Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9531db4e-1147-30e9-bf64-5a44e867188e.roa
File:                     9531db4e-1147-30e9-bf64-5a44e867188e.roa (raw, json)
Hash identifier:          sw+v+X3zNCd8zgTRL8oXZfqawL3M2ngnk0lgQ8sQxA4=
Subject key identifier:   FF:F0:05:53:93:03:05:4B:2B:7A:EB:0B:AE:64:62:6D:3E:36:8A:F4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551AEF247FBBEC36E9A66240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9531db4e-1147-30e9-bf64-5a44e867188e.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     40399
IP address blocks:        74.10.57.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 06:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1a:ef:24:7f:bb:ec:36:e9:a6:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=ff3cad5a-fbac-4394-8e8f-3bf16bb927d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:67:7f:19:2a:b6:db:5c:54:df:e4:67:fe:
                    0b:00:93:48:71:92:61:68:b7:4a:6b:52:5f:08:8a:
                    55:d3:90:b9:e0:74:8d:a0:1b:64:7a:1c:34:3f:82:
                    7e:85:cc:6e:fb:f9:ee:da:8b:5e:6c:86:61:fa:1d:
                    9d:39:aa:3a:8c:fb:0d:06:76:08:6c:4b:37:8d:cc:
                    81:a8:06:26:19:2d:3e:d7:a5:20:1d:61:92:34:6e:
                    d9:d6:42:e7:25:33:c1:2d:31:0b:cf:a8:cf:d4:d2:
                    7f:61:63:9e:cb:a8:7f:78:6a:e6:ac:db:e3:87:79:
                    3e:f1:93:f7:f9:c4:dc:f0:c1:79:1e:f1:7c:81:62:
                    d3:07:54:f5:b6:9d:84:83:3c:ed:0d:91:10:db:e6:
                    20:22:02:5c:06:f6:99:9e:1e:ad:b2:1e:9d:d5:33:
                    f0:66:b2:ab:c8:c5:e4:c5:fb:1d:62:6b:bc:4d:ab:
                    da:7b:ac:16:e7:13:95:19:65:78:81:09:0d:31:80:
                    75:4c:fc:18:9d:e5:cd:9a:5b:79:f3:86:b8:c7:7b:
                    50:f8:bc:ef:3a:e7:0b:0b:7a:6e:45:12:66:86:6f:
                    31:40:53:71:4c:c4:ff:48:83:e7:d5:e2:68:97:84:
                    1e:93:ad:23:1d:61:1b:a6:41:9c:32:dd:e9:cb:61:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:05:53:93:03:05:4B:2B:7A:EB:0B:AE:64:62:6D:3E:36:8A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9531db4e-1147-30e9-bf64-5a44e867188e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.10.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:17:1b:22:fd:67:34:5c:4b:35:8a:01:18:ed:8c:b8:04:
         0a:7e:a6:96:f9:54:9e:96:bf:bc:d8:04:93:46:bb:72:a0:f6:
         dc:49:10:56:f4:0c:58:57:75:c5:ad:fb:55:d9:02:80:80:52:
         c1:ec:89:74:6c:da:aa:fb:28:fd:1e:c8:ce:1c:6a:f0:92:26:
         96:5a:6e:22:f2:e6:2c:33:23:71:10:d1:f4:8e:ac:a7:70:f9:
         07:ce:0c:1b:0c:6e:e3:a1:6e:8c:ac:27:bd:7b:a4:da:b0:6a:
         6f:23:cd:15:a0:eb:c2:1b:ed:95:62:df:15:2e:6b:5d:ce:00:
         40:7e:38:b2:08:28:02:87:cf:13:b6:1e:74:cc:78:fc:69:84:
         25:e6:3d:27:f8:e0:59:5a:e7:e6:96:92:db:3d:c4:bb:ea:03:
         40:a0:fc:ba:00:a2:4e:91:d8:7a:32:aa:d3:d2:53:a3:77:df:
         d3:3a:42:41:90:0c:e1:d1:a4:2d:eb:de:bb:67:cc:15:6c:a1:
         59:99:2d:2a:43:65:fa:76:6f:40:d7:fb:31:d6:fa:48:09:7f:
         2b:59:72:27:6f:bd:ed:c9:c6:f9:ea:7a:5d:e3:64:3c:db:18:
         00:44:01:4a:01:63:94:34:78:c8:8e:e7:4d:34:e5:21:01:73:
         5c:ab:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:18 2025 by rpki-client