Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52796f3b-e0de-3d8b-a774-b2a1d85ffcc2.roa
File:                     52796f3b-e0de-3d8b-a774-b2a1d85ffcc2.roa (raw, json)
Hash identifier:          t0eLsIrCCzqA8a114FOCSob0UMAMQxoi6AeHpDvF1Ss=
Subject key identifier:   47:5A:72:00:B2:C4:58:4C:46:B8:D2:7D:DD:0A:CF:1A:8B:71:F5:36
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661CE0349BF35182E6DCF280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52796f3b-e0de-3d8b-a774-b2a1d85ffcc2.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.16.168.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1c:e0:34:9b:f3:51:82:e6:dc:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=3fb41605-4ebe-48ff-a2bd-8113cd5f8e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:3f:ef:43:32:59:db:ad:b2:8f:a1:15:33:
                    9d:12:81:3c:12:13:d7:ba:a5:d2:42:96:66:4b:e4:
                    24:e9:94:8e:f2:4f:d3:31:58:eb:34:b4:ff:65:1d:
                    5d:6e:b1:a6:e8:a1:7d:19:96:bf:10:0b:89:a3:a1:
                    80:38:a2:11:d7:eb:55:f6:28:c8:89:50:45:c0:84:
                    b0:96:8c:33:66:b3:1d:c4:5b:c5:3e:b7:af:b9:65:
                    cb:60:19:62:f7:cd:fa:35:b7:d4:db:e3:c9:b8:48:
                    4e:c4:bb:4e:9e:79:fa:51:c3:11:e4:13:17:c1:d9:
                    33:c3:93:32:21:d4:5b:9f:79:bc:b2:35:3b:4a:2a:
                    6e:ef:8f:0b:4b:c7:cd:87:cf:43:0b:ca:63:42:eb:
                    b4:98:da:49:14:ff:96:1e:13:c0:c1:69:5a:f8:57:
                    e6:13:5d:7c:bb:40:e5:82:b0:cf:62:e0:1c:1c:b5:
                    2a:84:40:35:ff:2c:2f:f2:ec:e1:21:9c:ac:8f:3e:
                    4a:4e:50:53:35:39:6b:2d:57:38:1e:bb:fd:a5:bf:
                    cd:e0:a1:e0:17:83:16:18:3f:95:74:b9:d7:27:55:
                    84:f6:a4:96:46:bd:40:0e:73:c1:3a:47:5c:03:22:
                    87:79:3d:35:f1:fb:b5:a7:e1:d1:89:a8:a9:b1:0f:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:72:00:B2:C4:58:4C:46:B8:D2:7D:DD:0A:CF:1A:8B:71:F5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52796f3b-e0de-3d8b-a774-b2a1d85ffcc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:69:93:d8:91:2b:15:f2:d5:73:c6:cc:c6:a2:32:a7:75:c7:
         9e:53:fb:dd:64:82:cd:bc:d8:53:a3:14:34:ef:3d:ed:32:21:
         b2:38:31:8b:77:58:68:e0:3c:25:52:b0:89:35:8f:87:56:79:
         ad:c7:85:7e:c2:80:14:54:68:8d:45:8e:ae:09:a8:74:46:7c:
         4b:34:fd:dc:82:6e:72:0a:cc:b1:53:5e:07:1b:76:7b:3d:4a:
         e7:57:2e:3d:48:a7:12:24:3e:65:54:47:f6:d7:68:98:2e:4a:
         18:b7:76:86:c1:20:e9:cc:f8:47:69:63:d6:bb:5e:fb:26:ea:
         91:1e:94:c6:91:73:97:c1:36:05:a2:06:7d:be:49:08:92:22:
         95:13:bb:ce:10:e1:13:14:b0:aa:be:a9:e8:1a:d7:39:85:8b:
         a9:de:78:06:67:d2:17:6b:ee:72:cf:3f:51:d0:2c:d3:ea:46:
         a2:c6:76:91:60:7c:62:ad:5a:2c:e6:48:be:69:55:00:ef:df:
         87:a1:1e:05:b6:7f:fc:57:5a:59:0c:af:fe:ef:1d:6e:d3:31:
         c4:0e:70:8c:5d:0b:3c:ce:77:61:12:f5:d3:0a:20:23:21:69:
         9f:f0:68:54:ab:c8:80:53:71:80:6c:c1:2c:0f:70:59:e3:e8:
         94:d3:fb:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHOA0m/NRgubc8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2ZiNDE2MDUtNGViZS00OGZmLWEyYmQtODExM2NkNWY4ZTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE4/70MyWdutso+hFTOdEoE8EhPXuqXSQpZm
S+Qk6ZSO8k/TMVjrNLT/ZR1dbrGm6KF9GZa/EAuJo6GAOKIR1+tV9ijIiVBFwISw
lowzZrMdxFvFPrevuWXLYBli9836NbfU2+PJuEhOxLtOnnn6UcMR5BMXwdkzw5My
IdRbn3m8sjU7Sipu748LS8fNh89DC8pjQuu0mNpJFP+WHhPAwWla+FfmE118u0Dl
grDPYuAcHLUqhEA1/ywv8uzhIZysjz5KTlBTNTlrLVc4Hrv9pb/N4KHgF4MWGD+V
dLnXJ1WE9qSWRr1ADnPBOkdcAyKHeT018fu1p+HRiaipsQ/XwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdacgCyxFhMRrjSfd0KzxqLcfU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI3OTZmM2ItZTBkZS0z
ZDhiLWE3NzQtYjJhMWQ4NWZmY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINpk9iRKxXy1XPGzMaiMqd1x55T+91kgs282FOjFDTvPe0yIbI4MYt3
WGjgPCVSsIk1j4dWea3HhX7CgBRUaI1Fjq4JqHRGfEs0/dyCbnIKzLFTXgcbdns9
SudXLj1IpxIkPmVUR/bXaJguShi3dobBIOnM+EdpY9a7Xvsm6pEelMaRc5fBNgWi
Bn2+SQiSIpUTu84Q4RMUsKq+qega1zmFi6neeAZn0hdr7nLPP1HQLNPqRqLGdpFg
fGKtWizmSL5pVQDv34ehHgW2f/xXWlkMr/7vHW7TMcQOcIxdCzzOd2ES9dMKICMh
aZ/waFSryIBTcYBswSwPcFnj6JTT+7E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:31 2025 by rpki-client