Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a62d7ce-3a3f-36d5-9cec-297a32abea29.roa
File:                     2a62d7ce-3a3f-36d5-9cec-297a32abea29.roa (raw, json)
Hash identifier:          1qQZix31YemVEiL+U1EWYB9dmp5gk/7w6gopjteVXsQ=
Subject key identifier:   0E:68:38:05:A1:1C:7D:91:32:67:85:38:9D:DE:35:01:15:70:F9:CF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FB93A4B13E2E15FF2CB1840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a62d7ce-3a3f-36d5-9cec-297a32abea29.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     53286
IP address blocks:        63.139.84.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 06:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:b9:3a:4b:13:e2:e1:5f:f2:cb:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=79a38a5f-9b10-437f-934c-c1b8cd7d6928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:b7:36:45:48:7c:cb:9e:fa:28:1e:24:4e:
                    2c:25:86:e5:60:83:71:10:a2:9e:f8:80:27:8e:32:
                    10:df:55:99:a4:e0:e8:4c:5f:5f:b0:84:f0:17:a5:
                    25:b4:7e:d4:07:9d:d6:d2:cd:ff:ee:53:c6:ea:29:
                    89:f9:18:1e:6a:4b:21:cb:e4:bc:2f:53:4d:6a:9c:
                    f5:40:0b:1b:70:71:fb:95:a4:5e:79:36:33:8e:5f:
                    9f:fc:cc:83:06:06:d0:78:bd:f0:d7:a8:83:4f:e9:
                    41:c6:57:95:65:5c:1d:1a:5c:bb:17:bb:7a:ef:18:
                    ac:79:5d:85:ef:e1:7d:91:63:c3:38:a7:1f:0e:22:
                    63:d0:fb:cc:b6:d8:ad:92:1c:55:b9:43:2d:fa:bf:
                    06:96:8c:32:04:40:e4:09:87:72:ce:2e:e4:34:c2:
                    59:5f:13:e8:d5:54:cf:5b:aa:02:5d:a8:07:3b:19:
                    02:23:ec:2b:c8:15:e0:fb:f0:bc:00:0e:44:28:72:
                    2f:99:6e:ca:ff:34:32:dd:c0:98:13:0c:cc:a5:a5:
                    19:69:7f:3c:c5:58:0b:a0:c0:2c:75:90:ef:02:f6:
                    8c:d7:d7:22:2c:3d:71:0c:89:c5:c3:7e:97:65:0a:
                    88:87:75:09:5a:a1:8a:e3:f6:33:d4:b9:f8:e0:d6:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:38:05:A1:1C:7D:91:32:67:85:38:9D:DE:35:01:15:70:F9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a62d7ce-3a3f-36d5-9cec-297a32abea29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.139.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:62:b2:82:b1:db:eb:66:f2:76:c2:34:88:df:97:19:5e:f2:
         a7:71:65:ab:4d:0e:44:d6:40:47:0d:af:c6:62:16:2a:d3:f5:
         c8:fa:bf:c6:4c:e1:cf:0d:69:7c:d9:37:fa:1c:62:10:63:68:
         cb:c8:c6:39:be:32:03:64:be:c1:46:43:37:53:6e:50:9e:8e:
         25:90:be:0e:f3:ad:92:da:09:c3:5b:04:f9:3b:f0:a9:13:37:
         aa:f4:a2:35:2b:ae:75:d6:ce:3b:a1:5f:b2:1f:da:ad:b1:43:
         53:07:1d:bd:b3:b7:79:b0:1a:42:8b:4f:c3:ee:11:be:1c:fa:
         11:85:a9:8c:1a:de:8e:4a:db:81:64:26:fc:ed:22:50:f8:18:
         e0:4b:d1:29:7c:e9:b9:f9:77:1f:f9:8a:8f:a3:9f:50:79:4a:
         3f:d7:db:62:d1:36:4d:87:62:a4:30:85:1a:ec:a1:bc:c5:db:
         b5:2f:b0:c9:64:23:d4:74:1e:38:2f:bf:9b:b3:3f:31:cb:7f:
         4b:1a:11:08:29:45:bc:6b:83:35:92:d6:82:5d:37:6c:fc:d7:
         63:34:2c:6e:96:3d:a6:80:4b:04:a5:ea:1f:18:36:2d:d3:52:
         1b:73:ee:a2:23:3c:5d:c6:42:5a:10:e3:bc:6e:6a:95:75:d4:
         8d:ca:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:59:36 2025 by rpki-client