Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/b8a761f3-fa00-3fd6-9bad-ff2689305468.roa
File:                     b8a761f3-fa00-3fd6-9bad-ff2689305468.roa (raw, json)
Hash identifier:          dwuuEKiaOGtNoxD5UgtYCwPq++PRsAD23ql1gy2BxEo=
Subject key identifier:   BC:B8:4E:9C:42:02:81:89:C7:32:44:E2:9E:A3:EA:97:52:6C:7C:95
Certificate issuer:       /CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b
Certificate serial:       010D0C9F432858497279B350080340191A3ED540
Authority key identifier: E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/b8a761f3-fa00-3fd6-9bad-ff2689305468.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     25899
IP address blocks:        23.187.16.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 11 Apr 2025 20:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b3:50:08:03:40:19:1a:3e:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=e9b520fc-0dee-464d-a554-f72bd7fa9c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:b7:e9:fe:a9:d1:64:df:5d:57:69:1a:61:
                    8b:d1:9c:fb:23:c7:54:49:da:ea:08:c7:95:3f:c7:
                    16:fa:a0:36:a9:96:7f:ad:22:64:07:46:63:51:de:
                    eb:27:50:cb:c1:09:10:c7:0d:d7:30:45:61:9c:de:
                    54:80:3b:23:4d:b9:e0:5b:13:96:a6:e5:e5:69:6e:
                    eb:80:01:74:4a:5c:5f:53:a1:b8:ab:18:46:1b:85:
                    1a:8d:14:72:06:be:93:8d:75:79:f0:15:58:d9:fb:
                    02:4c:f4:71:6b:be:22:84:d9:bb:56:99:05:3b:94:
                    9d:74:42:5e:61:6d:6e:0e:75:1e:a3:9e:7a:cb:5a:
                    1f:29:28:9a:45:63:22:01:1f:22:b5:7f:2e:bd:68:
                    69:dd:34:59:8a:5a:e8:26:3a:e0:c5:32:b7:f6:3f:
                    d2:4f:be:4d:9e:c5:6f:60:af:f6:56:a0:b7:7a:8f:
                    2e:27:a0:c0:7a:3a:e6:72:6b:62:a3:ee:f3:14:25:
                    ad:30:49:df:25:eb:2b:1b:f9:3c:d7:cf:7e:7d:df:
                    01:00:8f:dd:d6:94:ed:19:96:14:bf:dc:c0:bb:48:
                    02:cd:54:93:2c:ad:1f:f0:5d:3a:82:44:d4:00:d0:
                    14:46:a8:10:8d:87:f0:60:09:20:80:18:91:ae:53:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:4E:9C:42:02:81:89:C7:32:44:E2:9E:A3:EA:97:52:6C:7C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/b8a761f3-fa00-3fd6-9bad-ff2689305468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b7:a4:31:fd:fa:66:dc:a8:38:d4:f0:e5:29:1f:0a:00:18:
         0a:a1:ff:de:25:e0:1e:13:a9:3b:ee:c0:7d:4a:6d:fd:21:ef:
         0a:ca:a3:e1:c4:8a:33:fc:db:24:42:74:5e:79:53:33:df:44:
         21:8f:de:5d:a0:36:e5:1c:e5:d3:3f:67:44:36:37:50:58:3b:
         d2:eb:ef:2f:51:96:b7:ab:6e:73:54:b2:86:70:d5:9d:a7:00:
         7c:d1:8a:8c:e4:85:7b:0e:6e:67:78:9d:0c:6f:ae:e5:39:07:
         ad:9c:7b:4c:19:0c:de:3c:75:74:f1:e6:73:e3:c5:0d:2b:ec:
         40:a7:28:6c:0e:87:b4:db:a9:41:c6:10:e3:69:5e:d2:d8:b3:
         a7:94:a2:a3:7b:9c:52:e5:08:58:c2:7a:e4:db:a6:53:35:a8:
         8d:cb:71:ef:1a:c5:da:c6:7c:2b:f8:9b:58:1c:7a:76:2e:3c:
         3e:4c:4f:a1:17:e0:27:73:a1:06:e7:4b:f9:7d:fc:87:60:93:
         8f:12:dd:a0:9f:60:64:de:2b:a9:3f:84:17:12:fe:92:b1:1c:
         7f:0f:08:0a:45:65:7b:ee:2a:ba:aa:50:ba:17:f8:45:fe:aa:
         16:4b:d1:3b:5f:3e:f9:85:d0:64:c3:21:71:2a:e2:67:db:35:
         ec:9e:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:52 2025 by rpki-client