Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae5852b4-ad0a-3fab-bab6-460e585c23fe.roa
File:                     ae5852b4-ad0a-3fab-bab6-460e585c23fe.roa (raw, json)
Hash identifier:          wygs6bdDMYqR8iexeMjq49XkMZNlacq3J+dLzJV2uLM=
Subject key identifier:   07:E8:25:EB:3F:0B:18:91:10:C7:51:51:A0:37:D0:05:E3:B5:9A:E8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D210EA420FC6A7B082BB30C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae5852b4-ad0a-3fab-bab6-460e585c23fe.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        50.96.116.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Feb 2025 18:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:10:ea:42:0f:c6:a7:b0:82:bb:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=6185bdce-daca-49ef-9080-2c8bdaf85153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:f0:d2:19:d2:8a:19:80:b3:83:da:96:0c:
                    cb:de:65:7c:c0:f0:3e:9a:7a:e2:44:a7:04:a0:85:
                    19:b4:67:12:7f:e9:9a:29:bc:70:ec:69:62:a9:a3:
                    3e:d3:3b:7b:9c:2a:c2:3e:07:35:7a:2d:ed:81:40:
                    9d:3f:91:72:c8:60:78:98:70:32:36:8a:b1:1b:99:
                    8f:1d:9a:6c:b9:bf:33:eb:5c:a5:2d:bd:44:8a:69:
                    a3:59:bf:d9:b8:cf:01:fc:7e:5e:2d:45:96:19:b9:
                    5f:f3:dd:c8:68:d7:22:40:b5:33:ec:d2:45:ca:41:
                    b8:c4:ce:dc:2c:05:05:87:39:a3:93:9a:cc:d2:06:
                    22:e0:a1:4b:cd:aa:4b:b3:b5:e7:7e:af:98:50:5e:
                    0c:72:7c:56:8e:4f:36:c5:09:33:3a:ec:f2:61:da:
                    da:d0:65:42:52:7d:8f:7a:f4:99:b7:37:5e:fe:72:
                    f9:ed:3c:b8:c6:ba:c7:0a:63:65:32:11:54:3e:1f:
                    c7:6e:1c:39:d4:1e:17:16:e9:37:c2:8c:da:da:31:
                    42:e1:45:74:61:2c:eb:c6:b6:f2:e2:f8:27:2a:b5:
                    67:3f:1e:7d:e5:11:53:be:94:1a:01:b0:35:8c:47:
                    9d:65:0f:20:91:be:b5:31:dd:9a:d5:f1:89:20:b3:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:25:EB:3F:0B:18:91:10:C7:51:51:A0:37:D0:05:E3:B5:9A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae5852b4-ad0a-3fab-bab6-460e585c23fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:8b:9f:75:d2:99:5b:c5:6c:1a:10:76:f2:01:ea:00:64:
         0b:32:77:6c:91:0d:9f:68:4d:c5:ee:ca:c6:ff:78:b3:52:9d:
         63:59:e6:db:4d:e4:d9:ff:a8:86:65:50:e5:67:39:ec:eb:63:
         b2:93:8b:bf:3a:f3:72:ca:3f:fe:d7:fc:91:9d:33:63:da:8c:
         2f:22:0c:f1:25:61:ed:9f:47:c7:a3:0e:44:b9:7b:86:a4:12:
         58:a0:3a:f0:40:2e:bf:05:ce:d2:60:99:04:41:eb:8c:e3:b3:
         d9:17:77:05:6b:3b:21:a7:69:cb:d3:25:2e:b9:13:4c:02:28:
         d0:db:42:20:f5:14:88:c6:be:49:0c:f1:a1:89:01:76:18:17:
         1a:80:20:a4:cb:80:4c:40:05:b5:ef:e4:b7:c7:b8:b6:e4:73:
         5a:c2:4b:54:1e:a9:23:f4:4b:f9:5f:3d:e5:4e:3c:98:50:13:
         81:1b:e0:7c:5d:17:43:fd:f9:06:fe:2f:c3:68:13:b0:2f:6a:
         05:cd:7b:e4:fe:fc:6b:eb:c3:b6:f2:a0:16:91:8c:0c:11:1f:
         b5:13:af:73:2a:9b:a9:5f:ec:c3:72:e3:3f:e3:9e:4f:dc:5f:
         d6:bc:1f:d6:b1:f0:7f:7f:aa:12:c2:68:5e:95:af:06:8c:2b:
         94:87:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:26 2025 by rpki-client