Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef839adf-9dbc-391d-adb1-abb28374e376.roa
File:                     ef839adf-9dbc-391d-adb1-abb28374e376.roa (raw, json)
Hash identifier:          zSGc3SXmTmiejGue9X0hhwf8Ro00WNXqq9ODg9Om3uU=
Subject key identifier:   D0:77:9D:69:9F:01:1F:4C:7D:3F:3D:F5:6F:11:F5:44:5A:27:28:9A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FBFCB1C0A8AC1A77D9C9E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef839adf-9dbc-391d-adb1-abb28374e376.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        64.196.199.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:bf:cb:1c:0a:8a:c1:a7:7d:9c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=3f0d6b4b-f18c-4b75-b491-fb3bd128e1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:ed:e0:33:0c:ca:aa:71:cb:f7:4b:fe:a6:
                    a0:91:5b:ab:fb:82:d4:83:76:d3:d5:0c:04:06:d5:
                    d0:b7:fa:a3:8f:33:ba:d4:0a:0c:1e:59:27:63:6a:
                    74:96:8a:cf:b8:da:83:6c:3a:2e:76:5f:5d:2e:4f:
                    01:18:e0:77:8a:f1:ef:4b:cc:57:20:d4:40:92:8b:
                    3f:c4:9f:cc:a6:9e:75:69:22:71:96:8b:cb:f2:81:
                    6d:29:1b:1b:5f:dc:e5:24:dd:dd:22:a5:ba:f2:ce:
                    de:e5:32:96:69:1b:61:06:27:44:50:6e:26:b5:4f:
                    b3:b2:65:b2:fb:8a:72:ef:68:40:87:4f:97:b0:ea:
                    d4:47:57:b7:32:aa:b6:ca:a0:74:4a:50:c4:df:84:
                    22:cd:ec:73:60:a8:bd:a9:aa:d4:65:a7:d0:35:7f:
                    09:5d:50:3a:a7:d8:32:49:85:bf:9b:8b:ba:ec:b7:
                    61:d7:72:7f:c6:77:db:7a:49:9e:c6:03:b2:84:c1:
                    50:26:4b:6b:86:a3:13:7f:7d:bf:e6:a8:cd:ed:f6:
                    ff:13:aa:cf:47:f4:67:1c:dc:11:ec:7c:3e:6b:8e:
                    7c:c9:77:94:8a:6d:22:3c:8d:b7:51:69:6e:ff:d9:
                    69:16:1a:82:cc:31:ca:0a:d8:3f:44:58:0e:dc:73:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:9D:69:9F:01:1F:4C:7D:3F:3D:F5:6F:11:F5:44:5A:27:28:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef839adf-9dbc-391d-adb1-abb28374e376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.196.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:3e:e1:6f:99:0c:6e:80:5f:a8:d4:f3:41:f4:1e:45:e0:
         fd:c7:72:05:86:b4:b4:88:e5:c3:4a:1c:74:21:b8:6c:c9:b6:
         bb:58:b8:86:e5:b0:d8:eb:7f:02:52:bf:47:12:a5:c7:bb:bd:
         cf:02:b9:ff:c3:05:41:28:83:31:67:7c:ff:11:30:c4:06:ec:
         a3:06:8a:e6:9b:67:47:e8:22:49:d4:1c:07:95:e6:b9:3d:51:
         6c:b3:84:8e:8b:71:d8:f7:5d:24:50:f1:76:b8:37:2b:99:8e:
         56:b6:ea:f7:6a:ea:88:0d:f5:27:90:a3:17:80:6d:2d:a7:55:
         31:8f:78:10:48:1a:25:e5:76:70:bb:2b:42:e7:ce:84:c9:1c:
         20:31:24:44:53:2b:7c:41:1c:bc:96:90:d4:11:42:81:a7:83:
         f0:cd:af:b7:1e:09:4c:6c:6b:ae:4d:3f:e6:91:73:41:46:98:
         32:98:e9:56:49:69:a5:c3:fa:51:93:03:42:bb:a6:d5:05:31:
         7f:b1:22:15:19:2f:07:64:5d:97:85:d0:87:e2:5d:8e:e5:75:
         61:c2:8b:b2:bc:20:59:78:9e:9f:d6:f9:a2:a6:90:09:4a:73:
         ab:86:16:ee:33:a7:06:d8:95:a8:21:af:ed:c6:b3:01:2f:8d:
         aa:7d:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:51 2025 by rpki-client