Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0773eb97-6fed-35ef-8604-dac2e52aacfc.roa
File:                     0773eb97-6fed-35ef-8604-dac2e52aacfc.roa (raw, json)
Hash identifier:          V7s/Ro1fPBEjR4lwD58tGoztTrXQ8ff7jvNDU+kTUm0=
Subject key identifier:   BF:C6:99:F7:84:10:87:92:CC:30:30:C8:30:4C:EF:3E:09:22:86:4C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661D2C8C672CACCF03CB1240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0773eb97-6fed-35ef-8604-dac2e52aacfc.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.17.240.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1d:2c:8c:67:2c:ac:cf:03:cb:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=471c6ebb-e706-485b-905b-a16d58fabd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:da:c7:44:1d:b4:94:28:7f:b4:99:2a:63:
                    46:05:4e:8f:45:9c:b3:0b:f6:3e:4e:21:45:08:58:
                    54:f2:92:e5:a1:a4:7a:13:e1:34:19:51:e0:ae:ab:
                    d4:ac:22:25:fd:8e:d0:ad:56:30:e6:02:28:4d:60:
                    20:52:35:1a:b7:c5:22:c4:3a:02:a4:4f:b0:3b:56:
                    f5:b0:35:8e:06:44:9b:0d:d6:96:25:47:7a:df:dd:
                    f7:b6:bb:d4:05:5f:91:da:9c:62:75:7a:1c:e1:02:
                    67:1f:f5:f1:4c:89:2f:4a:88:ba:ad:5b:79:83:6a:
                    09:2d:b7:fd:28:98:78:73:02:46:5b:b6:5e:33:fd:
                    37:b4:ee:e4:34:47:4d:12:c4:e8:08:65:3b:d6:e7:
                    85:1c:1f:62:c1:a6:ec:02:fa:c6:c5:25:56:12:56:
                    53:12:6f:15:15:81:2a:94:d9:0a:fb:0d:a4:b2:c0:
                    6e:02:0f:0b:07:73:b5:0f:71:0f:d2:9f:20:58:cd:
                    29:58:14:41:de:15:5a:d2:b0:4a:9d:b9:d5:73:ca:
                    59:65:d8:fb:f2:7a:86:d3:7d:ff:0c:c4:c1:1d:a3:
                    93:41:ef:74:28:47:7e:9a:aa:83:d8:7e:a5:6f:05:
                    f1:e2:c3:f8:72:bf:77:63:a1:71:cd:6d:58:d8:2c:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:99:F7:84:10:87:92:CC:30:30:C8:30:4C:EF:3E:09:22:86:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0773eb97-6fed-35ef-8604-dac2e52aacfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:74:9e:e4:f1:7a:77:1b:d7:f5:d5:fb:87:17:e2:68:66:
         92:9f:34:16:5c:c3:c2:d5:06:b5:c5:84:f9:d1:66:ad:f0:65:
         e3:6f:90:52:ae:fb:cb:5f:19:c3:93:69:6e:41:d6:b3:cf:ba:
         d2:65:90:00:29:93:7e:8c:6c:88:61:8e:be:43:49:a6:ca:4f:
         40:28:7d:a2:4d:3f:39:fc:2a:32:8c:d2:d8:0e:81:52:3c:b2:
         c4:5c:4b:b0:b0:c0:9c:0b:9c:2e:e2:cb:21:e8:1b:2d:61:44:
         c5:b1:99:c8:61:13:aa:45:ac:15:ff:67:9e:da:f0:c8:14:ca:
         92:e7:85:1a:53:5b:f6:9d:f4:81:c1:61:28:64:ef:bd:54:45:
         56:ab:8f:23:53:5f:8e:94:da:f4:5b:ef:8e:85:c2:78:6d:e9:
         92:ad:ed:0e:8c:c5:96:33:56:09:08:d7:d8:ae:c1:65:bd:35:
         b4:0b:96:ae:7f:9c:6e:eb:f6:bf:8b:c7:02:e5:aa:ff:1d:7f:
         40:88:c6:5d:ac:d6:ec:4c:ae:db:dc:ae:e2:81:44:f4:26:6b:
         66:58:09:28:e4:56:1c:62:41:9c:d5:b8:97:64:fd:d2:8c:e0:
         54:9b:3e:14:49:70:52:4e:38:19:13:42:3b:18:33:22:f3:3f:
         54:09:df:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHSyMZyyszwPLEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDcxYzZlYmItZTcwNi00ODViLTkwNWItYTE2ZDU4ZmFiZDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktrax0QdtJQof7SZKmNGBU6PRZyzC/Y+TiFF
CFhU8pLloaR6E+E0GVHgrqvUrCIl/Y7QrVYw5gIoTWAgUjUat8UixDoCpE+wO1b1
sDWOBkSbDdaWJUd63933trvUBV+R2pxidXoc4QJnH/XxTIkvSoi6rVt5g2oJLbf9
KJh4cwJGW7ZeM/03tO7kNEdNEsToCGU71ueFHB9iwabsAvrGxSVWElZTEm8VFYEq
lNkK+w2kssBuAg8LB3O1D3EP0p8gWM0pWBRB3hVa0rBKnbnVc8pZZdj78nqG033/
DMTBHaOTQe90KEd+mqqD2H6lbwXx4sP4cr93Y6FxzW1Y2CyFswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/GmfeEEIeSzDAwyDBM7z4JIoZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDc3M2ViOTctNmZlZC0z
NWVmLTg2MDQtZGFjMmU1MmFhY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0tdJ7k8Xp3G9f11fuHF+JoZpKfNBZcw8LVBrXFhPnRZq3wZeNvkFKu
+8tfGcOTaW5B1rPPutJlkAApk36MbIhhjr5DSabKT0AofaJNPzn8KjKM0tgOgVI8
ssRcS7CwwJwLnC7iyyHoGy1hRMWxmchhE6pFrBX/Z57a8MgUypLnhRpTW/ad9IHB
YShk771URVarjyNTX46U2vRb746Fwnht6ZKt7Q6MxZYzVgkI19iuwWW9NbQLlq5/
nG7r9r+LxwLlqv8df0CIxl2s1uxMrtvcruKBRPQma2ZYCSjkVhxiQZzVuJdk/dKM
4FSbPhRJcFJOOBkTQjsYMyLzP1QJ34o=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:33 2025 by rpki-client