Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b147658-ae6a-36d3-b79e-f6aafc8ec03d.roa
File:                     0b147658-ae6a-36d3-b79e-f6aafc8ec03d.roa (raw, json)
Hash identifier:          dHR0KoILvfePvedwzPMey87qi8zNc8b+lMVFl5NIc7Q=
Subject key identifier:   FE:16:0C:D8:7F:16:31:0B:EC:34:1C:6E:D3:79:F4:74:B1:F6:4A:A3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66172E00902099762905CBC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b147658-ae6a-36d3-b79e-f6aafc8ec03d.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        69.30.160.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:17:2e:00:90:20:99:76:29:05:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=0bcbdf62-3e86-45d8-98f1-b0099b011345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:07:dc:67:8c:92:97:90:83:01:85:63:18:
                    13:58:ae:88:39:24:44:8f:36:17:67:cc:be:1b:15:
                    4e:d4:9e:c7:70:4e:51:db:2e:70:fe:38:6b:b5:4a:
                    dc:e9:64:b3:3e:08:2f:3d:5e:9e:11:c8:24:eb:50:
                    98:8f:66:aa:4e:5f:59:4e:b4:98:df:1f:9c:d1:71:
                    00:6b:48:dc:e4:05:ea:cd:19:de:f8:14:54:f6:c1:
                    9b:e6:48:98:5c:cf:77:e5:92:8d:62:18:f2:f6:24:
                    21:8b:fc:0d:67:cc:2f:7c:07:95:14:ef:43:2c:b2:
                    1a:fd:38:a3:ef:a0:09:54:f3:2f:32:fa:c7:13:c3:
                    2d:30:7c:50:8d:04:fc:ea:3b:2f:1e:6f:41:46:29:
                    c9:6f:64:5a:b8:c6:d9:70:da:37:81:a2:79:db:54:
                    cb:01:1d:72:5e:b3:da:36:32:68:de:c3:aa:6e:b8:
                    b7:3a:2e:2e:04:46:c8:8a:ae:12:27:a9:d2:74:bc:
                    1d:66:ee:d0:dd:9a:7f:64:d2:37:b8:8d:1a:4c:1a:
                    95:e8:58:55:68:03:b0:89:1f:4c:dc:74:a2:17:b4:
                    ab:1d:c7:7a:67:9b:e9:e4:6e:87:21:94:0a:dc:14:
                    f5:82:ad:d8:b2:4d:60:15:51:c5:f2:61:81:ba:2d:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:0C:D8:7F:16:31:0B:EC:34:1C:6E:D3:79:F4:74:B1:F6:4A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b147658-ae6a-36d3-b79e-f6aafc8ec03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:3a:49:6c:4b:69:bd:02:d6:bf:39:85:f4:0c:6d:7e:8b:
         d0:56:fb:b1:22:f5:0b:f6:a0:70:b0:bd:9c:43:20:01:3a:56:
         69:e2:8b:2a:db:76:a5:a3:a2:ce:9e:55:89:b7:6a:87:f6:86:
         05:93:8d:ee:50:77:19:31:1a:db:bd:54:83:2c:57:67:6d:4c:
         90:8f:a9:95:74:dc:fd:dc:0d:0e:85:98:58:1b:ee:a6:8f:87:
         f6:06:e7:34:16:35:dd:0e:a7:dc:a8:ba:91:73:8d:e0:3c:89:
         75:b3:bb:7f:4f:2e:34:57:17:87:07:56:ee:f9:af:e8:22:21:
         c8:db:29:8c:36:1f:49:91:7b:82:7b:ad:15:37:2b:6f:bd:b5:
         b9:dc:58:d0:1a:c8:ae:92:e8:ae:03:04:50:f2:52:df:4b:df:
         c6:a4:6f:9c:a3:71:7d:4a:54:76:e9:c7:de:a6:47:92:f5:84:
         ce:a1:aa:32:1b:ec:50:09:90:35:52:83:c6:e8:20:76:a7:b5:
         44:b9:48:22:c0:a2:90:9a:48:28:fb:fb:63:94:77:dc:24:24:
         67:b5:5c:22:9b:55:df:55:e0:6a:d5:38:56:d2:39:93:81:45:
         20:6c:9c:9f:d6:64:0a:e6:7d:33:79:cb:5c:bc:7d:c4:3f:78:
         4f:fc:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:43 2025 by rpki-client