Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfb55eb6-b1a8-3e82-8b5e-25c96108641c.roa
File:                     cfb55eb6-b1a8-3e82-8b5e-25c96108641c.roa (raw, json)
Hash identifier:          Jrm8eCk+uVtOOaYeDfAKUasL849P4kzH6sPbTOmLnEs=
Subject key identifier:   BF:E1:F5:3D:AB:F1:02:F8:B6:89:88:51:28:50:24:F0:1F:AD:AF:ED
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D9E5F9FFDE9580CFD019B2760
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfb55eb6-b1a8-3e82-8b5e-25c96108641c.roa
Signing time:             Mon 18 Apr 2022 04:00:00 +0000
ROA not before:           Mon 18 Apr 2022 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        40.130.200.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9e:5f:9f:fd:e9:58:0c:fd:01:9b:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 18 04:00:00 2022 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ca9c40b1-a7e6-4bb4-9604-9dd7d91534d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:ae:1e:62:1c:6a:b8:46:6d:ed:28:2f:6c:
                    d7:22:58:75:a3:af:f2:b0:8b:92:7b:80:de:30:5b:
                    48:e2:a9:4b:17:57:3a:2d:40:79:77:32:b0:6b:35:
                    5a:9f:e7:71:37:e1:23:cb:c3:53:1e:67:b9:c0:02:
                    cd:30:ba:15:16:d5:aa:cc:07:e4:9b:e2:c5:5b:b4:
                    8d:be:a2:17:d8:82:5a:3d:7a:60:f7:6f:27:8f:bd:
                    c8:34:ba:a9:de:a2:92:5d:fe:83:b8:36:6c:0d:83:
                    3f:ea:72:b7:16:33:f9:a5:ea:31:00:81:84:32:8b:
                    db:a8:0e:b9:d7:d5:24:82:25:6b:37:f6:d6:b7:18:
                    24:ff:ee:38:6e:62:0f:b8:4a:6f:08:fb:e5:aa:18:
                    3a:c1:ad:32:bd:79:dc:be:18:c3:0b:04:52:c7:69:
                    5e:14:24:00:59:cc:da:b9:fc:e5:64:46:93:c3:59:
                    15:87:42:d8:da:3e:0f:87:39:c4:df:4a:cd:d6:fe:
                    d0:b2:21:ad:ba:c4:67:44:8e:65:21:14:4f:01:1b:
                    5b:ca:01:44:c7:f0:a9:1a:11:3f:dc:94:1b:a8:71:
                    19:bb:26:d1:62:d0:23:52:48:9d:a3:92:89:b0:34:
                    1f:58:9e:b2:9c:40:78:48:70:5f:3c:d5:c5:5f:54:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E1:F5:3D:AB:F1:02:F8:B6:89:88:51:28:50:24:F0:1F:AD:AF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfb55eb6-b1a8-3e82-8b5e-25c96108641c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.130.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:08:5b:e0:e4:78:ce:50:42:5e:46:c7:3f:a2:5c:dd:70:
         da:71:ba:9a:78:e5:f4:63:88:e6:57:5c:e2:aa:ca:5b:af:be:
         a0:1e:d4:ad:92:40:fe:9b:8e:7d:3a:b6:8c:6b:9d:88:b2:c7:
         81:dc:4c:9f:2a:b0:21:36:40:c9:18:bd:5b:6c:84:58:90:a8:
         e5:6e:c3:0b:90:0a:ff:88:9b:68:aa:69:1d:60:17:32:5f:6a:
         c0:cd:73:c2:3b:8a:a4:40:88:84:2a:12:c3:00:a2:0f:1a:76:
         ed:9d:60:d9:6d:de:19:40:0f:12:a7:70:78:4f:58:e8:0c:35:
         b6:5a:10:62:28:4b:57:30:00:d3:3d:23:f3:00:b0:bd:67:bd:
         a2:0f:33:fe:49:86:61:b1:01:aa:d7:96:55:5c:51:da:38:71:
         75:ac:87:30:c0:08:c2:38:a9:91:88:bc:3c:c6:ba:18:46:b9:
         49:6a:a2:dc:e5:b9:0b:a8:3e:16:b5:26:47:21:50:a4:19:7f:
         ec:01:18:59:65:ca:0e:8e:00:78:bc:2a:a8:ee:f3:f0:37:e4:
         68:da:3f:65:0e:95:81:c5:b0:96:1f:d8:14:c0:e1:03:54:ca:
         5a:87:21:79:8d:cd:2b:31:da:d1:c2:32:8c:e3:54:27:79:38:
         e3:dc:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:28 2025 by rpki-client