Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03047000-9d5c-377a-a2b7-fb87185adffe.roa
File:                     03047000-9d5c-377a-a2b7-fb87185adffe.roa (raw, json)
Hash identifier:          /vafkOXrB3HtuRf+uw4JKa7PZ6VvmiewCd3pfE4Dw4U=
Subject key identifier:   92:5C:29:73:EA:26:0C:09:2A:AA:DF:65:3E:5A:41:54:66:FE:E8:1C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584917DC00E166EEB7851CEEBD00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03047000-9d5c-377a-a2b7-fb87185adffe.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        158.62.223.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 09:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:00:e1:66:ee:b7:85:1c:ee:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=d10c82b1-069b-44d4-9fea-0896dd6208be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:44:cc:42:a4:df:c5:06:5f:db:d1:20:d0:
                    be:7e:01:3e:c4:ed:d6:f0:84:1d:5e:a7:e1:1e:aa:
                    7f:c7:91:c7:e1:bb:52:31:9c:4d:7c:c7:92:36:38:
                    84:19:78:13:1b:f2:c5:d7:0d:32:44:9e:02:d3:bd:
                    fc:31:fc:d5:9c:49:97:15:4b:5b:17:0c:97:f1:a6:
                    d0:ce:53:20:f6:dc:9e:70:32:3f:b8:1c:a1:b1:a6:
                    2b:e5:ab:64:5a:6c:f0:7e:1a:bc:99:da:da:52:93:
                    20:be:72:27:90:49:30:92:71:bf:33:45:d2:68:72:
                    b8:01:64:30:cf:1a:7f:0d:6e:44:df:f3:11:78:84:
                    a3:83:de:c1:51:25:de:c8:7c:a7:64:b6:a9:31:b2:
                    6c:59:77:c0:f3:32:56:3b:54:0f:64:64:4b:8f:f8:
                    46:ad:5b:16:f3:84:2a:23:db:44:6f:fc:e3:69:45:
                    80:c1:2a:83:60:7f:a2:4b:9d:a6:04:43:f0:02:15:
                    7f:99:05:f2:a2:e5:ca:ca:f3:9a:9e:cb:f2:2d:45:
                    3c:37:e2:ae:e9:cc:6d:09:44:b9:bf:1b:a1:a4:12:
                    df:2d:88:ea:c3:2d:97:e7:5e:a3:3c:f7:56:54:7f:
                    1f:00:0d:74:e0:5f:07:73:a3:7e:a5:c9:33:4b:47:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:29:73:EA:26:0C:09:2A:AA:DF:65:3E:5A:41:54:66:FE:E8:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03047000-9d5c-377a-a2b7-fb87185adffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:e2:04:26:49:2c:6e:65:f9:d9:ef:93:61:f0:90:8f:16:87:
         4d:aa:b0:3f:39:bf:85:1d:df:c3:e3:26:fc:d5:46:ce:16:fd:
         fb:0e:f2:34:44:22:bc:d3:57:fe:49:24:22:fb:9c:32:95:1b:
         0c:40:75:20:81:f3:24:c3:7d:22:11:fb:7f:69:92:19:ef:82:
         9f:5d:e7:06:c1:6a:e0:44:2c:66:b5:5f:d1:10:4f:e1:a7:64:
         b8:56:9e:7b:b0:a9:ac:f9:c2:23:36:c4:81:a0:41:fe:59:e8:
         48:a7:1c:2a:9e:9c:43:59:91:c4:f4:09:1e:8c:4e:dc:59:53:
         99:e3:ec:7d:0d:1e:b2:f2:0d:8d:5b:cf:8d:ce:93:7b:78:e3:
         a0:02:38:bf:1c:6d:59:9b:48:3c:bf:aa:f4:18:6c:18:b6:ed:
         06:30:7f:56:4a:4a:5d:8a:b2:c3:ca:c1:59:bd:b8:b4:dd:9e:
         e8:60:46:3c:8b:d9:76:69:6b:39:94:0c:ec:b1:ae:89:e2:cb:
         2c:7f:70:35:bc:25:c0:b8:1e:87:9d:55:b4:0a:d0:fa:51:d3:
         5d:fb:7a:f6:dd:b4:f0:0c:c6:d8:85:03:ce:21:1d:07:a4:61:
         76:ec:3f:53:c2:ce:40:74:75:cc:6e:47:9f:f0:a8:9d:4e:89:
         f0:ab:1f:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3ADhZu63hRzuvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDEwYzgyYjEtMDY5Yi00NGQ0LTlmZWEtMDg5NmRkNjIwOGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmJEzEKk38UGX9vRINC+fgE+xO3W8IQdXqfh
Hqp/x5HH4btSMZxNfMeSNjiEGXgTG/LF1w0yRJ4C0738MfzVnEmXFUtbFwyX8abQ
zlMg9tyecDI/uByhsaYr5atkWmzwfhq8mdraUpMgvnInkEkwknG/M0XSaHK4AWQw
zxp/DW5E3/MReISjg97BUSXeyHynZLapMbJsWXfA8zJWO1QPZGRLj/hGrVsW84Qq
I9tEb/zjaUWAwSqDYH+iS52mBEPwAhV/mQXyouXKyvOansvyLUU8N+Ku6cxtCUS5
vxuhpBLfLYjqwy2X516jPPdWVH8fAA104F8Hc6N+pckzS0diuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJcKXPqJgwJKqrfZT5aQVRm/ugcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDMwNDcwMDAtOWQ1Yy0z
NzdhLWEyYjctZmI4NzE4NWFkZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOPiBCZJLG5l+dnvk2HwkI8Wh02qsD85v4Ud38PjJvzVRs4W/fsO8jRE
IrzTV/5JJCL7nDKVGwxAdSCB8yTDfSIR+39pkhnvgp9d5wbBauBELGa1X9EQT+Gn
ZLhWnnuwqaz5wiM2xIGgQf5Z6EinHCqenENZkcT0CR6MTtxZU5nj7H0NHrLyDY1b
z43Ok3t446ACOL8cbVmbSDy/qvQYbBi27QYwf1ZKSl2KssPKwVm9uLTdnuhgRjyL
2XZpazmUDOyxroniyyx/cDW8JcC4HoedVbQK0PpR0137evbdtPAMxtiFA84hHQek
YXbsP1PCzkB0dcxuR5/wqJ1OifCrH+E=
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:46:49 2025 by rpki-client