Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126aedf6-d743-379a-82c5-256b7fec0029.roa
File:                     126aedf6-d743-379a-82c5-256b7fec0029.roa (raw, json)
Hash identifier:          njzvzO4wdgzTAa5MB5H6raFFWVmdVk7NaFMHP6D44A8=
Subject key identifier:   85:D8:63:B8:AC:10:77:6A:6A:F6:DB:1B:05:9F:9F:55:33:BD:BF:09
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E2856FAFD908FE521BF2E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126aedf6-d743-379a-82c5-256b7fec0029.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     26284
IP address blocks:        207.170.37.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 06:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e2:85:6f:af:d9:08:fe:52:1b:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=042f1f24-4ded-438e-aaad-ff942fc114e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:66:5a:31:9c:1d:33:0d:8e:bf:d3:5e:b8:
                    ed:70:91:b6:3d:aa:84:e5:b3:d8:71:8a:14:b0:7a:
                    7c:4a:68:03:2e:ba:76:3a:db:d2:74:66:82:7e:2e:
                    ce:94:96:8b:2c:b5:24:e5:76:93:83:60:28:f7:65:
                    a2:df:42:cd:61:53:4f:cb:e2:ef:82:85:36:b0:61:
                    24:b2:d2:4c:22:a9:a1:db:b7:5b:a5:12:53:1b:96:
                    7d:8d:fd:ea:24:02:b2:0b:7e:fa:fa:1b:7e:f2:59:
                    19:1c:02:a3:7b:e5:74:cb:a2:20:fa:c9:3b:41:bd:
                    ca:d9:0e:70:62:c1:f8:51:01:9e:9f:3b:40:60:1a:
                    ce:c8:9e:14:52:4e:ff:11:a0:98:44:2f:58:74:3d:
                    e4:f6:29:ff:b7:1e:cf:1d:94:1a:52:bf:bc:e8:d0:
                    1d:b1:6c:53:b8:3d:75:4e:d2:7c:09:c2:8d:b1:11:
                    82:13:eb:b6:3c:eb:67:a4:ee:06:0c:fb:17:2d:31:
                    8b:05:f3:33:70:16:c3:2d:73:b1:3f:bf:32:ba:7b:
                    89:b0:98:04:7e:40:3e:3b:9e:c0:00:04:be:f2:66:
                    6e:3c:7e:ed:bc:cb:8b:7d:9a:fe:9f:9e:a5:56:53:
                    de:02:0a:95:57:45:cc:ce:9d:cf:18:2d:01:06:2a:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D8:63:B8:AC:10:77:6A:6A:F6:DB:1B:05:9F:9F:55:33:BD:BF:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126aedf6-d743-379a-82c5-256b7fec0029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:56:5b:60:7d:f1:65:11:c7:a0:ab:50:e1:8b:b3:4c:9f:01:
         3a:ff:5c:09:7f:b5:b4:8a:bc:d2:99:6b:9f:d1:f3:6d:2a:b2:
         66:fa:62:c8:15:6b:e5:36:53:df:cb:be:dd:8d:c3:35:16:27:
         50:c1:81:4b:68:5e:36:68:78:84:89:88:3d:f4:9d:c5:52:09:
         35:a9:7f:58:4d:73:54:a3:ed:f9:54:e4:85:1e:e2:0f:da:76:
         bf:80:23:64:4c:df:03:11:54:10:45:d0:ae:57:ac:f8:75:8a:
         43:7a:61:6b:c1:27:0a:05:12:c2:24:a5:b5:0f:9b:6c:7c:6c:
         52:7b:0b:e2:8a:e8:d2:5a:45:56:06:6c:68:7a:60:c6:69:b8:
         03:62:fd:22:9f:05:9b:83:a7:3f:ab:64:39:f5:01:5e:99:f5:
         9f:07:d8:c0:98:07:69:c6:74:6a:93:f6:2c:df:30:53:de:01:
         17:ab:76:66:98:d5:15:c9:0e:cc:ee:82:7b:79:b7:ab:bf:a1:
         7a:21:3c:07:e4:19:8d:4d:c3:9f:72:21:1e:93:c2:0e:65:43:
         af:80:e6:24:b1:89:71:bc:60:ab:20:f5:18:df:fb:ae:77:69:
         3e:4d:78:21:b9:6a:07:97:78:7e:30:73:06:08:3d:0f:53:d0:
         9d:47:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:19 2025 by rpki-client