Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/284aaef6-6099-3008-aed8-ecd523a0c977.roa
File:                     284aaef6-6099-3008-aed8-ecd523a0c977.roa (raw, json)
Hash identifier:          j+LPGlgAm4QWS7+y0hswMsrP8dMEB2PqQpmzb7d6bbc=
Subject key identifier:   59:09:9B:6E:22:19:71:94:8D:CA:E6:51:30:AA:69:1F:DA:44:5E:C9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583FEB333D6A156275B8D31EA620
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/284aaef6-6099-3008-aed8-ecd523a0c977.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 07 Nov 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        173.187.96.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:eb:33:3d:6a:15:62:75:b8:d3:1e:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Nov  7 05:00:00 2028 GMT
        Subject: CN=913fd0bf-5402-4338-b4d6-fb1407b0be9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:ae:fc:ab:ae:20:29:ec:89:82:7a:92:a5:
                    94:54:b7:4e:82:81:cc:6a:c7:c5:7d:99:0f:77:74:
                    8f:60:d0:5f:aa:1d:a1:ca:7a:b5:08:07:69:6b:fa:
                    f4:dd:c8:83:ce:5c:d8:0b:3f:dd:22:cd:4c:d7:9b:
                    f7:53:f0:6b:a6:66:15:b5:66:67:56:69:35:cc:87:
                    e7:9a:2b:60:d5:9a:cc:fd:73:02:30:ae:3c:63:f1:
                    1b:71:0a:e0:c9:dd:67:3c:ab:e1:eb:c7:e7:0e:88:
                    ed:4f:83:76:c7:24:d8:8c:d2:5f:25:66:58:e8:d2:
                    10:fa:b5:29:ea:1c:3b:43:a4:59:d1:63:61:0a:3f:
                    fd:f4:75:9a:ef:d4:06:5b:d9:e9:63:98:5f:4e:7e:
                    27:36:75:6f:04:0c:05:15:b5:75:94:93:e6:3a:3a:
                    4c:80:06:aa:da:1a:b8:d3:04:47:e9:87:f4:55:1b:
                    63:e0:a4:22:7b:0d:e7:62:a3:9d:e6:0e:83:9c:22:
                    9d:ca:2c:32:82:f0:86:25:bb:26:b7:00:ff:db:ea:
                    62:77:78:c2:8b:fc:67:6a:e6:14:1e:1b:62:b5:b3:
                    0f:43:98:0c:e1:25:00:55:f6:37:46:2f:79:54:f2:
                    9e:47:72:ac:43:97:d3:90:e0:1d:4b:82:10:b6:25:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:9B:6E:22:19:71:94:8D:CA:E6:51:30:AA:69:1F:DA:44:5E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/284aaef6-6099-3008-aed8-ecd523a0c977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a7:ff:b1:f0:59:66:63:5d:32:ff:8b:b5:6b:70:ac:98:79:
         82:e6:7e:16:56:c4:e9:3e:6f:7b:c2:c9:4d:31:af:36:21:81:
         01:ec:ab:3c:ee:85:2e:93:4b:d5:36:c5:53:bb:b5:99:ab:64:
         17:a3:a4:68:ea:3e:17:ba:61:a2:cd:15:9b:8d:ff:50:03:5e:
         71:e4:22:3f:7e:ca:ba:0c:0f:4d:03:d4:8b:b5:09:f4:c2:0e:
         ac:7d:8b:b0:d6:df:56:09:55:c0:63:5b:67:e7:bc:9b:2d:30:
         a0:69:5e:da:07:a0:35:f4:22:4b:ed:8e:6b:93:b4:62:f2:34:
         ac:3e:73:9d:71:ef:08:19:fc:c8:1f:ad:99:9a:9a:7b:e4:11:
         85:4c:ce:11:6c:8b:63:36:25:80:7e:8f:a2:28:7b:3e:b3:59:
         9b:ba:87:7f:5f:3c:4c:17:fc:b6:39:b9:0f:bb:4f:5e:48:d6:
         e3:e8:40:42:92:cd:82:11:04:58:d9:94:f5:aa:a5:71:3e:4d:
         bf:90:b5:6a:dc:c3:ff:40:51:84:77:39:5b:36:c3:4b:56:b2:
         25:a4:cd:60:c0:95:b5:61:55:09:2d:02:e3:6d:a2:8c:b5:7f:
         ff:a2:43:f4:5b:ae:31:2c:ef:37:79:ab:06:26:22:c9:94:72:
         8d:2d:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:05:58 2025 by rpki-client