Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/445b8ea2-bd7b-3159-9511-ac23ddd7a672.roa
File:                     445b8ea2-bd7b-3159-9511-ac23ddd7a672.roa (raw, json)
Hash identifier:          5pMAZmjTkeVGFO8qwW2PagO9A7SPutPM2DjfPS6UNxU=
Subject key identifier:   3E:A8:56:98:64:92:3D:0B:15:FB:B5:08:44:71:93:5B:8C:02:C0:C7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FBAD1C8215B273DF532E320
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/445b8ea2-bd7b-3159-9511-ac23ddd7a672.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     14125
IP address blocks:        63.254.26.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 06:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:ba:d1:c8:21:5b:27:3d:f5:32:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=8f89c8d4-bd26-49f8-8f6c-0673265365d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:a9:6d:af:fd:54:dd:de:71:47:11:12:8a:
                    2d:2e:aa:ee:b9:cd:96:cd:14:e3:f1:e0:56:bd:86:
                    b9:6e:2f:ca:b6:6f:f8:9c:8a:19:9e:f9:86:9f:b2:
                    d5:65:0c:3a:ac:3d:de:18:0c:90:8b:27:7b:02:cb:
                    bd:28:28:09:c6:2c:19:dd:b7:7b:9b:51:4d:ad:6f:
                    01:af:06:b1:61:f7:ae:98:4e:b2:92:2b:ef:75:ff:
                    45:60:5f:53:9e:be:e5:01:30:fe:7a:04:74:2d:62:
                    8e:09:40:19:45:b0:6b:bd:18:af:99:55:bd:37:fd:
                    d7:82:fe:a4:4b:8a:7c:57:e3:db:3c:85:4f:0e:7f:
                    d9:34:bc:8b:17:f2:ef:71:08:64:41:84:7f:ce:9c:
                    c9:13:73:74:c6:65:18:0f:1d:00:4e:db:19:f5:cb:
                    1e:89:be:db:37:54:cf:5a:73:f9:1b:0f:20:f2:2f:
                    bb:88:02:c0:3c:bc:84:0b:af:11:f7:28:a5:e6:ec:
                    50:92:87:35:45:2a:1b:73:ce:8c:3e:cc:64:76:9a:
                    69:a2:f0:80:d7:d8:67:92:be:89:e3:ef:6f:bd:47:
                    36:ca:d6:50:41:a8:d7:f9:05:77:19:f8:cc:de:11:
                    43:3f:64:08:96:00:0b:36:0c:5c:47:60:73:66:f1:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A8:56:98:64:92:3D:0B:15:FB:B5:08:44:71:93:5B:8C:02:C0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/445b8ea2-bd7b-3159-9511-ac23ddd7a672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.254.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:36:92:cc:08:76:3d:a4:ae:ab:04:c8:cf:a1:46:b4:fd:fd:
         ba:81:ff:b0:72:e5:d2:16:be:a6:c9:e0:4a:63:f8:84:29:7e:
         6a:1b:d1:8b:4b:45:cf:3a:73:2b:af:3d:fd:e8:0f:ac:d8:fb:
         42:92:64:c7:8f:78:4d:23:ec:54:0a:9f:10:e6:ca:8e:4c:6f:
         c0:8d:0a:a4:8a:0b:4c:30:c1:cb:ce:c1:2a:28:41:a1:6d:c3:
         a6:4b:70:5f:b9:6b:b9:51:24:4a:f1:d1:e6:56:b8:b9:ce:cc:
         03:a4:2a:af:56:11:f8:22:a2:e8:43:90:70:9b:85:da:35:88:
         68:f3:d5:45:e3:f9:3b:c6:f4:6c:9f:24:b8:70:14:b7:19:3a:
         41:d4:de:f8:53:ba:2c:b1:ad:b2:9b:a6:0a:5f:b1:51:a5:c4:
         20:40:0c:aa:44:ac:b0:e7:2e:91:fb:94:d4:60:0d:d4:fd:86:
         0f:79:68:37:f3:6c:43:8f:36:12:1b:1d:6a:4c:c5:34:8e:58:
         07:0d:07:65:7d:85:3d:1b:d6:71:e6:b1:6b:9c:6d:73:42:71:
         da:e3:2a:7c:09:22:9d:7d:08:c8:29:bb:31:92:83:d3:63:5b:
         70:d0:99:fe:f6:78:f4:18:59:7e:ba:28:cc:e2:20:36:8d:cb:
         88:52:84:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PutHIIVsnPfUy4yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGY4OWM4ZDQtYmQyNi00OWY4LThmNmMtMDY3MzI2NTM2NWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcKpba/9VN3ecUcREootLqruuc2WzRTj8eBW
vYa5bi/Ktm/4nIoZnvmGn7LVZQw6rD3eGAyQiyd7Asu9KCgJxiwZ3bd7m1FNrW8B
rwaxYfeumE6ykivvdf9FYF9Tnr7lATD+egR0LWKOCUAZRbBrvRivmVW9N/3Xgv6k
S4p8V+PbPIVPDn/ZNLyLF/LvcQhkQYR/zpzJE3N0xmUYDx0ATtsZ9cseib7bN1TP
WnP5Gw8g8i+7iALAPLyEC68R9yil5uxQkoc1RSobc86MPsxkdpppovCA19hnkr6J
4+9vvUc2ytZQQajX+QV3GfjM3hFDP2QIlgALNgxcR2BzZvGkJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6oVphkkj0LFfu1CERxk1uMAsDHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDQ1YjhlYTItYmQ3Yi0z
MTU5LTk1MTEtYWMyM2RkZDdhNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/4aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk2kswIdj2krqsEyM+hRrT9/bqB/7By5dIWvqbJ4Epj+IQpfmob0YtL
Rc86cyuvPf3oD6zY+0KSZMePeE0j7FQKnxDmyo5Mb8CNCqSKC0wwwcvOwSooQaFt
w6ZLcF+5a7lRJErx0eZWuLnOzAOkKq9WEfgiouhDkHCbhdo1iGjz1UXj+TvG9Gyf
JLhwFLcZOkHU3vhTuiyxrbKbpgpfsVGlxCBADKpErLDnLpH7lNRgDdT9hg95aDfz
bEOPNhIbHWpMxTSOWAcNB2V9hT0b1nHmsWucbXNCcdrjKnwJIp19CMgpuzGSg9Nj
W3DQmf72ePQYWX66KMziIDaNy4hShJ8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:39 2025 by rpki-client