Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa
File:                     f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa (raw, json)
Hash identifier:          iu9+RgfLmp4alDvpX1m6pn/TvaM7APK13TC5d14icKA=
Subject key identifier:   8E:9C:84:BF:2E:63:47:37:00:F5:43:AD:D7:E7:9D:9C:CF:6F:AC:37
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285848CDE11115F681607EC4681400
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     31898
IP address blocks:        168.225.4.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 11:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:11:15:f6:81:60:7e:c4:68:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=4f2d35e7-51cd-4135-a204-5f034f87812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:c7:3b:5a:de:68:40:be:69:26:c2:c9:f2:
                    1c:b7:7e:75:e3:90:d4:08:14:86:cc:90:c5:4e:34:
                    28:02:37:84:d7:16:62:15:f7:03:e9:86:09:82:91:
                    b7:15:32:26:22:db:0f:27:4d:7a:26:3a:fa:5f:c7:
                    26:c9:f3:af:55:ee:27:79:7f:da:93:7b:d9:d6:b4:
                    8d:c4:c3:5a:2a:a8:19:c9:cb:1c:10:74:78:af:01:
                    7e:fb:25:d7:52:47:58:0d:fb:77:1e:f5:56:36:0f:
                    aa:a0:2d:37:23:2d:0e:8e:af:d1:0b:a7:16:6c:59:
                    27:4a:46:fd:b8:48:ab:3b:90:ec:b9:ea:a2:18:13:
                    02:c5:2d:e4:1c:a9:da:85:99:96:71:1b:80:d3:13:
                    26:3b:4a:12:01:b2:43:f0:3d:b9:f9:d3:9c:18:a9:
                    94:97:08:48:ac:0d:86:b5:72:ce:57:41:b0:11:1e:
                    4f:90:25:43:7b:ad:3a:22:ec:56:77:bd:a4:4d:29:
                    94:2a:04:76:9f:2d:6c:8c:eb:d5:d5:c6:9c:fa:d0:
                    c0:50:82:eb:ba:28:eb:84:29:f9:9b:62:41:1c:92:
                    3d:24:86:c0:40:13:07:5d:a6:bd:0b:0e:de:e8:e2:
                    84:87:93:c0:6a:ac:dd:28:1a:dc:91:cb:94:09:28:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:84:BF:2E:63:47:37:00:F5:43:AD:D7:E7:9D:9C:CF:6F:AC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:ef:39:76:f0:c1:98:57:f5:89:da:d0:8b:56:05:98:ea:
         e1:4f:13:80:a1:35:ce:99:21:4f:da:50:a4:59:59:b6:b3:ce:
         52:e3:c1:2d:3c:75:f8:d0:3a:80:fc:cf:39:1f:d7:f2:db:a7:
         06:4f:23:12:67:c1:41:c4:83:1f:d1:e5:be:82:f9:81:18:a4:
         13:91:eb:36:00:5f:cc:e8:26:d1:8b:2d:af:2b:8f:73:35:e6:
         ad:15:49:a5:48:00:5e:07:aa:45:68:03:ab:44:93:78:25:61:
         e8:f7:90:22:63:61:78:67:73:d7:ff:7e:b3:ff:94:d5:26:3a:
         10:79:44:b5:0c:97:0b:6b:74:d3:28:46:4b:c5:d8:a7:1b:d2:
         46:b5:0c:25:6f:fe:a4:13:15:d0:45:80:4d:29:eb:69:6b:8a:
         88:f9:d3:94:63:df:9a:4f:7c:2e:f3:15:f3:18:12:fe:e9:b0:
         bd:20:9e:aa:5a:9f:04:3a:32:86:97:4a:37:0c:77:e5:e9:0a:
         ed:c7:af:d8:2e:38:be:7d:f3:f3:8e:89:86:9c:9d:ab:a7:6f:
         cf:e9:b6:79:83:2b:40:6c:ca:90:8f:91:52:58:ef:48:84:70:
         2c:f2:e6:ec:84:6d:84:14:6e:5a:7b:57:8c:33:12:43:dc:4a:
         72:9a:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:48:24 2025 by rpki-client