Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cd266e32-6a9a-3d10-b288-f55921b5557c.roa
File:                     cd266e32-6a9a-3d10-b288-f55921b5557c.roa (raw, json)
Hash identifier:          Fqm4DM6p1BMIASV4zEvpQrOdH0/CrjfgEeRqIG5I7NY=
Subject key identifier:   CE:B9:74:66:7C:FE:77:37:0B:45:BB:64:82:40:66:BA:C5:D2:5D:AA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C086E0B98A0032151980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cd266e32-6a9a-3d10-b288-f55921b5557c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        71.70.0.0/19 maxlen: 19
Validation:               Failed, certificate revoked on Tue 18 Feb 2025 20:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c0:86:e0:b9:8a:00:32:15:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6f077a01-d162-40e7-a13b-67adea72b85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:9d:2c:ac:d0:1a:14:cd:e0:c4:e0:78:d0:
                    aa:ab:a5:31:36:4c:cb:31:8e:32:bb:f0:59:ca:33:
                    56:98:c0:6d:e5:66:d4:9c:2f:7b:e2:34:92:7a:e0:
                    c7:d4:43:f0:fd:51:f3:ca:66:d5:e1:34:51:7d:22:
                    9d:7b:ec:20:de:82:cf:25:a2:41:f9:11:d0:8d:60:
                    b2:10:ec:e6:1a:0c:15:e3:10:a7:ef:eb:48:ae:17:
                    ca:18:dd:40:7f:e4:c6:2b:6c:c2:9e:9f:1e:65:2e:
                    09:6a:ea:06:b0:4b:f5:80:2f:d7:6f:dc:6d:da:55:
                    9c:8a:6d:54:c4:21:d5:d5:a9:d5:f1:cd:d7:ce:b7:
                    6f:e7:8c:d8:26:0a:b9:c5:4f:5e:d0:ad:5f:52:9f:
                    ec:fd:e0:4f:31:f9:30:43:a8:7b:b6:a5:f2:45:7e:
                    7e:99:60:0a:96:00:15:e4:c3:33:b6:63:7c:1f:b9:
                    df:56:43:e0:9c:d1:f0:94:80:56:4f:c5:cd:08:53:
                    32:3d:a4:af:52:e7:65:73:92:0d:60:69:34:48:f0:
                    9d:43:52:75:4f:b0:b5:44:1a:09:98:56:33:ff:21:
                    8e:18:4b:f2:1c:76:7d:42:a6:4d:18:f0:ed:ea:7e:
                    42:6e:f4:94:30:e7:09:73:5c:16:a9:da:81:e1:a9:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:74:66:7C:FE:77:37:0B:45:BB:64:82:40:66:BA:C5:D2:5D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cd266e32-6a9a-3d10-b288-f55921b5557c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.70.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4c:05:75:32:df:c5:b4:d0:7e:90:75:34:49:a8:f6:ec:8c:
         25:ef:51:42:c6:70:ce:b4:61:6c:c0:cd:fe:a3:e0:a5:96:48:
         b2:08:ef:43:98:16:b3:55:77:35:44:4d:94:2f:d1:bf:0b:25:
         b1:7a:1c:91:5a:79:2b:8c:31:c8:23:9b:19:f4:99:12:3b:a6:
         ac:83:6a:6c:11:a0:9f:cc:47:1f:4f:c1:2e:81:5a:11:cd:db:
         29:b4:46:31:14:6b:4c:5c:95:2f:77:7f:9b:66:bb:b7:18:19:
         84:0f:2c:6e:e2:d2:94:62:5e:2c:dd:72:78:2c:d8:c9:bc:97:
         c5:e5:c4:6d:e2:3d:f6:00:cc:de:ca:47:02:99:fb:77:09:64:
         f8:b6:0c:46:eb:56:fd:6c:46:60:5e:79:a0:ce:67:11:2a:77:
         b5:cd:49:46:fd:ac:ac:a2:a6:f5:ba:8e:0d:3c:a1:5a:00:fa:
         c7:a8:f1:3a:b6:0c:fe:69:8d:f0:a8:95:13:5c:19:5a:eb:39:
         8a:06:a3:c4:d1:ea:df:67:5d:c1:b6:0e:42:ab:17:2f:e9:b3:
         b6:78:fd:b5:d5:1c:51:83:8b:b5:4d:37:62:75:ae:fc:17:3e:
         e6:7e:3c:2a:0b:b8:8d:fd:95:bb:ac:36:a7:64:ff:f9:90:5a:
         e2:c7:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:47:42 2025 by rpki-client