Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/b61ed9b9-4ca1-37df-800e-4b434a5b5915.roa
File:                     b61ed9b9-4ca1-37df-800e-4b434a5b5915.roa (raw, json)
Hash identifier:          oFT8ppgQWxPVh/XgTFEga753HJgkjmjoFGR9RCCekaE=
Subject key identifier:   21:35:CD:B8:01:AB:A2:BF:A2:0C:E1:68:B8:24:FA:A3:AD:5C:A8:11
Certificate issuer:       /CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
Certificate serial:       010D0C9F43285848DD5E30E9FF8FB4287792B810
Authority key identifier: 77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/b61ed9b9-4ca1-37df-800e-4b434a5b5915.roa
Signing time:             Thu 13 Feb 2025 03:10:19 +0000
ROA not before:           Thu 13 Feb 2025 03:10:19 +0000
ROA not after:            Wed 14 May 2025 02:10:19 +0000
asID:                     46295
IP address blocks:        63.135.172.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Feb 2025 06:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:5e:30:e9:ff:8f:b4:28:77:92:b8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
        Validity
            Not Before: Feb 13 03:10:19 2025 GMT
            Not After : May 14 02:10:19 2025 GMT
        Subject: CN=c2a7bbbc-6d0a-4839-8113-682ebab87760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:66:06:61:62:53:35:46:5d:8a:3d:c9:68:
                    66:86:87:8c:21:7d:2f:95:61:c8:d1:28:6e:2e:ba:
                    be:18:4f:c4:f5:5f:5d:15:98:aa:c1:22:9d:8b:f2:
                    48:18:93:4b:65:88:2a:d5:5d:77:6c:f8:81:b3:aa:
                    41:44:07:6d:56:8d:2a:48:5b:0f:a5:a8:75:d8:a9:
                    21:08:a9:7c:07:9a:18:01:61:e6:6a:3c:eb:85:bd:
                    2b:79:42:41:51:16:23:be:7f:52:59:aa:6d:c0:19:
                    2c:c0:d8:58:5d:b1:07:08:2d:ca:0b:bb:17:0b:37:
                    ba:37:87:b6:1a:03:d7:9a:3e:d4:51:2b:7b:d2:d4:
                    9e:6f:6e:4c:b0:2f:f9:bd:88:f1:8f:c7:9c:46:75:
                    cc:e3:e8:66:17:b4:65:8c:f7:6a:ee:29:aa:f7:c8:
                    9e:bc:e9:c0:24:1b:2b:b0:75:86:ce:1b:bc:03:ec:
                    f2:12:85:c1:38:c8:71:83:71:86:ac:da:1b:df:6b:
                    3b:82:29:64:6e:00:46:cf:19:ef:2f:d6:bf:50:78:
                    8a:75:18:b5:d0:7e:2c:72:1e:55:d5:58:f1:12:a1:
                    43:fe:fc:a0:93:1b:f2:50:8a:db:e0:c8:51:9a:c7:
                    13:b8:df:9d:f5:ff:8a:41:3e:aa:02:ff:a2:fd:d2:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:CD:B8:01:AB:A2:BF:A2:0C:E1:68:B8:24:FA:A3:AD:5C:A8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/b61ed9b9-4ca1-37df-800e-4b434a5b5915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.crl

            X509v3 Authority Key Identifier:
                keyid:77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:59:77:be:e6:1e:98:eb:06:56:12:6f:31:6d:04:a2:75:5e:
         23:f9:2a:a9:3c:b4:95:4a:37:6c:f9:c1:96:38:d2:97:0b:0b:
         2d:f4:1e:0f:3d:48:36:29:48:3a:87:a8:8c:39:62:fc:0f:90:
         3b:ab:ed:80:8f:70:d8:74:68:92:33:89:da:ba:f2:d2:b4:b7:
         bc:2c:63:27:64:f0:d8:02:f0:fd:34:c9:ff:99:d4:c0:40:91:
         8e:b5:e8:71:01:43:d5:ff:45:12:72:8b:55:f6:f9:bb:bf:91:
         68:16:d4:e5:9a:8d:3e:8d:e1:0e:14:5f:dd:0e:40:17:16:1a:
         0b:fe:44:66:56:70:ec:22:da:e3:35:14:74:9f:91:ee:5c:25:
         c4:c7:44:1d:01:a7:46:28:24:17:60:f2:eb:19:79:7c:b4:7b:
         32:4c:bb:de:84:ea:b2:1e:2f:1c:9e:84:42:67:a5:d2:d0:d0:
         32:83:eb:a1:eb:59:46:a5:d2:a5:7d:8e:d1:e7:08:69:62:fa:
         1f:58:4d:08:ca:5c:31:db:03:d5:2e:66:29:0d:33:fa:6c:41:
         24:4f:aa:75:85:1c:d7:07:af:1e:c4:82:df:17:e7:e2:13:28:
         c2:cb:65:7a:83:b5:78:09:3c:72:5e:e6:d8:61:bf:b4:11:a6:
         dd:32:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:08 2025 by rpki-client