Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ab4cc22-96ad-35fb-9b89-a75a9caa4005.roa
File:                     5ab4cc22-96ad-35fb-9b89-a75a9caa4005.roa (raw, json)
Hash identifier:          l2XyZd3B9zTajox9KKYu2C58MSSmsO4HXsZB9Kw8N04=
Subject key identifier:   B8:98:5B:9B:89:62:C0:68:B3:68:EE:1E:8C:EC:47:9A:90:4B:81:45
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848C150F00CF76326358034FC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ab4cc22-96ad-35fb-9b89-a75a9caa4005.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     216040
IP address blocks:        136.0.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Feb 2025 17:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:f0:0c:f7:63:26:35:80:34:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=1e7d24bb-8d24-4238-9778-59fe75cfe3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:94:9c:b0:fa:a6:4c:d7:7d:79:1d:8b:e0:
                    a2:01:d2:7e:0a:38:6a:19:c4:7e:d8:98:30:44:a3:
                    2a:0d:0d:76:6b:6b:d7:17:ed:2f:b1:64:f8:19:a9:
                    60:ea:40:c9:7b:a7:51:df:98:fe:90:58:75:ce:31:
                    00:10:07:65:d7:1d:5a:2c:f2:b1:eb:67:8b:0c:c1:
                    70:88:40:8f:d1:de:b7:62:09:3f:58:1f:69:46:e6:
                    fa:61:69:62:3e:95:a9:eb:1c:bf:56:e5:17:80:80:
                    00:8e:89:73:a9:ca:88:5f:68:e1:f1:cc:56:45:c2:
                    e2:ae:22:df:c9:9f:43:db:05:bf:56:d9:50:6a:19:
                    7f:27:8b:b5:a7:9d:42:62:d1:1f:2f:c5:79:2f:e2:
                    e4:bf:97:72:0e:5f:0f:4f:7f:4e:2e:9b:39:de:0d:
                    80:35:b1:24:6c:e7:4d:72:85:25:c0:77:95:c9:ed:
                    a5:bf:92:85:53:b6:a2:0a:2a:65:84:31:e0:08:73:
                    13:97:10:12:e5:2f:aa:cd:25:35:f5:d0:b7:f4:22:
                    05:5a:56:3c:41:89:de:a1:d8:e3:9c:2f:ae:98:60:
                    ce:1c:39:84:bc:28:8f:c8:a7:07:7a:2a:96:1f:8b:
                    f9:95:3a:39:88:ce:6d:af:ca:5a:da:5d:d8:db:7a:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:98:5B:9B:89:62:C0:68:B3:68:EE:1E:8C:EC:47:9A:90:4B:81:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ab4cc22-96ad-35fb-9b89-a75a9caa4005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:98:37:b0:11:86:97:41:1a:4c:38:f9:13:02:d7:a2:e3:e2:
         49:3b:e5:31:d1:d6:72:33:04:84:f1:3f:5c:39:52:a5:fb:de:
         d5:fc:a5:fb:2b:cd:18:d2:66:4b:3c:71:69:c9:c0:b2:ff:d6:
         74:20:dd:0d:bc:c3:17:f5:75:10:fc:38:c0:3a:29:ae:6a:38:
         3c:12:8e:c2:df:79:9b:ac:20:83:e1:db:59:21:1e:e3:76:3b:
         4c:c2:eb:e0:3f:2e:e6:df:f2:2d:c3:3d:78:bb:e1:93:09:86:
         80:dc:14:2b:32:9c:15:5f:e3:00:51:fe:35:38:ba:22:ec:4f:
         57:a9:b4:1b:6f:f7:14:49:c8:9b:af:f0:af:37:1d:2f:3d:57:
         49:e0:82:62:d8:ea:47:3a:f5:22:58:1a:d9:61:7a:51:da:37:
         30:16:34:a4:47:cc:93:69:49:e4:5f:a8:54:ae:e1:7b:97:20:
         07:ec:e8:71:c7:f0:c4:ac:24:86:01:ea:c0:61:49:8c:54:0b:
         3d:03:ed:cd:2b:13:92:12:30:28:80:f5:9a:8e:e7:86:94:31:
         72:14:e5:b3:84:f5:2f:f6:4c:08:03:da:c3:8d:2d:18:70:79:
         a4:13:4b:38:7e:23:0a:83:5d:31:54:df:47:52:3b:4f:ce:3f:
         9c:a6:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:03:59 2025 by rpki-client