Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f898735c-f775-3d46-a607-5fc8cd8bda28.roa
File:                     f898735c-f775-3d46-a607-5fc8cd8bda28.roa (raw, json)
Hash identifier:          7JHYRn/pxeMxxRR+QIqTPDCg9t4gj3+Vx0ATnBmo14Q=
Subject key identifier:   44:9A:8D:FA:C9:47:6A:F4:7A:A6:7B:0B:68:FB:25:F8:8A:13:17:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584188C08F453132FF8E07D660C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f898735c-f775-3d46-a607-5fc8cd8bda28.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.40.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Apr 2023 19:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:88:c0:8f:45:31:32:ff:8e:07:d6:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=25171564-cdae-455f-9093-a85223b61d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:09:27:52:cd:84:70:ca:f6:cd:6b:09:f3:
                    55:fc:cd:01:c6:62:9c:94:ce:e3:de:c6:94:17:eb:
                    f8:62:b2:7d:3f:47:25:f4:98:20:b9:77:9d:84:93:
                    39:2f:89:ac:85:a2:df:d5:74:8f:f5:60:d0:ac:6a:
                    52:cb:09:4d:7a:19:58:84:18:d6:a2:4c:ef:18:90:
                    9d:83:e9:c0:ee:b4:36:2c:36:b9:b2:61:4a:8f:74:
                    4a:4d:de:3f:b6:84:12:20:f5:a0:d3:e4:47:3b:c6:
                    af:1a:c2:4c:85:ed:69:49:e4:72:47:4c:d6:01:19:
                    83:0f:e9:96:9e:85:df:29:dc:a5:ac:1f:6b:50:89:
                    91:98:39:db:f7:00:6f:6a:e3:5a:2e:8a:ec:e8:f7:
                    de:eb:34:ee:6c:da:6f:5f:3b:06:b9:a4:ee:e5:6a:
                    39:95:1d:bd:62:60:44:60:df:b1:51:37:98:cf:97:
                    f4:e8:0a:1d:a0:25:32:ed:37:82:c7:1d:b7:80:99:
                    9c:90:3a:7f:2e:b5:ff:09:77:80:cc:db:8c:5f:d3:
                    8b:87:d7:b6:23:b8:1d:89:ba:f9:36:ca:56:b7:a5:
                    30:b7:98:70:1f:f4:d8:6d:3c:c0:a5:a3:cb:b3:91:
                    50:a7:dd:f7:b2:69:f3:a4:38:80:3d:0e:f7:69:47:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:8D:FA:C9:47:6A:F4:7A:A6:7B:0B:68:FB:25:F8:8A:13:17:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f898735c-f775-3d46-a607-5fc8cd8bda28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:95:cd:14:6f:4f:0d:3e:13:e4:e1:62:a2:51:a0:0a:e8:
         17:3c:a4:03:f5:4c:99:4a:42:a3:d2:3e:63:a5:e9:d1:c5:fb:
         31:0f:75:64:8e:76:4c:3f:48:3c:81:0f:78:fe:22:6c:51:93:
         58:57:8e:8f:14:ab:e9:1f:1f:8d:e4:fe:43:06:88:19:f8:a7:
         9f:a2:0c:86:38:e7:7d:95:5c:a3:3f:80:95:0d:1d:c1:d5:f5:
         55:c8:ab:78:8b:23:e0:8b:c7:3d:a9:a8:a3:8a:7c:ae:97:96:
         7e:1c:6c:7e:48:fd:ff:6a:71:5a:ec:b0:04:04:9d:f0:2c:15:
         d9:a6:69:9e:b5:dd:7e:7e:e3:fe:79:4e:a2:b5:7a:79:ab:c3:
         05:1a:f9:b1:35:d3:e1:cb:ed:3b:19:af:e3:80:c9:34:60:c9:
         06:08:78:61:42:af:12:5d:ca:c6:38:36:22:5d:1d:81:43:b0:
         86:50:b5:26:99:fc:a8:a6:5a:f5:fb:d7:70:61:3a:88:78:05:
         f4:88:56:4c:c2:04:7a:ec:18:9f:db:3c:77:b4:24:8b:32:68:
         f8:95:66:2f:e6:41:86:8c:c2:55:e2:e9:6f:16:c4:1a:88:cb:
         79:7e:e1:d6:07:be:a5:5f:77:88:a4:55:c2:5e:38:dd:e3:f4:
         7e:ff:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:07 2025 by rpki-client