Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5187ad4-be4b-3dfb-89bc-0cf956125590.roa
File:                     f5187ad4-be4b-3dfb-89bc-0cf956125590.roa (raw, json)
Hash identifier:          GR6cvcyAa30pPmD9XF0Kl5fC3+lmhTHIgecfGZ8Ztjg=
Subject key identifier:   FC:F8:DD:4C:0B:E7:75:05:9E:9C:81:99:12:98:29:C1:B2:27:6B:D4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D9A37886B06A815584FD3300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5187ad4-be4b-3dfb-89bc-0cf956125590.roa
Signing time:             Tue 11 Feb 2025 19:06:40 +0000
ROA not before:           Tue 11 Feb 2025 19:06:40 +0000
ROA not after:            Mon 12 May 2025 18:06:40 +0000
asID:                     401152
IP address blocks:        96.126.137.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Feb 2025 17:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:a3:78:86:b0:6a:81:55:84:fd:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 19:06:40 2025 GMT
            Not After : May 12 18:06:40 2025 GMT
        Subject: CN=91295b46-eeef-4f5e-845c-785d6ffbbe02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:c2:92:b1:ee:dc:f9:c9:93:d2:11:7c:6f:
                    0f:17:cd:9b:ef:d8:f6:5a:ff:92:ee:84:4f:76:3b:
                    68:01:4e:08:8f:2f:6d:4f:6a:22:16:9e:3f:56:fa:
                    85:a7:ff:d6:df:cc:66:bf:3b:b2:91:35:43:1f:13:
                    c8:36:ce:f8:82:62:33:f0:10:01:9b:d0:a5:0d:1e:
                    f7:63:54:10:8b:93:50:cb:a4:8d:ad:46:47:2a:99:
                    9e:43:cf:7d:da:be:06:fb:05:20:2d:20:7d:26:37:
                    94:32:0a:aa:a8:8c:67:8e:73:d6:0e:f9:22:db:75:
                    e4:44:19:68:a5:90:99:b9:a5:b5:33:b4:e9:f8:a3:
                    41:c8:9e:70:3a:22:e9:f0:c5:e3:40:bb:cd:35:5c:
                    49:d2:15:b6:78:1a:57:98:36:ee:97:57:ba:d6:9d:
                    45:ab:47:41:5d:40:17:14:7c:d1:c8:e0:bf:f6:49:
                    17:4d:86:23:24:6d:13:ff:8b:49:65:15:cc:7a:a8:
                    9e:84:ad:db:c5:3a:3e:08:86:73:91:a1:53:77:a4:
                    00:f8:f7:f9:77:1f:90:15:c6:35:70:c5:e5:e1:c3:
                    87:5c:76:ac:2f:bd:b3:ca:7b:66:28:03:98:ee:ce:
                    93:ab:f0:4a:9c:60:c9:82:29:6b:af:c8:b7:5e:43:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:DD:4C:0B:E7:75:05:9E:9C:81:99:12:98:29:C1:B2:27:6B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5187ad4-be4b-3dfb-89bc-0cf956125590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:0a:5a:8c:a6:7f:05:80:5d:15:4e:32:c6:f9:c1:5d:6c:
         ab:67:8a:d1:92:e0:41:15:8a:3a:7b:b6:eb:cf:3b:70:50:38:
         20:b1:31:4c:bf:71:3c:fc:fd:06:08:59:93:37:4d:dc:7e:99:
         87:90:91:fe:06:bb:ce:e9:b5:5a:b3:d4:df:1f:29:a6:93:05:
         e6:47:0a:c7:a8:7b:72:b7:62:e4:81:91:3a:30:7d:6d:e3:c3:
         e5:ff:b5:f4:57:e4:86:33:a0:77:2e:0b:56:bc:b7:b6:49:51:
         5a:f4:d0:12:e7:c3:95:86:1c:a4:86:fc:c1:e6:9c:c6:9d:4d:
         02:48:b0:44:83:58:6f:de:6c:ba:57:b0:46:ac:9e:63:cb:1d:
         c8:9a:21:3d:37:39:b2:a2:f6:ea:63:ef:1e:d6:db:19:a0:92:
         7e:b5:ff:70:f0:58:07:9f:8b:87:d2:e9:b7:d8:e9:b8:7d:89:
         43:43:14:6f:f4:93:f2:e7:67:30:5a:38:71:4b:a7:ae:a5:c7:
         33:37:23:93:a3:13:ef:31:17:1c:03:5d:fc:1a:ba:c4:58:8a:
         56:b0:24:f4:05:67:17:5c:82:e6:63:03:cf:f6:a4:8d:99:f8:
         cd:c0:7a:04:00:dc:0f:54:11:4e:1e:2e:72:14:e1:b7:14:92:
         66:8c:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:26 2025 by rpki-client