Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ec46a1e-55f6-4e3c-9a11-995e422faa1e/3c6127e3-ec65-3de1-8e6e-9b98ac65b937.roa
File:                     3c6127e3-ec65-3de1-8e6e-9b98ac65b937.roa (raw, json)
Hash identifier:          C7vhNkNEWam90/iMT1YPLjkx0mz6/oZ0lwFw/VEqbBI=
Subject key identifier:   B3:93:F6:40:66:2C:00:CF:87:28:2F:A6:4E:F2:48:84:90:E3:DD:70
Certificate issuer:       /CN=0ec46a1e-55f6-4e3c-9a11-995e422faa1e
Certificate serial:       010D0C9F43285848DF17E35A5F71D152C6154F80
Authority key identifier: BC:CF:70:9A:C5:2E:50:94:24:FB:E2:B8:02:72:57:42:C3:9F:BB:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ec46a1e-55f6-4e3c-9a11-995e422faa1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ec46a1e-55f6-4e3c-9a11-995e422faa1e/3c6127e3-ec65-3de1-8e6e-9b98ac65b937.roa
Signing time:             Thu 13 Feb 2025 18:00:17 +0000
ROA not before:           Thu 13 Feb 2025 18:00:17 +0000
ROA not after:            Wed 14 May 2025 17:00:17 +0000
asID:                     393907
IP address blocks:        142.12.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Thu 13 Feb 2025 18:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:df:17:e3:5a:5f:71:d1:52:c6:15:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec46a1e-55f6-4e3c-9a11-995e422faa1e
        Validity
            Not Before: Feb 13 18:00:17 2025 GMT
            Not After : May 14 17:00:17 2025 GMT
        Subject: CN=d6aadc7d-d149-43eb-a4d7-80c0bf04c7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:e5:5b:e8:45:c2:60:64:2b:92:8d:ae:6c:
                    6c:2f:f4:fa:b5:ce:98:f6:40:2d:7b:b0:97:1f:d5:
                    5b:80:f7:ca:48:e8:d2:fe:0f:1b:8c:aa:67:83:53:
                    34:1b:de:9c:a5:f4:2e:6d:a4:00:9e:30:db:53:37:
                    bf:36:6a:8d:8c:bd:51:70:f1:8e:06:c6:f2:82:90:
                    a9:22:58:2c:ad:4d:90:27:d0:65:ea:55:fc:be:b8:
                    fa:d2:e2:54:bd:e9:0f:65:11:e0:d0:bf:79:32:3e:
                    62:38:ae:5b:5b:1b:74:c3:d4:76:37:4e:12:16:b1:
                    55:cb:cd:cd:48:84:d8:11:da:c3:45:de:b1:8e:47:
                    c2:69:5f:56:35:4a:bc:3e:32:09:94:71:32:77:bc:
                    f6:96:f0:6f:91:9f:09:33:9b:a0:a2:34:4a:8e:93:
                    bb:a1:82:d8:ac:37:b5:01:69:0e:f5:b9:bf:cc:09:
                    c6:7b:18:89:c7:cc:f3:4f:7f:ec:6b:7a:7d:89:cb:
                    90:b5:05:4b:8d:2b:26:1c:c0:f8:06:36:87:91:45:
                    ab:cb:27:20:bc:54:96:81:d9:9b:82:07:45:a7:20:
                    82:ba:8c:69:80:4c:b1:93:3e:ca:cf:58:9f:ec:ab:
                    62:1c:16:18:7a:64:2b:03:98:33:fd:b5:c5:cb:8d:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:F6:40:66:2C:00:CF:87:28:2F:A6:4E:F2:48:84:90:E3:DD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ec46a1e-55f6-4e3c-9a11-995e422faa1e/3c6127e3-ec65-3de1-8e6e-9b98ac65b937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ec46a1e-55f6-4e3c-9a11-995e422faa1e/0ec46a1e-55f6-4e3c-9a11-995e422faa1e.crl

            X509v3 Authority Key Identifier:
                keyid:BC:CF:70:9A:C5:2E:50:94:24:FB:E2:B8:02:72:57:42:C3:9F:BB:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ec46a1e-55f6-4e3c-9a11-995e422faa1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:1a:db:61:c3:41:af:16:d2:34:2c:f3:5b:68:6d:88:51:
         d4:5e:5f:9c:68:72:dd:c5:cc:fb:a8:81:57:ad:15:25:5c:2d:
         1e:9e:77:14:8b:e4:18:52:5d:84:19:0e:96:95:e8:b3:ad:c7:
         f8:52:b9:b9:1d:ef:83:60:ed:10:9c:28:1b:8b:18:06:7d:8c:
         8c:aa:1a:a8:d4:72:90:75:59:9d:87:e4:27:8a:8f:bb:17:36:
         49:91:93:23:b2:2e:3a:00:a0:0f:35:98:4a:f9:67:0d:cc:0e:
         ca:63:8c:f9:a9:ef:0d:00:16:cc:9f:c7:e0:66:ae:8e:07:be:
         ee:a5:5d:fd:6d:8c:15:2c:e8:34:c4:d7:02:ec:c5:87:46:bc:
         b7:0f:32:06:16:5f:47:3e:a7:e6:36:da:b4:a1:d8:0d:17:c2:
         5f:8e:24:bf:9b:9c:2e:f2:54:21:dc:9b:2b:5e:54:82:74:ec:
         c9:2d:b1:8b:26:40:cb:8a:8a:27:dc:52:54:ed:09:1f:26:9a:
         65:bd:8e:4f:29:c4:b5:3c:5e:03:4c:ac:4c:ea:ad:88:c2:c2:
         3d:65:84:39:60:b2:26:85:28:bd:c9:34:84:ac:fd:c6:69:c5:
         b0:f8:1c:16:e0:2d:3b:30:8f:49:fd:69:0e:6b:b4:71:7b:86:
         5e:4d:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:40 2025 by rpki-client