Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/80535b3c-3fcf-30d4-9cb6-bbe4c52e8a65.roa
File:                     80535b3c-3fcf-30d4-9cb6-bbe4c52e8a65.roa (raw, json)
Hash identifier:          Sf0bgW278pEJ2Vg18gWjsiZC2eKb86RV7XHmfqaRV44=
Subject key identifier:   58:67:96:94:E1:B4:34:87:68:48:69:C5:87:49:3A:DE:5A:CA:D7:C0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858495ABEE67FF463F4EE18322C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/80535b3c-3fcf-30d4-9cb6-bbe4c52e8a65.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     834
IP address blocks:        45.40.121.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 02 Apr 2025 16:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e6:7f:f4:63:f4:ee:18:32:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=61970dca-2ffc-4b2e-8d8b-f66d013cc9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:21:08:66:29:92:70:e2:0b:45:5c:51:3d:
                    12:e9:1d:56:77:9b:f1:0b:bb:b4:4c:0d:75:81:2f:
                    42:83:5f:7b:1f:8c:1d:95:94:4b:b0:bd:43:5f:6e:
                    bb:94:90:55:07:19:ed:e6:46:c5:67:87:fb:d4:8d:
                    12:06:b6:17:41:63:7c:2b:1b:c5:11:54:7f:54:2f:
                    8f:01:70:9d:b7:69:bd:89:c8:98:7c:2f:8c:4f:88:
                    31:ce:b5:e9:92:e9:90:68:85:44:28:f2:18:f7:9e:
                    1a:a3:2d:29:3d:78:ae:77:64:6f:ca:70:4e:4c:e9:
                    44:d2:62:b3:14:2b:cc:73:a9:af:d4:f2:3f:f4:43:
                    81:ad:1d:a9:66:32:b8:2b:c6:2e:ba:e6:f8:da:b5:
                    69:f3:72:06:0a:37:5d:28:0c:1f:28:a6:6f:85:64:
                    8e:84:33:d8:16:fe:d6:8d:5a:e8:af:97:d2:ef:fc:
                    19:f7:6a:cd:77:bd:ff:5d:46:39:b6:cb:7c:98:f1:
                    e0:73:16:d7:82:c2:38:77:98:61:2b:fd:f0:de:ed:
                    70:b0:74:96:a0:a7:d9:95:22:fa:81:f8:bd:7b:82:
                    f3:62:ae:99:2b:05:57:31:e9:6b:df:d7:69:70:87:
                    65:c6:2d:87:26:a0:a1:ad:db:ac:e7:a2:d4:b8:2f:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:96:94:E1:B4:34:87:68:48:69:C5:87:49:3A:DE:5A:CA:D7:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/80535b3c-3fcf-30d4-9cb6-bbe4c52e8a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:88:a9:79:d2:dd:9f:96:f8:de:37:91:1c:93:38:5e:62:b4:
         2b:a1:f9:d1:4b:d3:92:04:c8:0d:cf:c8:de:c1:39:77:f8:9a:
         bc:3d:08:a8:2d:4c:16:c8:93:15:d1:f5:5a:d8:a2:92:a4:e4:
         b3:fb:ef:c8:b8:cf:ca:0d:40:25:b2:d9:f8:79:9f:f3:c7:00:
         e3:08:00:68:f0:c3:f9:b1:d7:e1:0a:b4:d3:c5:28:4c:42:d9:
         23:7d:d0:03:40:8b:e7:8a:ac:9a:62:3f:49:33:d4:7a:70:d5:
         be:14:3f:c8:be:47:00:f1:16:5f:42:15:7e:cc:eb:7d:4b:2b:
         dc:08:06:86:d9:cd:e7:55:3b:ac:ca:6c:58:ec:38:f5:07:26:
         d0:0b:9d:e3:a3:dc:3b:44:d8:3f:2c:db:ee:ea:12:6c:28:4f:
         1d:c3:2d:a9:12:5b:d7:d2:c7:b0:ed:82:58:c7:53:6d:a7:13:
         d4:eb:ed:7c:49:12:d4:92:79:d3:ef:d3:45:61:01:ef:df:3c:
         73:5e:fa:e5:21:d9:ab:e1:6c:af:46:64:dd:47:60:bc:69:d5:
         de:73:bb:09:47:ed:74:3d:8d:05:58:18:5c:49:db:bf:12:ac:
         65:a0:6e:d8:24:ef:29:bd:d0:df:5c:62:9b:37:c5:f0:95:11:
         72:94:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:33 2025 by rpki-client