Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e078ff54-d2ce-33a0-898c-821bca8003c5.roa
File:                     e078ff54-d2ce-33a0-898c-821bca8003c5.roa (raw, json)
Hash identifier:          sdL2uaOrsGIgXgwxPcihgPh0wRHypULkhOjtGxQq5tY=
Subject key identifier:   24:DC:94:3D:83:9D:CE:18:7E:55:E4:71:AF:CF:EC:73:FE:C9:B3:EC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FB848830E332AB4DD297420
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e078ff54-d2ce-33a0-898c-821bca8003c5.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        50.96.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:b8:48:83:0e:33:2a:b4:dd:29:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=e5ee8099-7825-4d83-9046-c3df6cedd23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:d5:e8:bd:ef:76:66:af:35:eb:0d:db:88:
                    7c:62:89:ee:0f:38:c7:fb:c1:3a:51:c7:bc:4e:66:
                    a4:8b:55:ad:45:b5:02:2b:98:a9:39:55:0b:a1:f9:
                    d3:31:3f:4c:97:03:18:f1:32:65:4c:21:57:f5:29:
                    a6:74:94:7f:d8:ea:3e:10:ff:0e:92:db:58:70:20:
                    d0:89:d8:17:71:c9:22:c6:fa:82:f1:c7:a3:8f:4a:
                    7a:c9:fa:4d:64:47:73:ac:bf:e4:68:90:a9:b0:34:
                    91:b6:64:54:7e:86:da:fa:15:f1:44:e6:fc:78:ec:
                    19:c1:5e:93:7b:da:1c:13:03:8f:ce:53:f3:7d:cc:
                    06:4d:ca:0a:7b:88:ea:c3:ae:9e:e4:33:77:8c:8c:
                    b2:2c:1d:b6:96:73:2b:9a:14:af:93:b7:64:09:89:
                    f6:b4:a2:29:c9:bb:59:d8:31:22:a2:31:21:a7:b2:
                    98:7d:a6:e3:0c:33:f7:2c:ac:9b:b8:ad:0e:d0:b4:
                    37:03:c0:a1:85:9c:19:e4:fa:9c:ff:7a:0c:d5:4c:
                    f3:84:21:a8:f6:84:f4:aa:a0:3b:88:93:b8:1e:94:
                    0f:d5:22:ff:8a:84:db:cd:13:78:a5:96:3d:51:11:
                    ba:aa:ab:fc:71:03:f7:79:da:3f:d9:f3:ee:26:99:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:94:3D:83:9D:CE:18:7E:55:E4:71:AF:CF:EC:73:FE:C9:B3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e078ff54-d2ce-33a0-898c-821bca8003c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:de:bd:f9:7d:8a:ea:7a:95:c8:04:ea:41:da:2f:d7:f6:
         e9:0e:03:a2:42:af:0a:91:81:41:b6:6d:41:14:8b:28:16:98:
         2f:2c:5f:86:a5:e9:2c:02:6a:0e:2e:28:31:3f:09:5a:0d:a6:
         74:76:21:e7:f3:c2:ec:54:18:34:af:ba:85:d8:8f:2b:89:a4:
         49:5a:71:24:da:04:ec:3a:56:95:84:9b:95:90:31:94:64:61:
         91:9a:4e:4e:aa:f9:80:f0:39:0e:61:3e:ec:43:d4:9b:c0:dd:
         21:64:d2:2c:66:e3:50:01:b7:3d:2e:79:b3:8a:80:24:77:6f:
         af:55:22:fd:5e:6d:99:cb:0a:c9:15:bb:e9:77:03:ab:df:8f:
         91:5c:0e:f4:a1:36:5a:64:aa:c9:a3:9d:3e:7b:58:09:1b:29:
         39:c8:17:1a:44:aa:f2:a7:8d:df:ee:d5:ce:bf:1c:08:37:ed:
         74:71:83:3b:4c:e8:48:10:4d:a9:df:55:39:2d:9f:06:23:d1:
         14:aa:9f:2a:e7:00:9b:db:3a:22:a1:f9:65:eb:9a:07:1e:d5:
         62:d4:60:58:a5:bf:98:22:9a:fd:07:f8:8b:65:a1:a6:58:74:
         67:3d:c1:e8:eb:ab:58:36:c8:8a:82:2d:d7:28:2c:a2:33:bb:
         59:bf:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:41 2025 by rpki-client