Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07669959-39c5-32b3-92ef-db84392b196f.roa
File:                     07669959-39c5-32b3-92ef-db84392b196f.roa (raw, json)
Hash identifier:          CxkSIjeYHe2R/5eXASC3sRTK8UPwGLvp0rUWHfXclbc=
Subject key identifier:   A0:88:7D:F6:BB:0D:7A:F9:B4:74:6C:CB:8E:94:80:8E:92:E6:83:78
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FBBFD02D222F76A9F3BD5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07669959-39c5-32b3-92ef-db84392b196f.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        64.61.0.0/17 maxlen: 17
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:bb:fd:02:d2:22:f7:6a:9f:3b:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=5d12b6be-941c-4d3c-b14c-c835674244fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:19:19:2c:85:d4:58:3e:d0:26:6e:b6:af:
                    99:19:78:c9:09:33:4e:fb:ab:77:aa:d6:2a:12:a6:
                    05:d5:97:7d:a4:11:ba:3e:dd:9a:97:37:71:6f:c0:
                    b8:b4:38:c9:f2:29:06:8f:df:4d:91:b1:f7:b6:c5:
                    e7:e5:9d:9c:6e:83:ae:84:56:81:32:10:78:8c:8b:
                    8e:df:49:6d:f3:54:69:a4:7b:0a:cc:81:fa:2b:b4:
                    9e:07:c1:bc:8a:41:83:d1:79:c1:60:0e:6a:74:10:
                    6c:9e:e7:bb:5f:ce:95:3c:5f:62:84:c1:ae:40:ed:
                    06:14:11:65:f1:fa:d7:e0:6e:8a:9c:78:67:32:62:
                    2f:ab:0e:51:b7:77:1d:cb:63:96:50:fd:21:59:97:
                    fe:b6:47:60:45:33:aa:5f:5f:4e:b8:ff:35:46:3b:
                    8b:bd:b2:d1:54:fb:71:82:b6:c1:b2:27:13:fe:61:
                    fe:12:dc:2f:0a:b1:1c:1b:33:27:b4:9d:50:9b:c8:
                    ce:13:77:e5:40:21:85:fe:7b:b7:20:ce:8a:c1:23:
                    64:b7:23:93:b1:82:d6:04:e6:2d:b0:4a:40:9a:23:
                    ed:52:a1:0a:f0:79:b5:7b:cb:68:81:b8:0e:62:cb:
                    c4:87:17:e5:70:b1:e6:ce:40:5c:4c:3d:a3:ff:66:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:7D:F6:BB:0D:7A:F9:B4:74:6C:CB:8E:94:80:8E:92:E6:83:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07669959-39c5-32b3-92ef-db84392b196f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.61.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:53:91:46:55:01:0d:9b:fd:52:3d:97:e9:a6:8d:e6:dc:0c:
         02:28:d2:dd:2a:ab:3a:08:28:b1:b9:9d:5b:ee:e4:3d:36:a4:
         77:b6:1a:4c:45:65:bc:47:d1:7a:36:60:fb:f9:6c:24:93:87:
         6f:fa:0b:99:ee:58:a6:4d:15:11:a8:2e:0b:69:84:1c:dc:39:
         42:d1:d1:0b:bf:9e:55:d7:9a:91:da:36:cd:8f:3c:f2:4e:88:
         35:29:f6:02:f3:06:7a:35:36:2b:cf:1f:f8:f5:b9:3d:b5:40:
         87:de:c6:ad:c7:79:50:3d:42:1e:9a:4c:a9:04:3a:d5:ba:9f:
         62:d3:01:42:62:f0:22:98:6f:60:1a:1e:63:08:cc:02:2f:6f:
         6c:e9:11:fe:e6:5f:6e:76:26:82:67:95:2c:07:d6:14:d2:cc:
         d1:c5:b3:48:47:9a:c9:20:25:b1:33:b9:b7:67:28:4e:47:08:
         85:fb:84:e6:91:00:2c:2a:d7:be:11:46:66:b7:b3:ec:2b:94:
         77:81:8f:1a:30:a1:54:1c:28:1b:83:67:d6:6f:25:10:a5:b7:
         98:c2:4c:45:3d:bc:7b:d0:58:94:2d:ba:55:b4:0d:e0:c3:4f:
         ab:cc:f3:42:6c:b9:65:60:ad:43:ba:7f:0a:37:91:09:b7:f2:
         9b:6d:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:05 2025 by rpki-client