Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1e72fb-e0b7-3003-8d31-683704c38c28.roa
File:                     3c1e72fb-e0b7-3003-8d31-683704c38c28.roa (raw, json)
Hash identifier:          ygkgtqEINgduIWiTx8QfmWP9rKLEY4Rl6uxZ5fOTmiU=
Subject key identifier:   D6:56:17:BB:C2:59:A8:1D:BE:A0:C9:51:36:42:76:39:1E:11:44:5D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D649A5775014137638C9DF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1e72fb-e0b7-3003-8d31-683704c38c28.roa
Signing time:             Mon 10 Feb 2025 14:18:16 +0000
ROA not before:           Mon 10 Feb 2025 14:18:16 +0000
ROA not after:            Sun 11 May 2025 13:18:16 +0000
asID:                     211014
IP address blocks:        104.164.85.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 14:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:49:a5:77:50:14:13:76:38:c9:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:18:16 2025 GMT
            Not After : May 11 13:18:16 2025 GMT
        Subject: CN=2ee4f384-06c0-4183-b8ec-f2bb15b01519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:a5:64:c4:80:26:e0:64:ea:f8:1f:9a:f6:
                    c2:64:f7:5d:cd:f7:bc:56:67:ba:85:d3:b0:49:3c:
                    1a:b5:f6:e1:38:29:b5:0f:5b:20:d4:ec:c3:60:eb:
                    6e:55:6a:fd:90:aa:72:43:2b:87:57:6d:a8:79:17:
                    0d:c7:7a:35:f7:63:2d:0b:8e:9c:76:37:93:e8:ff:
                    d4:98:48:ae:16:13:2e:8d:04:94:5d:dc:bc:7a:99:
                    7a:ab:be:59:d6:ad:ff:d5:93:28:4c:cc:22:d7:9a:
                    92:80:b2:d3:e8:32:f0:19:36:f3:c7:59:6d:82:eb:
                    58:86:f0:cf:39:e6:0d:b7:71:06:80:4e:ac:07:32:
                    9c:7b:f2:45:9d:4a:95:20:51:f8:dd:c6:5f:3d:b2:
                    d0:45:f1:e6:07:0e:5b:c0:0b:3e:ab:3a:e2:8f:5b:
                    74:58:6e:df:07:36:60:7f:33:76:33:9c:15:fc:8e:
                    4c:83:32:bc:81:93:80:aa:62:f2:39:8a:df:df:87:
                    36:58:fc:31:37:e4:93:f5:3c:c8:36:a0:43:bf:6e:
                    0b:87:fc:c7:fa:20:d1:b3:7b:96:32:64:9d:ba:f8:
                    48:9f:aa:99:f0:31:91:ea:48:eb:13:5c:46:a1:b6:
                    e8:df:9b:ff:98:22:a6:d1:3f:82:58:25:7b:24:44:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:17:BB:C2:59:A8:1D:BE:A0:C9:51:36:42:76:39:1E:11:44:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1e72fb-e0b7-3003-8d31-683704c38c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:c7:29:82:c3:71:7b:df:29:94:37:50:b7:dd:21:ef:d7:
         e7:de:15:b4:6a:fe:81:2f:65:31:9f:53:65:bb:b9:24:4c:58:
         2a:b5:39:d1:7f:0a:dd:58:b8:62:5b:66:5f:63:5e:42:3a:00:
         fc:b8:48:b2:67:7d:03:b3:dd:85:e7:86:ed:00:d5:1b:8c:fb:
         9e:00:30:ad:0b:5d:40:a5:f9:1c:f4:88:cb:85:33:0b:10:24:
         d6:2f:8b:af:fe:6d:f3:b1:48:3d:d9:ee:8d:45:c2:b0:11:6f:
         1f:31:c8:eb:fe:74:d6:b6:df:1f:de:c4:74:f4:79:de:1f:fc:
         5e:f8:b6:68:7b:35:a5:3d:10:d8:1b:f6:51:34:09:b2:5b:9e:
         01:9a:8b:6c:86:1b:a2:cc:57:e9:c3:72:4e:7d:34:45:30:b0:
         5e:a2:0f:0a:f1:32:f6:1f:91:14:ce:02:f1:45:3f:4d:f5:b2:
         3e:59:21:22:35:d8:d6:33:29:f4:2e:ea:38:24:ac:8a:2d:3c:
         50:c5:db:01:70:1f:35:d1:d3:67:00:e3:45:59:ab:39:cb:83:
         52:28:bb:b2:61:54:d5:30:c0:95:71:42:42:c3:42:97:7c:77:
         d2:b2:3f:25:53:67:7e:82:9b:f0:2b:57:75:50:00:04:8f:51:
         2e:35:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:31 2025 by rpki-client