Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d52b72a1-ae06-39aa-9145-a6e2e5470cbf.roa
File:                     d52b72a1-ae06-39aa-9145-a6e2e5470cbf.roa (raw, json)
Hash identifier:          M00BPZofow+aYKGpsmKOdyW0I8UyrIWvtVCVT7HPTck=
Subject key identifier:   B5:45:25:6C:85:00:87:03:15:52:05:7C:BC:1F:35:06:1E:41:8E:04
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61B669736E4D83CC1CD1780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d52b72a1-ae06-39aa-9145-a6e2e5470cbf.roa
Signing time:             Sat 24 May 2025 16:37:53 +0000
ROA not before:           Sat 24 May 2025 16:37:53 +0000
ROA not after:            Fri 22 Aug 2025 16:37:53 +0000
asID:                     213238
IP address blocks:        172.120.239.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1b:66:97:36:e4:d8:3c:c1:cd:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:37:53 2025 GMT
            Not After : Aug 22 16:37:53 2025 GMT
        Subject: CN=ea0a10ad-105f-4991-9ff3-fe1710edc729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:be:13:5e:6a:60:cd:8a:35:14:b6:6a:37:
                    85:e0:6b:1d:96:a6:24:66:a5:c7:e1:c1:76:4f:9a:
                    0d:53:c1:c7:d4:40:aa:2b:3f:d7:3b:6a:2c:3f:39:
                    84:88:d3:ca:5d:62:2c:28:b9:b6:02:ea:d9:33:ae:
                    89:76:a0:85:0b:67:18:91:f5:d3:52:db:12:8e:04:
                    31:65:e6:4f:72:eb:3e:7e:92:90:7d:8d:89:ca:af:
                    1f:63:d3:45:7c:c2:71:7a:a9:60:c2:fd:a3:69:45:
                    a8:5b:b4:44:e2:99:36:44:92:3b:cc:6b:03:5b:8c:
                    be:2e:c6:25:c9:33:0e:f9:d0:be:cc:a4:44:53:2e:
                    01:e1:1a:de:33:01:3a:b2:cd:ea:5a:f7:c1:4d:7d:
                    66:f5:3d:78:d4:7c:02:bd:cc:4f:5a:7c:08:cb:5d:
                    63:92:12:d9:69:cb:4a:a1:cd:d3:67:db:f6:a9:ad:
                    f5:25:f0:a8:4d:c8:18:5d:31:a1:fd:03:25:4a:58:
                    91:50:ef:c9:da:18:22:30:8a:36:b6:fb:34:01:11:
                    ad:c6:24:3a:88:32:38:43:d6:e9:2a:7a:69:b5:28:
                    a1:d8:43:e1:0b:5a:ba:e7:6b:32:55:3f:bd:0e:bf:
                    03:d4:5b:c1:e0:2f:0a:5b:04:37:b9:b3:f1:d3:d3:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:25:6C:85:00:87:03:15:52:05:7C:BC:1F:35:06:1E:41:8E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d52b72a1-ae06-39aa-9145-a6e2e5470cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:f1:58:c7:a1:62:67:78:d5:93:48:ea:59:96:f4:bc:bd:
         c1:80:6a:d5:3c:6f:1c:ee:f2:98:99:be:2a:97:1f:30:8d:6d:
         81:20:6b:ac:cf:b2:c8:ae:5a:7e:6a:29:4e:65:d0:f2:74:5a:
         db:12:54:41:3e:6e:37:e8:57:fa:97:48:9b:c7:fd:cc:a2:2c:
         6e:29:e1:cb:e9:96:84:16:d6:d8:f4:09:fd:32:4d:7a:70:0f:
         b0:99:0e:68:5c:03:a9:98:24:ae:01:f9:84:51:d0:69:b1:34:
         65:42:de:91:f2:df:cf:a9:d0:58:48:ba:05:90:c6:a6:70:52:
         21:41:4c:4e:dd:80:af:66:50:06:32:7f:01:54:b0:cf:e3:d1:
         6a:b3:8e:90:f5:f4:e8:d5:4b:7d:f5:e0:38:dc:f8:ec:2e:48:
         3e:6a:90:6b:04:40:ab:26:a7:d8:10:6b:9c:43:da:2a:ca:09:
         4c:0e:2a:20:2d:6c:d5:31:74:b0:2c:a1:4a:9e:5d:35:53:cd:
         72:e5:94:84:b2:95:6d:76:c7:f3:19:fa:1e:3f:a4:ec:a0:fc:
         b7:a7:7a:c0:d3:e9:62:cb:bf:92:f1:41:f1:4f:01:42:64:0d:
         97:47:a6:be:43:95:d2:22:40:d8:5f:94:34:7f:87:c9:4d:90:
         45:0f:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:37:31 2025 by rpki-client