Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/80e2e9af-5270-3362-b493-8468e1e86d13.roa
File:                     80e2e9af-5270-3362-b493-8468e1e86d13.roa (raw, json)
Hash identifier:          wGUikfH5ulF8KvrgTsRMPs3bNuhSe0jJehu7yOn/IDQ=
Subject key identifier:   EB:51:CE:3A:D7:C5:02:3D:A4:B4:B2:64:C4:C7:30:EF:1E:DE:E5:07
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D64124DF80C8A625BDE45EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/80e2e9af-5270-3362-b493-8468e1e86d13.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     149440
IP address blocks:        192.177.171.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 18:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:24:df:80:c8:a6:25:bd:e4:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=378c97f6-ecef-4f49-b811-00e59408eb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:e4:34:a6:00:3b:fe:30:54:59:d1:21:54:
                    7d:25:b7:6e:5d:86:2d:63:38:9c:ab:2a:b2:e3:34:
                    cb:a8:9c:25:c4:93:02:d9:4a:eb:af:c1:a8:83:de:
                    36:22:30:4e:28:3f:dc:35:2f:c4:1d:89:df:bc:89:
                    2b:cc:ca:7f:ef:4f:04:e2:8a:2b:42:cd:ff:58:3f:
                    59:50:da:9c:94:5d:c3:04:b5:17:14:62:86:38:d7:
                    35:1a:aa:b1:a8:cb:79:ac:a9:97:27:2a:02:73:53:
                    d4:35:2c:3e:33:5f:aa:7d:ba:2e:dc:f9:5b:8f:37:
                    b5:80:6a:36:9b:d8:94:d0:fe:0d:b8:6a:cb:01:d1:
                    a3:2e:ba:2c:92:9b:b1:b9:a7:d2:a0:0f:b2:a5:47:
                    1b:30:e1:83:56:8d:43:1a:bc:ba:48:f9:cd:2f:5a:
                    48:a0:b4:d5:c5:5b:e8:fc:a7:f4:3d:b1:cc:a0:33:
                    7f:81:6c:cb:85:28:4d:03:73:ac:af:9e:dc:a3:8f:
                    35:a2:c1:34:3c:1c:b9:26:a7:dc:17:1a:a1:8c:cb:
                    51:4f:6c:b8:11:0f:56:e2:4a:71:2e:d8:ec:60:6b:
                    6c:fb:d3:b5:46:df:52:67:2d:fc:4c:ae:09:c4:a3:
                    c6:21:02:e5:4e:ba:d6:ad:e8:80:aa:6d:89:05:7f:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:CE:3A:D7:C5:02:3D:A4:B4:B2:64:C4:C7:30:EF:1E:DE:E5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/80e2e9af-5270-3362-b493-8468e1e86d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:37:8f:b2:66:7d:92:e8:e3:7c:33:49:99:e8:82:ff:93:e6:
         5e:b9:e2:bb:c9:e7:af:42:d0:52:e6:3e:0e:65:83:b9:41:ec:
         13:cf:92:f6:e7:ae:0f:4f:02:f0:a7:3b:05:4d:7e:2e:69:fd:
         9c:e4:ef:39:a8:cf:ab:72:35:b1:bd:7d:df:d1:c0:43:00:a5:
         46:22:d0:6f:d1:a6:d7:38:fa:b7:5a:32:61:6b:5d:b2:4b:10:
         4f:46:9d:3a:63:d3:bf:6c:ec:d0:95:53:4c:f6:4c:00:96:55:
         db:9d:0e:bc:5b:ea:27:52:06:69:5d:4a:18:cf:05:bb:a4:d5:
         58:28:34:7c:39:ff:e0:bb:5c:07:c6:22:0f:38:61:82:c5:a2:
         01:ab:8d:f5:28:8c:1b:88:28:bb:89:80:1e:f3:04:e9:92:b7:
         b4:12:5a:40:ac:19:3d:1a:f7:9f:85:f3:a0:36:f9:90:82:87:
         53:e3:e7:b2:ea:b5:04:d3:d7:dd:b5:33:21:67:f1:60:14:ed:
         24:b5:1d:94:aa:67:f9:3f:3e:2b:3c:ab:02:e6:ae:95:72:22:
         45:03:66:88:11:b6:f9:39:8b:4c:95:f9:8b:6c:d8:81:d8:62:
         d9:90:4f:67:81:2a:3f:4a:b5:d9:b0:2a:72:61:f8:3c:e1:c5:
         d5:06:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:58 2025 by rpki-client