Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98c037f2-8e27-3d5f-a7df-0686511f9de7.roa
File:                     98c037f2-8e27-3d5f-a7df-0686511f9de7.roa (raw, json)
Hash identifier:          oBsgE3XZrLum/t7Vr38TH9ign15QqTwvfI/HE/vvr7g=
Subject key identifier:   B4:F4:4E:31:C4:38:EF:39:40:14:4A:38:40:8A:A2:32:0E:4F:74:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D210F66B56FE3DEE5E216100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98c037f2-8e27-3d5f-a7df-0686511f9de7.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        198.14.192.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Thu 20 Feb 2025 16:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:10:f6:6b:56:fe:3d:ee:5e:21:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=eeda0e45-1fa3-4c8d-84c9-04257b751818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:75:09:9f:88:dd:56:d1:7a:ed:31:23:02:
                    98:8e:0d:ad:0e:d0:49:81:f6:57:93:8c:2e:f1:2c:
                    7e:92:fa:fd:cb:b5:ea:34:ad:59:eb:01:36:40:e9:
                    ca:05:bf:31:ba:a3:e7:c5:0b:48:02:c2:1c:45:d2:
                    28:5e:8e:4c:ed:c8:30:bf:bd:3f:e3:8a:c5:f2:32:
                    43:7a:ba:24:57:bc:0d:08:71:c6:d2:de:92:20:70:
                    27:ad:0b:17:77:38:84:10:33:b8:29:e0:3d:11:90:
                    6f:d7:33:a6:46:d4:bf:be:b5:11:30:b7:58:ce:b6:
                    74:81:b8:7f:ee:70:f6:f2:08:89:04:e1:18:0c:44:
                    3d:e6:82:26:73:2f:54:5d:dc:ac:2c:9a:b3:e7:51:
                    33:05:a2:11:f8:bc:42:a3:f1:12:ef:f4:ba:a5:d0:
                    32:f2:4e:b4:c5:56:37:66:2a:e6:8d:2d:43:96:8e:
                    43:b6:c0:45:e9:d6:dc:cb:b3:91:80:82:7e:76:31:
                    72:c2:4b:92:c4:73:4d:fe:2d:8f:ef:80:85:90:da:
                    24:e4:3b:5d:20:8e:0e:c0:bd:77:28:80:d0:61:8d:
                    c9:b0:d7:40:b4:60:7d:68:6f:1f:f9:fd:87:3e:4c:
                    13:07:d7:26:60:da:4d:d6:f3:52:3a:79:79:b7:83:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:4E:31:C4:38:EF:39:40:14:4A:38:40:8A:A2:32:0E:4F:74:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98c037f2-8e27-3d5f-a7df-0686511f9de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:c7:75:dd:7a:b0:8f:3e:3d:32:26:3e:71:f2:50:df:d5:
         90:79:cf:59:3c:b6:66:2d:2e:1e:ae:73:4b:8d:22:e0:1c:7a:
         3c:0e:f8:e2:68:cd:57:f0:aa:60:5f:49:bf:ae:d5:c1:5f:04:
         61:fd:f3:5e:7b:83:b9:08:d8:4a:7e:5e:c6:5c:26:af:54:d5:
         6d:a3:59:8d:4a:3f:b9:df:22:0d:5e:5f:3c:6f:c0:de:13:5e:
         58:93:5b:b3:e9:e1:b0:fa:50:3c:52:22:69:f4:19:01:25:81:
         31:02:ff:0c:f7:f9:1c:25:01:93:28:58:70:aa:4e:20:d9:10:
         44:bc:2b:09:41:29:c9:95:f6:54:48:32:a4:99:82:88:7b:44:
         dc:cf:4e:b3:dd:99:05:7b:69:0c:79:b7:e8:00:70:57:be:78:
         ba:ba:ed:6a:9f:ef:d5:41:d8:e9:0a:0b:ea:0a:d6:5f:f5:76:
         aa:5a:7f:e0:48:b3:84:c1:c9:46:f3:68:94:b6:ff:a8:87:e4:
         f8:2d:3d:2e:6c:5e:6f:b5:fe:2f:3a:81:dc:58:82:47:44:ac:
         ca:b6:7e:20:8f:0e:ac:7a:9b:60:d7:87:86:56:4e:e4:90:fd:
         7b:d4:c4:2e:c7:02:c2:61:c9:62:a2:08:32:e2:8e:55:1f:b6:
         90:e3:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:29 2025 by rpki-client