Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2e76121-c0e9-3733-a55a-42f2c21fee68.roa
File:                     b2e76121-c0e9-3733-a55a-42f2c21fee68.roa (raw, json)
Hash identifier:          qkahzX6IxjZnIIefYRasagtC+d3ihDvjLIGlQznKt78=
Subject key identifier:   00:05:79:55:D2:BA:85:28:41:4D:2F:93:D0:A3:B6:60:DA:40:4F:43
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D662035E7083AA638DC07F280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2e76121-c0e9-3733-a55a-42f2c21fee68.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.189.104.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:20:35:e7:08:3a:a6:38:dc:07:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=41def350-d3fd-4efc-8c87-81b12a4b4e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:e1:ec:92:32:da:4a:cb:83:c8:12:db:8d:
                    e1:02:ff:2a:9a:b9:c6:55:ab:e6:05:84:fc:1c:3c:
                    69:03:ab:57:e3:dc:2b:b3:52:15:81:45:cc:03:72:
                    cb:7d:74:fd:19:eb:ba:3b:ee:f7:86:6c:1d:fd:45:
                    9a:4c:bc:e2:3b:b7:3c:ec:cf:d7:36:7d:bd:26:0f:
                    a2:fd:ea:d3:a0:bb:10:71:ed:d8:96:aa:e8:ee:52:
                    b6:f1:78:67:92:b0:f1:1a:22:07:a1:e1:49:63:55:
                    85:c0:46:07:d6:5a:b9:f1:44:3f:14:64:62:bf:94:
                    1a:cc:09:7e:b2:36:f6:98:9e:0d:7f:b4:e0:20:ef:
                    a8:71:66:31:ee:d7:95:4c:4a:80:a8:2f:ae:4e:f3:
                    07:2b:fb:ff:bd:65:e2:a2:8e:fa:aa:10:8d:1a:18:
                    34:f6:e8:2f:d1:8f:3a:75:6b:a5:00:3f:cc:05:b0:
                    c5:15:21:16:99:80:fc:3a:f5:3c:2f:c0:af:39:e0:
                    b7:d2:81:89:3c:3e:a6:11:87:fd:c9:a4:ab:a9:d1:
                    15:e4:1d:30:10:2b:6e:36:41:6b:91:fd:e6:56:e6:
                    63:00:af:b8:47:e1:29:1e:d5:1b:1b:94:41:33:96:
                    65:6f:0b:87:5c:86:0c:85:4d:13:be:e6:33:be:be:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:79:55:D2:BA:85:28:41:4D:2F:93:D0:A3:B6:60:DA:40:4F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2e76121-c0e9-3733-a55a-42f2c21fee68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ca:c9:bb:cd:7a:2f:65:d8:06:30:73:db:c9:dd:2a:f5:ab:
         22:bb:e6:a0:68:2c:c6:04:7c:62:e5:e2:b4:2d:3c:33:d2:34:
         9c:a2:27:5d:a6:f5:0a:56:08:ab:96:d6:04:f6:f6:40:af:fc:
         f9:ec:95:41:49:d5:29:4a:16:32:c2:72:d9:70:3e:d8:59:1d:
         c6:25:a9:99:72:2c:5e:4b:f3:7f:47:81:f3:37:aa:4d:bb:da:
         b0:16:b7:4c:7c:c7:1a:d5:d9:40:f1:a7:1f:86:81:e3:7b:c2:
         5c:2c:cf:9a:75:99:4c:16:19:73:18:7d:e0:4b:91:f4:35:ae:
         b0:46:66:8b:73:78:cf:df:bc:2b:54:cd:f7:4f:49:f9:62:d4:
         12:1e:c2:82:c0:d8:80:1a:50:a5:d8:9d:4b:38:92:f9:b5:df:
         7d:dc:75:6f:2d:5e:b0:48:a4:30:aa:39:e9:fb:1a:37:27:de:
         f1:2a:c0:ad:ee:fa:3b:1a:e5:e4:82:74:47:34:5c:5d:d4:a9:
         16:95:b3:48:c4:60:d2:4a:05:91:0a:d1:8d:eb:64:d7:d1:17:
         29:ae:38:11:24:46:4b:ff:c4:d1:cf:de:f9:b2:23:90:4e:9d:
         71:68:5f:6d:22:59:17:fa:b1:63:51:c2:54:11:71:12:87:a3:
         4c:92:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:45:08 2025 by rpki-client