Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bbc8f222-300b-3c6f-8926-a446ae2d8b98.roa
File:                     bbc8f222-300b-3c6f-8926-a446ae2d8b98.roa (raw, json)
Hash identifier:          jKp2Iddf4BGa1aK3+gZBHoVipRaLbLrlPgxlDwT94TU=
Subject key identifier:   C1:6C:16:E9:D9:CF:15:CC:55:7E:9E:A2:59:AB:93:52:D4:31:8B:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C86066529B5068BFC8694F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bbc8f222-300b-3c6f-8926-a446ae2d8b98.roa
Signing time:             Wed 05 Feb 2025 14:42:47 +0000
ROA not before:           Wed 05 Feb 2025 14:42:47 +0000
ROA not after:            Tue 06 May 2025 13:42:47 +0000
asID:                     63023
IP address blocks:        172.252.212.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 14 Feb 2025 08:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:60:66:52:9b:50:68:bf:c8:69:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  5 14:42:47 2025 GMT
            Not After : May  6 13:42:47 2025 GMT
        Subject: CN=cc5c7b76-b50c-4e6f-a715-b7cb4ba5b112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:3b:39:9e:60:9b:38:a0:e2:51:ce:27:29:
                    2f:56:0d:f8:14:44:35:6e:a4:6e:ba:4b:94:b8:e5:
                    d9:18:cd:0a:4f:21:ff:57:ae:47:5e:d0:b1:6b:5e:
                    67:bd:5e:cc:db:57:25:2c:98:98:23:17:b9:aa:c0:
                    ee:5e:42:db:3b:a2:c2:5f:9e:1b:bf:57:d2:0f:58:
                    36:cb:bd:bf:14:00:03:01:3e:e4:6c:bc:c8:8a:92:
                    dc:1f:ca:a2:8c:b8:27:dc:ae:fc:d2:40:f6:0e:7e:
                    e6:9a:1a:54:63:9e:b9:b6:4d:22:e6:05:54:64:2c:
                    cb:bf:2f:af:2f:a4:5d:b1:c2:f4:63:ef:52:29:0c:
                    b3:f5:dd:a3:13:05:66:52:a5:ae:a3:32:e9:57:43:
                    35:08:2e:01:ed:d2:e7:9c:10:40:4a:81:d4:05:c4:
                    05:4a:48:95:ed:26:7b:f2:89:29:4a:2b:ed:c1:4e:
                    2d:28:08:48:11:ce:f0:87:19:7d:53:9d:de:40:68:
                    a8:be:6f:c4:f9:7f:25:96:f7:8b:e4:aa:81:f8:2c:
                    61:94:91:56:ba:98:3b:38:ba:99:21:1f:53:93:5a:
                    04:5b:5f:b2:81:a3:5e:4d:3b:aa:c0:7b:cb:47:02:
                    3d:18:87:8f:91:32:d6:21:8f:9a:7e:de:16:56:b4:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:16:E9:D9:CF:15:CC:55:7E:9E:A2:59:AB:93:52:D4:31:8B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bbc8f222-300b-3c6f-8926-a446ae2d8b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:b9:82:cc:77:8c:71:0c:dc:05:2e:e4:ff:d4:6d:95:d5:
         1d:ff:9f:92:13:eb:ff:2e:cc:7e:98:22:7c:81:5e:24:6f:28:
         21:3e:75:36:1f:87:da:58:e3:be:08:ab:f9:36:bd:49:91:61:
         92:b0:7d:99:28:a9:e5:82:14:8f:f9:d7:29:91:7d:fb:f6:50:
         87:bb:1c:fb:41:56:6e:04:83:9f:50:a7:be:73:f7:5f:35:43:
         ad:0d:2b:a0:cc:cf:56:12:c7:c5:b3:0a:9d:d4:1d:a4:43:c5:
         b1:63:c0:4b:15:86:c3:9d:c4:d3:0b:c8:6a:1e:6d:25:b7:d8:
         4c:71:90:95:de:a7:0e:eb:db:7c:ab:3c:c9:ba:09:78:07:6a:
         7c:ae:83:cf:e4:18:31:53:a0:21:75:69:e9:c5:7e:92:dc:38:
         fc:a8:d5:79:aa:93:1b:41:dc:a4:de:e2:98:41:22:8b:ed:2b:
         53:4c:f0:51:01:09:14:45:de:3a:fc:e3:39:11:21:c1:12:77:
         1f:c1:8a:1b:fb:5c:7a:3c:79:41:6c:40:9f:45:af:4f:2a:e6:
         58:9f:60:3c:1c:7a:58:56:11:60:bf:8d:dc:1f:78:e6:91:85:
         13:27:52:ee:1f:ce:a1:77:af:25:8f:01:eb:12:af:0f:5a:42:
         4b:29:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:31 2025 by rpki-client