Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50a7f726-392c-3e00-9376-24f7c1d1128e.roa
File:                     50a7f726-392c-3e00-9376-24f7c1d1128e.roa (raw, json)
Hash identifier:          SDCR1paLv+HRZ5dbHmf3BtlDWijjzAxfwrqUte7DzhA=
Subject key identifier:   7D:7B:88:8A:3D:C5:87:6F:BE:84:AA:34:78:74:7F:AD:04:44:BA:57
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D2111C1414D35E7853A1B5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50a7f726-392c-3e00-9376-24f7c1d1128e.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        67.140.192.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Wed 19 Feb 2025 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:1c:14:14:d3:5e:78:53:a1:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=0617c909-d402-4204-b95e-659c1a78ed8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:f4:bc:8a:b8:ef:aa:72:46:62:c4:f3:9a:
                    6b:1b:f1:fc:34:49:af:2e:97:b7:03:76:87:5e:d8:
                    32:ee:d5:fe:2f:9d:34:07:7f:fa:70:68:6b:63:2c:
                    cb:58:fc:ab:7d:6e:ae:1f:00:70:38:67:fb:1d:f4:
                    f2:e4:3e:ad:69:1b:df:28:94:b6:26:62:a3:3e:a8:
                    e2:64:00:ec:c5:b7:13:0b:81:0c:47:f9:30:64:a1:
                    86:44:2a:be:34:c7:ae:43:22:3d:3c:01:b7:01:a8:
                    72:86:c3:7b:72:dc:22:50:3a:cc:9f:5e:3c:7c:58:
                    8d:6d:32:46:20:cb:1b:5c:7d:2f:76:8a:6a:3d:5b:
                    c3:55:5b:95:8d:d2:27:40:5a:28:37:f7:0e:93:66:
                    59:d6:62:fb:e7:d3:65:9c:56:3c:69:99:8e:0f:a7:
                    83:8f:cf:27:5b:ef:ab:37:4b:25:c1:e5:e9:84:a1:
                    c8:02:06:97:a3:67:50:c2:d4:75:ae:6b:cb:3d:6c:
                    82:7b:e6:9a:f7:8c:f9:7d:9e:00:0d:8a:2e:44:4c:
                    25:c0:a8:e9:c9:28:1f:72:ca:40:72:43:20:e2:0e:
                    c6:46:57:c2:b2:ad:fb:0f:7a:4c:3f:10:c8:81:3c:
                    ae:62:03:f6:3a:3b:3c:d2:e3:28:54:08:64:13:99:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7B:88:8A:3D:C5:87:6F:BE:84:AA:34:78:74:7F:AD:04:44:BA:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50a7f726-392c-3e00-9376-24f7c1d1128e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:94:48:4f:c3:00:76:c9:00:11:4a:50:f4:eb:ed:ae:f2:d1:
         07:12:49:ab:bc:d3:2e:33:bb:f0:63:ca:ae:fd:17:e1:de:88:
         92:97:c2:81:02:f3:30:ac:0b:72:d7:b4:aa:73:91:57:ae:12:
         19:d9:7e:6b:9a:46:07:01:bb:a5:77:db:be:b2:ae:e3:31:34:
         cd:d2:3f:3a:94:51:bd:80:4c:53:25:d1:b1:27:1f:25:cd:57:
         25:be:4a:52:b9:82:14:62:04:29:10:15:1c:63:9d:d7:1b:2c:
         6f:8b:86:a4:aa:f4:02:d9:8b:40:83:e5:21:14:bf:5d:c7:67:
         63:f1:31:44:b1:d3:66:8a:93:56:80:3d:b0:20:fe:b6:94:d1:
         50:27:f5:42:0b:ad:ae:77:46:34:49:1e:00:94:38:a8:76:cc:
         4d:8f:c8:8a:86:87:ff:ce:64:56:ff:22:fb:46:3d:2e:cc:b8:
         a5:2c:14:d7:b3:12:f6:ca:42:1b:bc:15:6f:a7:f8:03:ba:13:
         43:05:c5:58:5f:36:1c:3d:b5:3a:8c:07:41:45:fa:89:5e:00:
         00:e9:ed:40:98:25:15:4b:e6:55:df:c7:f2:c6:b6:9d:5e:3e:
         db:0c:ad:47:83:40:93:9a:82:6d:49:95:d0:d2:8d:ff:06:7e:
         6b:37:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:53 2025 by rpki-client