Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/833d1a5d-24c2-3551-8ed3-0e46026f15c0.roa
File:                     833d1a5d-24c2-3551-8ed3-0e46026f15c0.roa (raw, json)
Hash identifier:          9k/O0QvcGPBwxR0qxNX35bbIcb+XR170938NCgVl3Ns=
Subject key identifier:   CB:BD:0C:7D:7D:D9:EC:09:9D:80:7C:2C:58:45:1A:45:9D:5E:7A:4A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584906A7D9562DA7B03FC115C380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/833d1a5d-24c2-3551-8ed3-0e46026f15c0.roa
Signing time:             Thu 27 Feb 2025 22:06:52 +0000
ROA not before:           Thu 27 Feb 2025 22:06:52 +0000
ROA not after:            Wed 28 May 2025 21:06:52 +0000
asID:                     401152
IP address blocks:        96.126.176.0/21 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 18:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:a7:d9:56:2d:a7:b0:3f:c1:15:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 27 22:06:52 2025 GMT
            Not After : May 28 21:06:52 2025 GMT
        Subject: CN=44ef52ab-4bda-4bc6-b709-9aa46181a807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:49:6c:55:12:f3:95:a3:6a:61:ff:0a:bd:
                    33:ba:72:cc:ff:30:d1:73:c7:cf:ff:28:8b:24:84:
                    e7:34:ee:99:e4:4a:8e:9f:c6:60:96:c0:d6:59:1d:
                    59:85:b2:7a:9e:fd:52:b9:ac:b8:a7:94:2b:e4:01:
                    a4:52:09:97:99:fa:f8:aa:65:22:ab:c9:6b:ae:86:
                    05:d9:37:52:fa:4f:da:11:6f:e1:97:19:2a:ab:e5:
                    4f:ab:ba:4e:1e:94:f3:cf:9f:c1:fb:cd:29:bb:2d:
                    c2:fd:8a:d5:a0:a6:f8:fc:0f:72:6a:ea:61:2b:1f:
                    15:6a:b8:5f:b8:9d:54:17:2d:fd:2f:9b:68:1d:c1:
                    35:2c:2b:bc:59:34:5e:e8:1a:a4:f3:d1:07:1b:b5:
                    f7:70:ba:e0:42:10:93:ef:9c:e1:a7:ca:d1:7d:bd:
                    44:86:f8:af:aa:4f:12:61:f6:10:7f:02:d8:d8:ae:
                    9e:ea:18:86:24:d2:8c:dc:a5:b0:1c:f8:f5:55:f5:
                    17:3c:dd:ce:eb:70:b4:1a:66:ef:cd:34:48:bd:0e:
                    12:2c:32:78:e1:5c:99:e6:89:7a:47:ba:f5:5b:93:
                    9f:f8:a9:98:46:d4:68:94:21:51:22:7a:f1:de:f1:
                    01:0d:bf:27:24:09:85:95:a0:c2:76:3e:9d:0f:69:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:0C:7D:7D:D9:EC:09:9D:80:7C:2C:58:45:1A:45:9D:5E:7A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/833d1a5d-24c2-3551-8ed3-0e46026f15c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:b6:73:8f:40:59:60:9d:33:4e:d7:44:80:56:6f:81:e4:
         ad:be:c6:c9:4a:ce:49:7c:d3:55:a3:18:f4:c2:45:97:95:37:
         1c:78:ab:62:79:48:96:b7:00:67:04:d0:ae:46:b7:d9:f6:a8:
         6b:a5:02:c1:db:77:c9:ab:2c:d1:5e:a7:b6:7b:3a:90:92:7b:
         2a:e0:54:2b:3e:c7:0a:54:31:d9:92:64:b6:53:f2:0f:e5:b0:
         71:f7:66:ae:56:89:f3:ca:33:03:1d:22:80:e1:2f:61:b9:f5:
         d9:fa:98:f7:21:42:42:1f:39:58:6d:40:1f:e1:c5:9b:9f:7c:
         f1:e0:44:9f:b3:62:63:31:0c:03:b4:9b:b9:9f:14:2c:fb:c7:
         ed:6d:7e:4a:40:1c:86:14:91:67:d7:d0:77:a8:47:85:9c:77:
         7b:be:ea:3e:5b:b8:3d:da:70:c1:bb:1d:20:04:19:7c:24:20:
         dc:71:f3:d3:0b:1e:ce:87:cb:26:cb:42:b0:06:0b:3d:28:68:
         f0:4d:6e:e7:81:a2:6a:8e:8c:48:fe:26:ef:e7:4e:e9:4f:af:
         2e:4b:73:df:54:45:9f:76:83:1f:12:19:7b:5c:f0:7c:e7:b1:
         82:fa:58:de:a0:7d:67:d5:4d:34:bb:68:fd:60:1c:e8:8f:64:
         0d:fb:a4:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGp9lWLaewP8EVw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDIyNzIyMDY1MloXDTI1MDUyODIxMDY1MlowLzEtMCsGA1UEAxMk
NDRlZjUyYWItNGJkYS00YmM2LWI3MDktOWFhNDYxODFhODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjZJbFUS85WjamH/Cr0zunLM/zDRc8fP/yiL
JITnNO6Z5EqOn8ZglsDWWR1ZhbJ6nv1Suay4p5Qr5AGkUgmXmfr4qmUiq8lrroYF
2TdS+k/aEW/hlxkqq+VPq7pOHpTzz5/B+80puy3C/YrVoKb4/A9yauphKx8Varhf
uJ1UFy39L5toHcE1LCu8WTRe6Bqk89EHG7X3cLrgQhCT75zhp8rRfb1Ehvivqk8S
YfYQfwLY2K6e6hiGJNKM3KWwHPj1VfUXPN3O63C0GmbvzTRIvQ4SLDJ44VyZ5ol6
R7r1W5Of+KmYRtRolCFRInrx3vEBDb8nJAmFlaDCdj6dD2m3rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMu9DH192ewJnYB8LFhFGkWdXnpKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODMzZDFhNWQtMjRjMi0z
NTUxLThlZDMtMGU0NjAyNmYxNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYH6wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbutnOPQFlgnTNO10SAVm+B5K2+xslKzkl801WjGPTCRZeVNxx4q2J5
SJa3AGcE0K5Gt9n2qGulAsHbd8mrLNFep7Z7OpCSeyrgVCs+xwpUMdmSZLZT8g/l
sHH3Zq5WifPKMwMdIoDhL2G59dn6mPchQkIfOVhtQB/hxZuffPHgRJ+zYmMxDAO0
m7mfFCz7x+1tfkpAHIYUkWfX0HeoR4Wcd3u+6j5buD3acMG7HSAEGXwkINxx89ML
Hs6HyybLQrAGCz0oaPBNbueBomqOjEj+Ju/nTulPry5Lc99URZ92gx8SGXtc8Hzn
sYL6WN6gfWfVTTS7aP1gHOiPZA37pNU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:50:49 2025 by rpki-client