Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e653edf2-0db3-38aa-8747-419a4c5b7d40.roa
File:                     e653edf2-0db3-38aa-8747-419a4c5b7d40.roa (raw, json)
Hash identifier:          ael1Bfk2LRxPamXKFW8T+r6qqsiBpDMt6biXXAgpNvg=
Subject key identifier:   46:5A:76:13:92:76:2A:8C:18:EE:7C:BD:78:4D:2B:6D:67:EC:FE:B1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FACB0EE99B093DE6D5C7460
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e653edf2-0db3-38aa-8747-419a4c5b7d40.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.92.0.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 05:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:ac:b0:ee:99:b0:93:de:6d:5c:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=d1eba1e9-8020-4bc2-a85c-7f963994e9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8b:8d:ae:8f:62:f5:84:ae:7a:d6:7d:98:9e:
                    53:7c:03:ce:ec:26:ba:53:df:50:e3:b4:b6:f6:03:
                    50:05:2e:5c:30:36:80:e5:59:07:16:35:38:e2:16:
                    40:66:7d:25:29:bd:eb:81:58:43:10:0b:f2:b1:26:
                    44:ef:2b:5a:57:82:46:e4:eb:97:8b:9e:53:79:93:
                    4d:f9:78:5c:45:8c:a2:52:3e:69:6c:1f:0a:f6:03:
                    c7:a3:8e:1f:6b:62:16:ad:55:b3:9f:d0:70:07:bd:
                    b4:98:aa:f5:7e:2a:10:6f:bc:df:8b:43:22:6e:52:
                    3c:fe:eb:b9:6e:b0:34:7e:8f:03:dc:07:e0:c4:5b:
                    3f:e6:86:d1:4e:f7:3f:29:c5:1f:2e:08:34:08:b0:
                    c1:8b:58:db:d9:e5:9f:20:86:bd:a5:3f:1e:e6:48:
                    97:dd:56:78:2d:0b:e0:c3:96:c1:c7:9c:71:eb:5a:
                    11:f9:e1:b9:5b:45:8d:88:1c:1d:9a:5c:72:2b:9f:
                    f8:12:e1:dd:97:c5:30:e6:a9:91:e4:8d:36:7d:d4:
                    cb:33:ee:90:03:13:30:8b:25:07:a5:c8:c7:16:f5:
                    d8:13:1e:b6:19:2f:f9:bd:35:7b:1d:f0:80:a6:cc:
                    bf:2a:04:d3:fb:d9:ce:64:f7:0a:22:e7:8a:a6:68:
                    ba:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:76:13:92:76:2A:8C:18:EE:7C:BD:78:4D:2B:6D:67:EC:FE:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e653edf2-0db3-38aa-8747-419a4c5b7d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:62:d8:74:60:a9:de:4e:a8:b7:7d:a9:67:bc:23:df:fc:25:
         23:08:af:34:7e:c1:09:dc:79:40:6d:3c:6e:c2:05:2e:1e:0b:
         13:42:04:fd:f7:fb:84:fa:66:05:f2:89:96:62:e5:f3:8e:37:
         57:49:50:f3:91:38:57:4d:4e:0e:b4:60:4f:d3:93:61:d8:11:
         5e:98:bf:84:21:36:1f:f0:18:bf:22:ff:98:b1:b6:11:e9:7e:
         60:d0:13:b4:5e:03:2e:a6:48:a8:6e:b8:6e:7d:85:e9:af:c0:
         25:09:d3:5f:9f:a8:4d:17:40:dc:b8:e5:21:8a:b7:31:7d:5c:
         2b:8a:3d:a0:1e:ca:bf:c0:c1:8e:15:cb:dd:86:33:a1:66:c0:
         1b:03:61:af:08:ee:6e:90:42:03:0c:51:7c:30:9e:62:1a:46:
         4e:18:e5:d4:c1:aa:3c:4c:c6:41:62:36:81:80:10:c8:37:c9:
         c7:98:32:cb:a6:08:91:9a:c8:6e:c9:4a:38:f4:bb:06:e3:13:
         a7:c1:b6:77:6f:11:ff:0f:21:eb:0c:32:ad:77:c2:b2:df:43:
         b4:af:23:24:cd:66:8b:8b:17:4f:e3:6d:30:53:9e:1a:4f:1e:
         55:35:3f:f6:4d:43:3d:78:38:dd:fd:47:ad:78:49:57:74:78:
         84:90:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:24 2025 by rpki-client