Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d827bfb5-da77-3158-9c70-a8b4208f450f.roa
File:                     d827bfb5-da77-3158-9c70-a8b4208f450f.roa (raw, json)
Hash identifier:          6t7lWI9vrZsnF2gcBV2qUdw0R5Xj8VC9pJd6J8AuoaU=
Subject key identifier:   2A:6F:A6:78:EE:9B:EF:42:BC:4A:25:B0:1B:92:0A:6D:4B:75:A4:18
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583FC950A8E291B501F5DED3B380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d827bfb5-da77-3158-9c70-a8b4208f450f.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 26 Oct 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.83.83.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 10 Jan 2023 15:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c9:50:a8:e2:91:b5:01:f5:de:d3:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2028 GMT
        Subject: CN=f941ccfc-dc97-4264-b6fd-9ebd6cf260ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:2f:d1:2d:02:52:7f:d0:d8:f0:1f:0d:e6:
                    dd:5f:e1:39:a5:22:c7:fc:5a:59:68:6c:fc:24:29:
                    90:e5:fb:46:64:6b:28:fa:36:0d:4d:22:95:35:ea:
                    2a:61:4c:21:ac:2d:7e:7b:0b:18:69:76:c6:7f:98:
                    7c:c4:58:04:d1:c5:c5:98:22:3e:e4:06:49:d9:7c:
                    b1:f2:40:0a:4b:39:63:8e:4e:40:ce:8c:3b:e2:53:
                    b1:fd:20:8a:fa:4d:5f:f1:e6:3d:88:89:18:9f:62:
                    1c:86:01:42:b3:37:88:23:b0:64:76:91:65:ed:8e:
                    93:11:cf:3d:d4:c6:4b:b1:66:13:e6:d8:fc:66:de:
                    38:4f:95:57:8b:d3:e1:da:64:36:f8:10:b8:6b:d2:
                    0b:78:53:3e:4e:24:10:b5:c8:2d:8b:ab:82:da:82:
                    6b:c6:75:db:8a:42:c5:9a:8f:4a:36:8a:1a:af:76:
                    e1:3d:b3:4c:5b:f7:04:f8:2b:1f:15:74:7e:82:8d:
                    41:23:a4:f8:90:f7:fa:a8:77:8c:fb:d7:50:aa:6b:
                    87:c1:18:e8:93:2f:4d:d8:bb:e1:a5:8b:61:e4:39:
                    e5:b2:ea:6c:6c:2c:f3:a0:1f:e6:88:97:d3:a9:71:
                    c7:64:13:96:96:17:01:e3:46:5c:94:d2:50:a3:79:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:A6:78:EE:9B:EF:42:BC:4A:25:B0:1B:92:0A:6D:4B:75:A4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d827bfb5-da77-3158-9c70-a8b4208f450f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.83.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:24:4f:cb:bf:36:ac:eb:c8:df:98:f5:20:eb:4c:9f:32:
         e2:2c:6d:8d:ce:bc:54:21:1e:b8:22:d5:59:f3:6d:a4:6d:ea:
         cf:2c:47:1f:05:4b:97:97:14:cd:47:2d:74:59:57:1e:23:6e:
         7b:08:f5:08:f0:98:30:f7:11:9f:37:03:be:8b:80:ab:b9:54:
         b7:cc:d4:19:57:00:29:50:05:e4:0a:26:df:b9:5e:ef:dc:1b:
         fc:dc:a0:b0:09:b7:43:4f:be:e8:61:d9:9d:82:24:10:bd:6c:
         58:a0:a5:aa:5d:70:a4:e7:37:da:2f:3f:e1:48:4f:02:ed:5f:
         c5:0c:50:a0:15:19:b4:2e:f9:61:24:4c:63:fc:a1:81:70:27:
         42:6e:82:06:cf:8e:34:45:d2:eb:0e:30:90:1f:15:13:74:ce:
         74:fd:29:f4:e4:0f:5f:82:7b:e2:79:42:83:fd:af:69:88:24:
         ed:31:1d:33:77:a8:26:93:28:92:a5:d9:7b:71:d0:25:05:17:
         a3:58:b5:54:6b:48:52:90:25:0d:0b:2c:32:25:1f:18:52:63:
         f1:49:8f:6d:02:f7:ba:f4:4d:4c:4f:a6:9a:58:85:5b:b0:c6:
         36:cb:14:9b:eb:67:41:dd:b9:3f:44:e2:04:33:94:ce:35:65:
         74:26:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:27 2025 by rpki-client