Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0a761aff-32b3-358b-85c2-96bedddef148.roa
File:                     0a761aff-32b3-358b-85c2-96bedddef148.roa (raw, json)
Hash identifier:          QxaIDN/BeWIdivvsr7HNQfoGpQUEVcOOQTdJ9Dk/ElA=
Subject key identifier:   6D:FC:FC:F9:01:65:19:E9:01:3B:6C:43:97:8E:46:BD:44:CB:01:C5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848FA8BE971F9397ADEDB925EC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0a761aff-32b3-358b-85c2-96bedddef148.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     9009
IP address blocks:        206.123.145.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Mar 2025 10:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:e9:71:f9:39:7a:de:db:92:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=caad5281-b2f7-4114-9c3f-8579cd0ca757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:9d:b3:98:63:57:8c:38:c3:57:c0:c5:7f:
                    6d:be:81:59:b2:db:ed:cb:de:be:df:47:88:dc:ae:
                    84:91:5c:39:59:61:f1:83:02:db:7e:15:31:b0:12:
                    0e:5e:6c:92:db:0b:2f:86:15:ce:85:53:5f:00:21:
                    87:3a:28:04:28:1b:ae:4d:1f:15:cf:29:2b:2a:4e:
                    20:38:39:a8:cb:33:81:00:33:ca:38:1c:25:b9:5a:
                    cf:ac:50:c7:9d:0a:d0:34:2c:fb:7d:c6:86:7e:a1:
                    08:23:50:bf:f0:d1:56:a6:44:f1:8e:c7:c1:a8:70:
                    f5:99:5b:98:be:72:5d:e7:a3:32:a0:7a:dd:72:95:
                    d0:32:8d:55:12:18:18:6b:10:a0:be:0c:85:b5:46:
                    3f:17:ff:49:0e:e6:af:a8:83:64:02:67:01:ee:39:
                    17:61:b6:b4:82:c8:75:c0:8e:06:5e:61:fe:a0:dd:
                    4b:4e:e1:7b:88:cf:df:7e:d5:77:22:73:18:66:30:
                    75:6e:58:00:64:9b:87:b9:8c:68:6c:1e:ec:7a:55:
                    d7:d7:73:d3:42:01:bc:76:06:55:8b:bf:c1:d8:a0:
                    44:e5:4f:4a:ab:f0:7c:2b:0a:b5:8f:ff:b3:8c:a4:
                    f8:c5:05:19:bf:08:c1:9a:f6:d9:30:94:2b:b3:30:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:FC:F9:01:65:19:E9:01:3B:6C:43:97:8E:46:BD:44:CB:01:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0a761aff-32b3-358b-85c2-96bedddef148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:6e:24:54:dc:de:e8:3f:2a:65:da:43:ec:87:fa:c7:69:
         8f:ac:0e:e3:16:b7:b1:c2:0a:04:24:ba:d1:7a:b5:af:5a:29:
         8b:ac:ec:26:2e:8f:8a:00:32:77:80:d5:3d:ca:4b:82:82:00:
         d5:d1:85:45:ae:d7:59:28:24:37:de:47:68:a3:74:48:9f:1d:
         fb:c0:7c:7b:23:ae:2b:16:32:79:53:a5:e4:82:6c:47:43:01:
         c9:5d:5f:1a:43:7a:17:46:61:ac:e4:6a:de:6a:b9:26:0e:d1:
         22:f8:8f:76:51:36:0c:a3:7f:f0:a1:3b:46:a4:04:f7:7f:7f:
         a8:01:da:94:d7:c3:87:86:c6:2e:6c:cf:89:c8:24:32:41:3f:
         39:e5:35:5a:b1:6b:29:39:98:3e:d6:4a:7b:f6:1c:bb:4f:29:
         a4:26:d0:49:54:a6:26:5e:19:ec:82:31:dd:7e:0e:38:b3:f3:
         32:61:3e:5b:e0:c9:c2:f8:30:15:3c:b4:bc:b1:b3:e7:ac:e5:
         7d:cc:35:f3:57:e6:94:a3:94:ab:59:62:26:4a:73:ef:bb:51:
         1a:84:c4:fd:7a:e1:21:1a:a3:a7:b6:7d:3c:c8:45:15:42:7b:
         af:11:f3:9d:8e:80:14:57:6a:ca:af:f9:59:53:39:35:bc:9c:
         e1:d1:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:55 2025 by rpki-client