Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ca4d415-cec7-35da-88c7-5fd596c456c8.roa
File:                     1ca4d415-cec7-35da-88c7-5fd596c456c8.roa (raw, json)
Hash identifier:          A30dCBYmmabIZA++SQbwiCfcaqBFJ89COwlCi5i4ZdU=
Subject key identifier:   73:54:66:9C:0E:36:F1:2F:27:39:13:EB:7B:60:04:46:F9:BC:79:D4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DB440E4A6AD746AFCF7C7BFD0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ca4d415-cec7-35da-88c7-5fd596c456c8.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 18 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.189.112.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:40:e4:a6:ad:74:6a:fc:f7:c7:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2028 GMT
        Subject: CN=33179813-5a9f-46b2-9a6e-88ada1092c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:17:1b:ad:92:72:f8:c0:ba:7e:03:af:9d:
                    5e:54:f6:7a:37:58:48:e7:95:1b:cf:14:5d:4c:19:
                    87:dd:78:60:14:af:a3:bf:54:ec:f1:f3:ef:2a:bf:
                    dc:f3:c5:ac:94:29:d3:69:59:1f:9e:54:fa:51:fe:
                    84:81:7d:fa:d6:10:ee:59:4f:32:12:f6:54:6f:f4:
                    31:c6:3a:62:17:65:19:93:42:02:11:e1:1e:16:09:
                    c1:6c:40:96:80:b6:20:2d:2d:b9:19:07:e5:54:ed:
                    de:36:01:04:44:5e:05:64:83:5b:b5:63:87:a1:6a:
                    16:8b:36:4d:7b:10:01:5a:6f:28:8a:30:3b:20:cf:
                    37:7f:5d:52:0b:44:03:48:1f:0f:ac:bc:55:72:dd:
                    fa:04:ee:ec:7f:77:83:8c:72:a8:ae:77:1d:b8:38:
                    2e:c5:70:64:ca:15:a8:94:3e:dc:62:0a:4a:87:8a:
                    80:75:f4:30:88:4b:9d:80:24:eb:74:e2:6f:62:35:
                    43:8f:c9:b3:7a:5c:7f:b3:26:fe:42:6f:e4:66:aa:
                    06:97:43:53:b1:a2:d4:df:bb:4f:c9:03:7d:03:73:
                    09:98:93:4f:3b:6c:4e:1f:83:6f:c3:67:50:1d:a6:
                    87:25:b7:f7:f4:6d:fc:b5:b8:8b:ec:9c:cb:9f:e4:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:66:9C:0E:36:F1:2F:27:39:13:EB:7B:60:04:46:F9:BC:79:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ca4d415-cec7-35da-88c7-5fd596c456c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:95:af:01:a6:f5:61:b4:6a:7c:0f:40:a9:72:d6:d7:e0:
         c8:67:f9:8e:fe:06:c0:f6:3e:d6:4c:39:31:b8:e6:35:e5:64:
         f6:2f:8b:9e:03:17:bb:3c:2e:4b:83:ff:bf:88:07:f5:f3:76:
         9f:3d:6c:5c:37:f6:da:94:7e:e2:40:10:99:00:2f:f6:ff:d7:
         8e:65:bf:b1:b6:14:3b:b1:37:17:36:82:85:5a:2c:82:af:c4:
         72:c0:1e:66:1a:91:6f:d8:85:3f:ca:5b:8e:0f:bf:66:4f:06:
         f0:37:14:69:c7:36:ee:cf:2e:e0:d5:be:dc:37:8a:d0:34:07:
         31:27:64:06:20:d3:a5:5a:67:8f:d3:ca:92:eb:5e:c8:b7:fd:
         95:eb:08:02:6b:36:97:94:c5:9e:89:48:ed:74:a2:d6:d0:70:
         9d:bb:a2:60:32:6f:a9:02:07:f4:01:74:51:c8:8e:f1:a5:cd:
         0c:26:ae:75:6a:b5:96:91:89:98:c6:8a:42:e2:ae:78:91:9a:
         d9:53:d1:b1:52:f8:c9:4a:ec:2e:a4:f7:51:c5:37:18:76:9e:
         9a:36:39:d0:27:5d:94:01:06:cc:e7:25:9b:99:e0:ec:29:24:
         5e:2c:f3:67:ad:b2:61:a3:a6:0a:79:11:7c:b1:9a:79:1a:e9:
         56:f5:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:34 2025 by rpki-client