Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c06d021c-4e80-383e-bc03-7655ee23a8b5.roa
File:                     c06d021c-4e80-383e-bc03-7655ee23a8b5.roa (raw, json)
Hash identifier:          +mpq9QJsXAvOXUo5IiW47AkMTGkS0njeiwpOFWp3xnE=
Subject key identifier:   CA:FC:5E:14:52:98:B5:5C:47:47:C9:C0:B0:48:C9:4F:C7:5F:6F:1B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847FAE4F3DA345D275130EEE000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c06d021c-4e80-383e-bc03-7655ee23a8b5.roa
Signing time:             Sun 24 Nov 2024 00:13:21 +0000
ROA not before:           Sun 24 Nov 2024 00:13:21 +0000
ROA not after:            Sat 22 Feb 2025 00:13:21 +0000
asID:                     21859
IP address blocks:        216.122.174.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 22 Jan 2025 17:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fa:e4:f3:da:34:5d:27:51:30:ee:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 24 00:13:21 2024 GMT
            Not After : Feb 22 00:13:21 2025 GMT
        Subject: CN=55b3a6aa-c142-4a6a-9edc-389346893878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:1a:bd:05:e8:19:d0:17:8f:bc:73:84:d0:
                    a8:29:d9:47:a8:af:55:1e:fc:c3:1e:11:80:d2:22:
                    61:8b:16:3f:e4:e1:03:fb:ba:82:2e:d9:65:6c:70:
                    a6:e2:c8:bf:ec:e7:91:c0:c7:72:a8:97:d4:1f:ee:
                    c7:e5:a9:b0:ae:2a:39:08:e9:20:a1:70:4c:5d:0f:
                    3e:8a:cf:ae:f7:e2:98:c6:60:74:37:a6:cb:4c:24:
                    63:d7:0c:ad:51:d2:98:b4:68:7c:af:b5:7b:d0:c6:
                    46:22:56:06:bf:d3:01:0d:40:fb:6e:7c:41:98:1f:
                    eb:5f:76:96:0e:c6:59:64:b7:cf:7d:a3:11:1c:69:
                    79:88:fc:48:59:9e:9b:8a:7f:55:ae:62:2d:f3:83:
                    e4:d6:64:67:ad:90:05:c3:78:8d:0e:f9:07:8e:47:
                    3c:56:95:92:3c:d3:2c:8c:67:e2:6a:0f:56:c4:3e:
                    10:22:b6:19:32:dc:c4:6d:d1:fb:14:9c:5a:c0:d7:
                    ed:de:36:97:78:47:0b:eb:79:b3:c2:c5:96:20:0e:
                    97:2f:a3:fa:1a:6e:ed:41:b3:51:fb:1b:ff:75:fa:
                    2a:e3:a6:74:d9:6f:10:5a:cf:db:04:f6:5e:93:ff:
                    88:1c:55:8f:63:1f:ba:03:25:30:3f:1e:f8:ea:66:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:5E:14:52:98:B5:5C:47:47:C9:C0:B0:48:C9:4F:C7:5F:6F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c06d021c-4e80-383e-bc03-7655ee23a8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:cc:69:d5:41:e6:d7:a0:d6:4a:2d:89:73:24:03:ac:e6:16:
         52:0f:07:de:70:db:54:b0:9e:1f:39:e0:d8:6a:c9:f6:bc:0f:
         72:93:c1:79:30:c9:0e:e0:f3:fd:d7:cb:48:87:d9:42:34:49:
         d4:2d:71:e1:35:db:07:b8:0f:c8:c3:ca:e1:e1:3d:7f:40:c0:
         61:ca:fb:93:39:f3:d0:40:26:cd:ef:5a:f4:d4:89:db:03:4d:
         b1:fe:38:c9:8a:67:eb:b1:66:38:63:96:36:49:5e:4d:aa:d3:
         40:0b:52:19:b3:5e:31:9e:7b:b5:28:4f:cc:f5:2b:36:b7:d0:
         cc:41:e7:82:04:cc:f5:c2:56:9d:d0:2e:44:5b:1b:b7:bd:70:
         de:a3:9f:71:84:fc:d7:5b:c4:a0:2e:2e:4e:b7:52:d7:70:3a:
         ba:b8:1d:d7:d0:8c:0b:aa:65:e2:3d:ea:f6:eb:60:1c:40:6a:
         dd:05:76:db:29:63:f9:b8:55:88:a4:31:4d:2e:08:65:db:af:
         bc:5b:65:ad:89:8f:64:68:af:5a:b5:51:1c:e4:60:24:16:d8:
         ff:5c:36:de:bc:90:6f:47:cf:a3:6c:58:a9:cd:f6:68:0d:ee:
         db:f8:94:40:07:aa:80:8e:89:d9:3d:f3:2e:e8:28:db:39:93:
         20:b1:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:59:43 2025 by rpki-client