Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5b1971d-b355-3b88-b736-222a1897ca3f.roa
File:                     a5b1971d-b355-3b88-b736-222a1897ca3f.roa (raw, json)
Hash identifier:          Pgyn1rKZpL8EbdCDdIBjqaNlJxv3GPmDZQsyncY1omc=
Subject key identifier:   E8:69:3B:B2:B9:4E:61:62:FB:23:84:99:CE:A5:37:4D:70:9B:58:1B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D3F5456E0144DC344B56889C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5b1971d-b355-3b88-b736-222a1897ca3f.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 07 Mar 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        169.130.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3f:54:56:e0:14:4d:c3:44:b5:68:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2028 GMT
        Subject: CN=e9ca3463-c148-4bbb-b49f-dfc33ecc2ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:4e:f1:3e:97:00:f0:9d:c3:5e:4f:77:3f:
                    df:53:b1:52:5d:15:d0:62:13:a6:a5:20:d5:43:78:
                    05:91:06:58:ff:35:ff:a6:44:6b:02:db:3e:d9:38:
                    80:fa:80:58:c0:33:58:a2:1a:1e:85:8f:48:f5:62:
                    58:7b:cc:91:49:b7:2b:37:07:8d:dd:d0:ba:f7:de:
                    46:4e:88:02:b4:e2:4c:4b:a3:bb:53:c9:82:b9:c0:
                    c3:83:4d:59:d7:3b:0c:31:6d:50:ed:62:9b:d3:2d:
                    5c:1b:19:95:6c:bf:07:d0:87:5a:8f:28:48:b6:37:
                    a5:f0:d9:79:57:05:c2:7a:f0:b9:66:de:e9:98:3e:
                    06:5c:21:c2:3c:9a:1f:ae:f7:a2:5d:bf:1c:cb:ea:
                    ee:92:ec:ef:e5:4a:55:9f:6e:6e:a5:e7:01:62:e9:
                    0f:f8:7c:e9:10:90:01:aa:e2:4c:4d:0c:a8:c3:d9:
                    24:45:37:1f:bc:50:b6:26:7f:2d:15:4f:77:47:40:
                    f5:ad:bc:0f:db:9b:4e:69:15:2c:1d:f7:31:04:e8:
                    30:42:26:5c:82:0a:e4:dd:32:13:c9:85:0e:e3:47:
                    81:d3:54:c9:eb:3c:1d:ef:54:15:db:bd:e5:9f:dc:
                    22:ba:07:c6:22:14:fe:75:f8:57:3c:db:04:0b:30:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:3B:B2:B9:4E:61:62:FB:23:84:99:CE:A5:37:4D:70:9B:58:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5b1971d-b355-3b88-b736-222a1897ca3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:01:34:03:b4:11:67:ff:d8:60:58:95:dc:4e:b1:00:40:22:
         f2:a1:7b:ad:bc:3c:be:b0:27:70:de:5c:31:be:d2:9c:fb:23:
         7c:51:ed:c0:99:bc:bf:5f:2e:75:f4:86:8b:0a:5b:01:bf:cc:
         4a:44:1e:32:d8:b4:9d:66:69:8b:c3:a7:a9:91:88:83:2b:d7:
         94:00:6e:80:df:c1:d9:51:cd:15:c7:69:0e:d2:61:c3:45:56:
         76:ee:c2:75:4d:17:51:92:23:6c:33:12:7e:bc:ce:c9:79:f9:
         cc:d2:ba:3a:db:16:fb:39:52:f3:90:82:dd:2b:53:7a:20:d0:
         a0:c8:66:75:88:a4:f1:c1:24:f2:7a:4f:9a:64:0b:ee:98:22:
         0c:9c:37:dc:16:83:fc:99:bc:ac:c7:ab:c9:54:32:cf:f6:81:
         46:4d:9e:8e:81:4b:c4:48:48:d4:18:69:a4:84:d0:88:c9:ce:
         10:ba:e9:32:fd:dd:bf:2a:b4:c9:13:c0:49:41:dc:ae:ed:dd:
         d6:f1:9c:72:e4:24:83:30:85:ea:e6:b6:99:e3:ff:97:7e:c3:
         4f:02:1c:0e:33:44:87:35:aa:05:52:ff:76:73:98:37:13:36:
         9f:9e:4f:d3:e3:a0:1c:a5:0a:3f:c8:85:76:a1:e5:63:e8:f0:
         88:03:e4:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0/VFbgFE3DRLVoicAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMxNTA0MDAwMFoXDTI4MDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZTljYTM0NjMtYzE0OC00YmJiLWI0OWYtZGZjMzNlY2MyYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+VO8T6XAPCdw15Pdz/fU7FSXRXQYhOmpSDV
Q3gFkQZY/zX/pkRrAts+2TiA+oBYwDNYohoehY9I9WJYe8yRSbcrNweN3dC6995G
TogCtOJMS6O7U8mCucDDg01Z1zsMMW1Q7WKb0y1cGxmVbL8H0IdajyhItjel8Nl5
VwXCevC5Zt7pmD4GXCHCPJofrveiXb8cy+rukuzv5UpVn25upecBYukP+HzpEJAB
quJMTQyow9kkRTcfvFC2Jn8tFU93R0D1rbwP25tOaRUsHfcxBOgwQiZcggrk3TIT
yYUO40eB01TJ6zwd71QV273ln9wiugfGIhT+dfhXPNsECzD1vQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOhpO7K5TmFi+yOEmc6lN01wm1gbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTViMTk3MWQtYjM1NS0z
Yjg4LWI3MzYtMjIyYTE4OTdjYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqYIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaQE0A7QRZ//YYFiV3E6xAEAi8qF7rbw8vrAncN5cMb7SnPsjfFHtwJm8
v18udfSGiwpbAb/MSkQeMti0nWZpi8OnqZGIgyvXlABugN/B2VHNFcdpDtJhw0VW
du7CdU0XUZIjbDMSfrzOyXn5zNK6OtsW+zlS85CC3StTeiDQoMhmdYik8cEk8npP
mmQL7pgiDJw33BaD/Jm8rMeryVQyz/aBRk2ejoFLxEhI1BhppITQiMnOELrpMv3d
vyq0yRPASUHcru3d1vGccuQkgzCF6ua2meP/l37DTwIcDjNEhzWqBVL/dnOYNxM2
n55P0+OgHKUKP8iFdqHlY+jwiAPkPg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:27 2025 by rpki-client