Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/620d39db-09ee-3459-89ba-12f7495dbb91.roa
File:                     620d39db-09ee-3459-89ba-12f7495dbb91.roa (raw, json)
Hash identifier:          vgETFYZcpRQVDbgrt9ATJAS6riLdH5X0p3Zjy3qXn44=
Subject key identifier:   40:AB:84:61:B5:73:9D:6A:95:B7:30:0F:C8:7D:62:F2:FC:1B:7D:F7
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584869605F20B7212561AD296300
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/620d39db-09ee-3459-89ba-12f7495dbb91.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     211544
IP address blocks:        199.83.26.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Sat 15 Feb 2025 01:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:5f:20:b7:21:25:61:ad:29:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=ed435b67-9144-4d64-a42f-f082acc27e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:87:3f:3a:29:c1:07:9c:7e:36:89:5c:1c:
                    bc:7e:6b:8f:21:95:b9:34:3d:77:0a:5e:10:4f:76:
                    de:1b:ce:1b:ce:51:28:d3:25:3d:a1:c1:3f:89:87:
                    b7:f0:85:40:e0:22:4f:db:cf:72:fe:40:90:0e:1c:
                    ec:ae:0a:62:dc:c4:75:51:4d:4f:a0:3d:b3:eb:96:
                    69:d7:fa:2c:3a:74:9c:1f:7c:4b:78:2f:28:45:5f:
                    a1:ce:55:04:a4:34:2e:04:33:dc:f9:c2:ab:3c:62:
                    d1:6c:ce:76:e6:a7:5f:67:0b:5a:5d:71:ae:e5:59:
                    bb:06:02:f7:97:d1:68:21:f6:b4:9f:ef:24:8e:a9:
                    eb:5c:31:21:9a:50:11:7c:3f:84:90:c6:0d:3d:ae:
                    7a:c1:cf:fc:9f:b4:71:a6:96:33:8d:0a:f2:af:b8:
                    91:f0:11:27:4f:a0:9a:37:a7:ea:56:0d:d4:cd:68:
                    41:b0:0f:04:2e:a9:b2:14:d5:90:17:bc:7c:e6:0c:
                    93:5a:26:2e:5c:53:54:02:75:ca:15:00:92:7f:29:
                    05:fd:48:da:f7:a9:e8:f2:12:08:f4:53:5a:61:fe:
                    32:8c:77:d4:ff:d9:45:60:e5:d5:da:f0:7f:b1:93:
                    b5:fd:e4:52:8c:24:66:35:e2:58:3d:01:8c:82:b0:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:84:61:B5:73:9D:6A:95:B7:30:0F:C8:7D:62:F2:FC:1B:7D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/620d39db-09ee-3459-89ba-12f7495dbb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:50:85:01:8b:a1:0a:fe:1e:fb:3a:4e:7e:b5:96:df:9d:
         d8:25:e6:c5:8f:dd:f5:dc:aa:ee:4e:45:36:4c:88:8e:18:b9:
         84:e2:b0:00:6e:5a:31:b7:5e:e6:f3:c6:0c:bc:41:22:34:8e:
         b6:61:6b:2e:60:13:59:a9:8a:03:2f:91:d3:75:32:c7:58:aa:
         c5:d6:a6:7d:f0:0b:7d:fd:eb:76:91:58:38:dc:79:0a:7e:53:
         5e:06:7a:d5:5c:a0:da:ad:bb:11:d6:ee:80:d9:ad:cd:1c:6b:
         c3:25:41:ae:48:a7:57:3d:0c:7c:3d:70:9e:47:71:de:fa:b6:
         7b:21:34:0b:82:10:77:d6:48:89:98:3e:cc:bc:bb:b6:b9:d0:
         ae:24:63:c5:ba:f2:dc:c2:af:7b:66:bf:08:0f:1b:79:6c:5f:
         09:7d:7b:48:87:2c:e1:d5:bf:77:a7:e5:86:da:49:f8:21:c7:
         86:2f:29:6d:74:d1:77:02:7a:67:ef:7b:68:e9:a2:d7:94:e7:
         c4:3a:3a:7f:e9:db:94:e9:91:ac:14:dc:cb:9f:63:a0:bf:bb:
         2b:84:3c:e0:67:7a:c6:34:58:5c:6b:d6:59:c0:70:fa:2e:53:
         ba:a3:77:92:f1:6a:4c:a7:c6:e8:2a:a6:c1:d9:bb:9a:a3:36:
         5e:84:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:30 2025 by rpki-client