Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7a224b8-3911-3810-977f-634504834c02.roa
File:                     b7a224b8-3911-3810-977f-634504834c02.roa (raw, json)
Hash identifier:          ZqH8pn1IV0P0F0pIOGMbCcztzBXiYgsGjEDF++UA/jI=
Subject key identifier:   3C:78:6C:31:41:2F:31:2E:E4:B7:07:27:E3:22:69:90:6E:69:D9:C3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DB440D4506B275AC4C6E4E780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7a224b8-3911-3810-977f-634504834c02.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 18 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        162.40.0.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:40:d4:50:6b:27:5a:c4:c6:e4:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2028 GMT
        Subject: CN=317a4d3d-03c0-4057-a028-b063c4db4ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:bd:55:d8:62:ce:f6:23:0b:6f:1a:9d:b6:
                    25:12:9a:b6:fe:15:0c:47:07:5d:81:e6:65:1e:22:
                    78:3b:0f:93:47:26:c0:49:e9:67:ff:3f:41:41:93:
                    0c:34:d4:b4:5f:42:d8:48:bb:47:9d:21:6e:37:c8:
                    ce:bc:89:6e:78:18:19:40:cc:6f:29:a5:6d:32:d8:
                    d9:0d:d4:7a:fe:b6:d4:23:4e:01:8c:76:c9:7e:82:
                    c5:ef:8c:d4:65:32:57:c3:68:40:75:09:55:a7:5d:
                    44:a8:2f:1d:67:09:9b:ab:a0:18:b5:e3:91:dd:48:
                    06:c6:9f:8b:30:49:06:fa:ab:f2:6c:93:17:2a:97:
                    37:6d:fa:ff:ed:28:e2:19:a0:3b:e3:d0:fa:0d:d8:
                    15:86:52:93:9a:a7:87:9e:34:d9:ea:c1:92:ec:0f:
                    23:1b:bf:b8:5a:0a:46:92:75:0b:bb:12:85:d3:a3:
                    c8:f9:a9:c3:71:86:91:a2:cc:7a:52:81:12:36:71:
                    14:37:56:c8:e3:be:c8:7e:5a:62:2e:d2:5d:11:7d:
                    1d:b7:af:b1:f7:92:fd:5a:dd:36:c1:07:95:27:08:
                    49:d0:0c:a5:8b:ad:80:99:d5:cf:a2:85:45:90:ff:
                    dd:12:a6:52:eb:1e:57:84:ff:33:d8:d2:d2:11:4e:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:6C:31:41:2F:31:2E:E4:B7:07:27:E3:22:69:90:6E:69:D9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7a224b8-3911-3810-977f-634504834c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.40.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:93:19:58:7c:64:27:6b:34:9c:c4:3d:6e:7c:f9:5a:23:
         40:91:99:e9:e3:9f:43:3d:51:59:84:2d:5c:7f:65:f0:bd:26:
         30:22:cc:2d:f9:64:0d:be:88:94:6e:e8:19:5e:e4:2b:ff:26:
         42:da:c1:33:79:38:90:bb:00:bc:dc:a4:86:94:37:e9:cf:ec:
         30:8b:8d:f3:f5:f6:8c:c0:48:30:f2:fb:14:a8:36:8c:52:ba:
         29:d9:6d:f5:fd:a5:e3:00:03:3b:42:04:f9:c4:ad:58:47:1f:
         82:c4:4b:5a:e3:48:72:20:83:d7:1d:0d:b8:e1:ed:d5:c6:0a:
         7b:fc:d9:97:99:91:dd:fc:da:24:cb:f3:03:13:5e:2f:ef:ac:
         a1:9c:e6:47:96:09:42:04:10:9a:b4:79:df:e8:66:5d:c1:12:
         1c:3c:26:07:c0:fa:26:b9:af:e5:e4:04:b5:f6:c4:0f:55:22:
         d7:fb:36:ba:e0:a6:58:91:24:53:d5:8b:5b:6e:fb:9c:de:e2:
         8b:7b:df:f8:08:84:c5:86:f6:87:55:34:9d:93:1a:cd:30:a2:
         3f:09:39:de:4a:c5:ae:59:08:93:f0:51:c0:b9:86:b4:a4:ef:
         85:03:9c:5c:d4:cc:05:13:05:45:4f:4c:1c:2a:ab:7f:49:68:
         58:db:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:07:10 2025 by rpki-client