Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/788a0a7d-c636-3820-86fd-697658375cbe.roa
File:                     788a0a7d-c636-3820-86fd-697658375cbe.roa (raw, json)
Hash identifier:          y2r2tQs+sjRulE28xKqJUwYLxWW/ONiXpp0WKGrZdo0=
Subject key identifier:   9C:B8:C9:74:0C:09:C9:EB:9A:BE:84:1F:DE:32:5A:08:B5:32:ED:5B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661C542B70A6D1BE9703E280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/788a0a7d-c636-3820-86fd-697658375cbe.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.16.24.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1c:54:2b:70:a6:d1:be:97:03:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=1848f360-cbc9-40ca-9481-b6717add52b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:cd:b3:9e:12:da:9e:6c:fb:d5:92:2c:18:
                    c9:c2:5f:29:02:ab:87:47:68:84:9c:aa:4f:7d:d9:
                    0b:1c:f4:d1:fd:ab:66:dd:db:3f:d1:75:74:6f:3e:
                    bb:f3:a7:4c:d5:c7:5d:d0:f4:4d:0a:8e:56:6f:06:
                    75:11:49:28:24:4f:84:3e:ce:bd:40:fd:25:96:4e:
                    78:58:cc:e0:39:1a:ce:09:0d:13:dc:f2:80:75:75:
                    d7:30:c3:04:48:94:73:61:7f:eb:f5:84:1d:2e:fa:
                    fc:5d:1b:f4:e5:3a:74:f5:f3:77:e4:fd:b7:11:04:
                    36:cb:18:02:1c:91:ae:83:99:2b:13:55:b0:27:57:
                    23:55:9d:52:13:ea:3e:ae:7f:50:3c:e9:15:de:f0:
                    82:2f:32:d0:9b:1e:1a:77:8f:86:93:51:de:de:dd:
                    e6:4b:68:d1:26:4b:a7:ee:2c:da:e5:46:6f:1d:69:
                    e9:f9:d8:70:25:7b:2c:e5:36:bb:e0:d6:22:0f:11:
                    02:d7:1e:f9:e9:b9:6e:88:28:56:6c:67:ed:dd:07:
                    da:7b:1f:2e:fa:2a:80:1f:7f:d7:bc:cb:79:e7:ed:
                    30:42:66:bb:ca:9e:1a:64:17:43:9b:91:17:8f:ea:
                    fb:42:59:c0:90:5d:4d:76:e5:1d:4e:f1:4a:dd:31:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:C9:74:0C:09:C9:EB:9A:BE:84:1F:DE:32:5A:08:B5:32:ED:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/788a0a7d-c636-3820-86fd-697658375cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:ac:cd:9e:f5:ea:76:4e:46:ae:7b:17:80:a8:20:19:46:
         0d:fc:c7:dc:d9:18:17:e3:3f:75:13:41:c4:7a:86:ab:a3:62:
         d9:45:5a:39:38:23:1b:51:cb:12:07:5f:cb:63:74:27:51:a1:
         19:ef:c7:cc:30:21:4e:ad:b2:27:e8:df:51:a8:28:a4:96:4d:
         88:da:79:f5:6a:c4:cf:67:59:91:ee:dc:b3:34:5e:3e:4e:3f:
         80:a2:50:8d:51:04:58:bf:74:98:b8:30:ad:47:5a:67:46:11:
         aa:67:31:68:35:9c:ee:e6:6c:9e:eb:0d:52:fe:a8:63:67:6a:
         dc:61:e7:a7:79:cd:98:7f:07:a6:10:a9:f0:5d:9a:2d:49:82:
         cf:f9:73:de:c9:4e:b5:dc:b4:07:20:b0:c0:54:b6:66:c1:1f:
         6f:d0:d9:5a:d0:ee:f8:1f:75:7f:1c:b4:54:a8:fe:83:a6:d0:
         86:bc:8f:0e:5a:71:b0:40:e6:b5:98:99:fc:8d:4f:1e:9d:96:
         48:1f:ea:a5:e7:b4:f0:7e:87:9f:98:e9:77:db:ef:ef:33:1f:
         e6:d4:05:5f:a4:16:2d:98:61:30:77:fb:ad:53:1c:9b:a8:a4:
         df:23:e9:c0:10:7b:75:87:21:4c:ae:f6:23:a2:c1:fa:0e:e4:
         9a:b7:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:49 2025 by rpki-client