:4c:ed:a6:b6:9a:ba:ec:36:6d:2b:d8:9a:d7:
                    cb:29:67:77:ec:fd:59:3c:d1:73:c2:78:d2:80:37:
                    27:c0:2c:69:6c:35:79:10:ae:f3:c8:9a:42:91:50:
                    32:67:c3:78:04:b4:3a:28:ff:23:03:1b:f9:a2:b5:
                    3a:4f:e3:ad:3f:c1:13:a5:69:e1:42:be:97:3d:77:
                    b8:fd:d9:8f:c6:3f:1b:1e:d1:a7:af:4a:51:0d:36:
                    ca:62:10:e1:00:d6:d0:49:e7:08:ca:ac:b2:ad:08:
                    5e:2a:63:a0:b3:24:1b:cb:4c:fb:6e:e8:93:a0:62:
                    cf:f4:cf:32:35:5d:7f:20:d1:f6:96:93:41:ba:18:
                    23:97:52:fd:f0:af:4b:01:22:6d:a7:9d:54:c9:71:
                    64:a7:e1:97:ac:ad:68:60:18:85:c3:32:75:33:35:
                    8d:da:55:03:b8:0c:17:fe:7d:9a:61:a4:2a:a1:c6:
                    36:11:f0:b7:9f:45:07:e5:d3:84:d2:09:80:1c:46:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:C7:0C:B1:D5:AB:52:C2:F3:07:70:1B:9F:C7:FC:8C:ED:CA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfbff593-ff96-344c-8dd7-e10c1b8bd8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:f4:c3:8a:3e:bf:1b:a9:8d:cd:ea:45:dc:4d:54:74:66:
         57:71:f2:28:f2:6f:8c:a1:08:ae:f6:09:d4:d3:94:6c:27:e8:
         91:0b:d4:16:40:29:90:11:64:8e:de:64:d6:4e:cf:84:d9:4b:
         1d:92:2d:ba:07:7e:0d:d7:06:ff:c5:e3:2c:e5:cc:c5:3e:5a:
         04:a7:f1:dc:a4:4d:a8:f4:f9:53:65:bd:a9:eb:25:8a:fd:02:
         3f:04:ed:87:9f:82:c2:e6:99:43:cc:08:dc:4a:43:95:02:29:
         79:90:71:cf:7c:27:b8:06:d6:f9:bb:9b:df:4f:b0:94:db:5c:
         3c:27:41:86:cb:8e:51:b9:dc:c2:bd:a4:ce:ee:6a:c9:93:20:
         e1:cf:4f:58:3b:85:26:05:78:11:bc:54:7a:7e:f9:0d:6a:a4:
         11:6d:08:c8:79:cf:e9:55:d6:c2:19:9f:4e:fd:6e:c8:47:da:
         e4:d5:c8:50:ee:b6:88:9f:fa:f9:dd:2c:84:1c:26:d5:10:e1:
         82:fc:b7:27:fd:9b:e0:ca:a7:c2:2e:18:b0:cf:5f:97:f0:32:
         3d:16:dd:2d:d6:5f:00:7d:7c:62:3f:e5:c2:f7:56:4a:b8:3d:
         8f:da:e5:b5:7d:ad:6e:87:25:01:0a:f4:0f:a7:91:14:72:36:
         87:e4:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:56 2025 by rpki-client