Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6049e149-3faa-3335-9272-2631accc95f9.roa
File:                     6049e149-3faa-3335-9272-2631accc95f9.roa (raw, json)
Hash identifier:          Ew330zwpbu8DeMEYpledHXj/5ov1PLRE71eatntygoY=
Subject key identifier:   69:89:95:29:99:D9:53:EA:50:89:B9:59:C0:73:25:9D:C2:BD:8E:D9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661DF8B4ED16A2669235F440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6049e149-3faa-3335-9272-2631accc95f9.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.21.144.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1d:f8:b4:ed:16:a2:66:92:35:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=babe719f-a8e6-479a-ba96-00900e8fa49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:aa:b2:b1:43:5e:f7:fe:82:8d:50:26:10:
                    6b:b6:29:77:bc:32:81:f9:ff:30:f6:0c:5e:28:2d:
                    e9:52:30:fc:c5:34:f5:ea:06:ae:85:d1:c7:ce:ac:
                    b2:91:d4:81:04:fd:1b:9a:b9:f4:4a:82:45:fd:9f:
                    dd:71:b7:f9:e9:a1:b3:39:a5:6c:09:0b:bf:29:25:
                    72:d7:26:d8:10:35:28:a6:13:c1:7d:63:0c:c6:37:
                    f7:79:5f:47:86:9d:53:43:34:49:0a:51:e5:5b:90:
                    bb:de:8d:8e:3c:0f:94:3d:5c:d0:ae:fc:f1:27:37:
                    10:d5:eb:20:d5:6b:8b:11:8b:c2:c3:b1:e6:3c:95:
                    db:92:91:18:4f:66:58:3b:1a:d0:ad:f4:dc:13:d6:
                    35:1d:04:8a:48:74:14:3b:05:e7:76:c1:03:a0:00:
                    1b:d3:d6:a3:49:04:8d:33:13:f6:63:10:17:62:55:
                    16:8e:ae:e8:ad:29:e7:a7:49:c9:77:e7:45:fe:a5:
                    5c:24:93:15:05:04:7d:1d:4f:29:b2:c8:5a:ef:2f:
                    5b:f6:b1:0c:3c:94:4a:5a:11:da:cc:ce:eb:fa:a9:
                    50:4d:5d:d7:72:40:d2:6b:62:ea:d3:d6:97:c0:1d:
                    c6:ea:0c:db:59:26:9c:d5:ba:47:9f:c0:89:69:8b:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:89:95:29:99:D9:53:EA:50:89:B9:59:C0:73:25:9D:C2:BD:8E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6049e149-3faa-3335-9272-2631accc95f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.21.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:13:b1:93:30:7e:8a:1c:61:50:17:c0:46:8c:8d:d2:c6:
         bc:4e:2e:8c:9d:0d:bd:f0:c4:36:34:a7:3e:30:3a:31:9e:76:
         92:af:ab:09:6d:25:9d:ee:34:1e:39:bf:5d:84:ec:49:7d:e2:
         62:ff:54:46:56:80:54:b4:6e:07:b4:44:b1:ef:0f:f4:ce:7d:
         f7:e5:10:f2:25:8d:38:0d:90:7e:40:ff:a6:f6:92:6d:b4:8d:
         c0:a7:4b:09:12:65:8e:43:9e:4d:86:32:14:cb:c0:64:e1:9c:
         61:f3:8a:c2:e6:94:16:ee:c1:8b:a4:80:5e:71:88:62:bc:57:
         19:e4:de:ec:f6:bf:e6:10:c1:29:07:61:05:5f:93:bf:13:15:
         33:94:27:44:8b:a1:d4:c1:ab:2f:56:68:12:d3:33:6e:d6:ad:
         60:e4:14:d1:95:df:d5:41:82:50:84:c1:a5:a6:e0:46:ea:69:
         92:ec:74:94:c5:f1:47:62:5c:79:80:64:95:32:1d:bf:80:85:
         b4:c2:79:32:d9:60:03:68:82:88:e6:1a:e4:76:58:25:a2:4b:
         6e:c5:07:c3:73:b2:4f:d4:34:ad:a8:89:65:91:dc:ad:3f:2c:
         0a:1e:e6:69:04:4e:ad:aa:4e:6b:fe:20:0a:71:e4:7e:83:97:
         a9:54:a7:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHfi07RaiZpI19EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmFiZTcxOWYtYThlNi00NzlhLWJhOTYtMDA5MDBlOGZhNDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWqsrFDXvf+go1QJhBrtil3vDKB+f8w9gxe
KC3pUjD8xTT16gauhdHHzqyykdSBBP0bmrn0SoJF/Z/dcbf56aGzOaVsCQu/KSVy
1ybYEDUophPBfWMMxjf3eV9Hhp1TQzRJClHlW5C73o2OPA+UPVzQrvzxJzcQ1esg
1WuLEYvCw7HmPJXbkpEYT2ZYOxrQrfTcE9Y1HQSKSHQUOwXndsEDoAAb09ajSQSN
MxP2YxAXYlUWjq7orSnnp0nJd+dF/qVcJJMVBQR9HU8pssha7y9b9rEMPJRKWhHa
zM7r+qlQTV3XckDSa2Lq09aXwB3G6gzbWSac1bpHn8CJaYtuIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmJlSmZ2VPqUIm5WcBzJZ3CvY7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA0OWUxNDktM2ZhYS0z
MzM1LTkyNzItMjYzMWFjY2M5NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzAE7GTMH6KHGFQF8BGjI3SxrxOLoydDb3wxDY0pz4wOjGedpKvqwlt
JZ3uNB45v12E7El94mL/VEZWgFS0bge0RLHvD/TOffflEPIljTgNkH5A/6b2km20
jcCnSwkSZY5Dnk2GMhTLwGThnGHzisLmlBbuwYukgF5xiGK8Vxnk3uz2v+YQwSkH
YQVfk78TFTOUJ0SLodTBqy9WaBLTM27WrWDkFNGV39VBglCEwaWm4EbqaZLsdJTF
8UdiXHmAZJUyHb+AhbTCeTLZYANogojmGuR2WCWiS27FB8Nzsk/UNK2oiWWR3K0/
LAoe5mkETq2qTmv+IApx5H6Dl6lUp98=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:11 2025 by rpki-client