Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/38c57f18-eb04-33b1-b282-7e12226e75c0.roa
File:                     38c57f18-eb04-33b1-b282-7e12226e75c0.roa (raw, json)
Hash identifier:          yXm6ZIWUV5IIyIgwA5SkImyJIkTam70lHid60fdl/ZY=
Subject key identifier:   F7:71:3A:86:CE:18:A3:55:3E:61:E7:C1:9F:9B:F1:BF:7C:94:D2:A3
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285848A400C3A639EFF2B87B260680
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/38c57f18-eb04-33b1-b282-7e12226e75c0.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        173.249.165.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 21 Feb 2025 10:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c3:a6:39:ef:f2:b8:7b:26:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=0952c9d1-5609-4654-9f75-e26e15e19a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:bc:59:23:f8:aa:2f:fb:76:33:38:8a:69:
                    86:5a:06:9d:bb:c1:e9:6c:4c:98:33:78:a8:83:1d:
                    2a:bf:2b:4a:32:69:9a:4b:01:72:35:d3:37:5f:45:
                    f1:ec:02:10:36:21:4e:b1:d4:7b:9c:01:5b:c4:44:
                    5d:49:71:de:84:b0:fe:f5:e0:7a:43:35:aa:6c:ef:
                    09:19:9b:72:2c:d9:b3:ca:89:ae:55:a5:51:2a:aa:
                    2f:1d:05:a0:59:0a:e2:2e:23:6f:e6:fe:6e:15:9e:
                    1b:76:3d:f0:4c:18:2a:1f:3b:0c:05:cd:0c:a8:80:
                    93:ab:88:ce:b6:4e:fa:41:80:d4:75:d8:18:a7:aa:
                    81:93:3d:10:4b:62:59:84:7e:7b:fd:3c:7b:92:24:
                    67:6c:af:17:51:38:52:78:8f:a2:5d:b8:94:e0:db:
                    b9:93:6d:56:79:ce:0e:df:28:c5:46:91:5c:57:fd:
                    f6:1b:40:77:d6:da:7e:80:0c:8c:d2:79:d1:e2:c2:
                    7c:17:e7:0d:a8:d3:0e:ba:66:ee:5f:d7:65:be:3f:
                    de:39:36:d9:a7:be:56:3a:b6:05:45:d9:f1:39:86:
                    ce:2f:ec:6b:4a:12:7b:29:6f:d0:51:31:90:31:f9:
                    62:9f:9b:2f:71:6c:a1:1d:64:57:f6:a0:eb:1e:49:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:71:3A:86:CE:18:A3:55:3E:61:E7:C1:9F:9B:F1:BF:7C:94:D2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/38c57f18-eb04-33b1-b282-7e12226e75c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:37:bc:e8:7b:1a:6f:58:b1:92:e1:3c:72:2e:e4:22:f8:5a:
         8e:35:60:39:cd:a1:84:5c:28:81:fb:58:99:f3:09:52:69:4b:
         4c:b8:8f:d7:04:ac:98:2e:70:f1:e2:1f:74:64:9f:52:e1:de:
         c4:19:fb:83:e4:e8:e4:95:8a:ca:2d:2c:8f:13:e4:1b:85:81:
         aa:6b:ee:d6:2c:b2:d7:19:15:a0:f1:3f:5c:1e:53:a0:28:b4:
         a9:fe:68:d6:43:57:d9:03:80:8d:7c:73:b1:36:a9:e3:34:40:
         a3:5b:cc:91:c5:b5:58:1b:d2:bb:2b:e4:b3:a9:dc:bb:11:b6:
         28:16:ed:1d:6d:5f:35:17:8f:2c:3c:b2:d2:29:2a:a7:d6:8d:
         41:57:f5:ab:63:44:90:55:3e:71:7f:a3:fa:14:63:2d:81:8e:
         72:2d:d3:ba:7a:3d:7a:90:7b:9f:da:16:d5:ea:47:5b:aa:a3:
         9f:dc:cf:44:90:9b:4f:bc:ce:12:2d:4e:8c:1b:de:32:60:6e:
         38:8a:ad:2d:14:93:75:6c:a6:45:e0:bc:c7:fd:9b:e4:74:67:
         8e:0d:f3:06:6a:c7:ef:0a:29:08:43:8e:b2:9e:10:0c:45:31:
         11:54:27:26:8b:4d:c5:31:2c:1f:62:87:3c:f5:0e:11:84:76:
         05:23:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:30 2025 by rpki-client