Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7daa5acb-36d3-3cb9-835b-c3c5483e0a16.roa
File:                     7daa5acb-36d3-3cb9-835b-c3c5483e0a16.roa (raw, json)
Hash identifier:          XZ7CkhkgcEl0CWqntph3hrKggAT5eSSgIjpwMNs4L98=
Subject key identifier:   2E:C7:07:0D:0C:F6:0C:3B:81:A3:00:40:30:B0:BD:BD:46:86:D9:36
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551DDDEC473BAF47596F4D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7daa5acb-36d3-3cb9-835b-c3c5483e0a16.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        205.147.236.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 05:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1d:dd:ec:47:3b:af:47:59:6f:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=c42fa5f7-adc5-4891-8580-2a76a7301377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:76:fb:8e:4f:ce:0a:2c:ab:50:ac:3e:4e:
                    71:02:cd:3a:29:7a:74:ba:30:a2:8d:8d:f2:1c:9e:
                    b0:31:9b:29:2b:27:41:00:60:a5:14:49:97:8d:36:
                    16:33:60:31:44:05:ec:9c:5b:60:56:05:cc:42:09:
                    40:7b:df:2f:71:d1:d6:95:34:f5:13:9e:ab:ee:08:
                    0e:27:48:cf:82:96:db:59:6d:00:dc:3a:ad:b0:24:
                    34:a6:d1:91:c7:54:92:d6:9f:d8:42:0c:2f:c8:d2:
                    14:f7:f8:ee:93:ff:25:43:3a:7c:bf:e8:1c:cd:19:
                    8b:45:2b:d7:d3:ab:e3:dc:fe:17:b3:1a:61:c2:57:
                    76:7a:b3:74:8f:d3:60:59:fb:bd:6c:1f:3b:5d:60:
                    d0:39:72:2f:15:0a:fb:fb:58:bf:be:b8:17:7d:16:
                    69:ce:75:f4:f1:e7:8e:17:ab:8b:11:6a:1d:33:40:
                    e5:b7:ee:89:3b:20:a4:c6:e9:12:99:0e:6f:5a:0c:
                    82:e3:1f:2a:45:6a:8f:e3:94:a8:10:93:c8:35:f6:
                    d5:ee:0c:1b:e8:68:85:6b:6f:e7:dc:26:bc:47:ec:
                    ae:fc:8a:ef:2f:fe:e4:55:eb:96:0f:b0:6a:eb:08:
                    d8:c6:77:3c:99:b5:d9:61:3b:99:21:62:4c:c8:4e:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:07:0D:0C:F6:0C:3B:81:A3:00:40:30:B0:BD:BD:46:86:D9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7daa5acb-36d3-3cb9-835b-c3c5483e0a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:9f:7a:49:46:43:14:b3:a8:e5:dd:e8:d4:e8:1e:1b:de:
         51:a9:92:8a:5b:82:7a:18:ad:ed:27:b5:dc:99:bc:dc:da:88:
         bc:27:84:5a:a0:30:35:63:f5:bd:a4:39:89:99:fc:a1:7e:44:
         24:3c:c5:21:f1:c1:0d:30:44:f7:38:ab:3b:23:f9:f8:86:56:
         73:3f:07:14:bc:2a:15:72:9b:cc:9f:ae:3d:fc:09:06:16:9a:
         ce:d1:3d:9e:2c:76:e4:02:cf:ec:7e:7e:e2:e3:48:c8:e8:b0:
         b8:c6:8e:86:4e:a5:a9:53:5b:31:8d:59:ba:bc:cd:46:05:b0:
         85:e3:bb:b9:4b:8b:0c:b9:63:ee:b4:16:4a:eb:fb:3a:8f:e6:
         28:d9:20:87:c6:40:48:30:3b:5e:65:1e:68:ac:96:cc:ea:0e:
         aa:20:86:12:51:d1:45:69:86:1d:d1:d2:ed:ae:f1:89:c0:16:
         0e:21:14:82:98:b3:49:89:aa:aa:22:9b:be:92:7c:68:66:5f:
         cb:a9:ab:33:34:dd:90:56:23:de:67:a9:da:67:0c:1e:1f:2d:
         54:49:4d:70:ee:b3:6d:0d:18:dd:60:ad:fe:72:26:77:7c:b8:
         10:2e:e4:fd:3e:f8:56:f8:2a:ae:60:fb:b8:21:43:2a:2d:ac:
         16:40:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:14 2025 by rpki-client