Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af6b4cb8-e76c-3b57-aae5-af90c04e6403.roa
File:                     af6b4cb8-e76c-3b57-aae5-af90c04e6403.roa (raw, json)
Hash identifier:          FB3VJXu6FpTn0pScqRbWgx0c78RL1dVmCR29QEqrCXI=
Subject key identifier:   62:A4:95:96:FD:A1:20:AE:DE:85:B3:6A:B9:45:43:87:D0:4B:9C:4C
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285848CD51ECC25B1E5DAB91961E00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af6b4cb8-e76c-3b57-aae5-af90c04e6403.roa
Signing time:             Fri 07 Feb 2025 09:12:40 +0000
ROA not before:           Fri 07 Feb 2025 09:12:40 +0000
ROA not after:            Thu 08 May 2025 08:12:40 +0000
asID:                     834
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 19:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:51:ec:c2:5b:1e:5d:ab:91:96:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  7 09:12:40 2025 GMT
            Not After : May  8 08:12:40 2025 GMT
        Subject: CN=aa60175d-4c3b-4b77-91c8-2676ddc0671f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:88:47:c7:d3:40:fd:a6:61:60:c4:4a:bb:
                    a8:df:90:36:07:2e:39:58:a9:d3:f0:0a:aa:73:de:
                    58:d3:5a:2d:3d:8b:9f:06:d6:b3:e7:42:80:16:47:
                    7a:52:2f:64:9c:3f:42:ad:fd:e8:21:20:a9:79:b1:
                    a3:9f:86:1b:81:76:86:41:32:6a:fe:86:46:49:20:
                    d7:8c:0c:ba:3b:0f:3b:13:aa:39:17:67:52:e9:6a:
                    7a:e3:9d:a1:15:4d:cc:87:01:67:c0:f6:63:f3:fd:
                    53:fb:13:74:0c:2a:eb:80:00:8a:14:5f:38:c3:fb:
                    1c:df:a9:ca:fe:f7:0a:ee:25:0f:3d:0c:7c:b0:6e:
                    34:47:3e:de:2d:c9:5d:9c:4c:a0:29:f9:e3:3b:1f:
                    04:8e:73:e1:35:f6:e8:b0:b2:6e:69:79:f4:bb:90:
                    13:27:80:2e:d5:b9:df:66:a9:39:1d:0d:d4:bf:cd:
                    d8:c2:0c:98:52:95:c9:a0:0e:3b:4e:01:ae:e0:51:
                    b0:58:a5:9e:7f:13:18:11:a8:b3:87:64:66:c3:5b:
                    5a:a3:5c:cb:4c:a6:b2:67:83:59:ab:b0:f7:b5:e4:
                    ec:c0:05:97:72:6f:99:e1:54:f6:8b:be:0f:4b:f0:
                    be:d1:c9:dc:79:5c:6f:43:7d:a0:98:45:25:8c:24:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A4:95:96:FD:A1:20:AE:DE:85:B3:6A:B9:45:43:87:D0:4B:9C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af6b4cb8-e76c-3b57-aae5-af90c04e6403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:93:53:1c:27:9e:41:18:c3:33:e8:42:cf:bd:bb:ba:0a:f6:
         de:b6:95:68:2c:9a:f9:95:01:a1:c1:03:1e:68:87:c9:a5:64:
         4a:96:80:3c:cf:6f:ac:a5:b5:79:71:6f:b4:60:65:b5:18:00:
         a7:6f:b7:9e:8c:8b:80:0f:c3:4d:8f:0d:f5:d9:94:11:a0:02:
         c2:7e:ce:1f:86:56:a5:e5:7a:bd:ad:33:a4:9d:dd:78:42:b8:
         3f:2e:64:c2:67:99:94:9e:77:04:4f:54:cc:bc:5e:6a:01:bf:
         da:c2:a6:5f:b8:90:cd:57:4d:06:21:40:62:ae:3f:ac:bd:bc:
         0c:43:d9:1c:14:2e:7c:d1:cc:db:26:2b:e8:76:16:ff:35:3b:
         8c:14:5f:d6:78:e0:ac:db:3e:6b:62:4d:8b:af:cf:6c:d8:14:
         70:9c:07:af:f9:9c:0a:48:ab:ba:e2:f8:9e:17:ec:63:6e:ad:
         56:36:dc:df:f3:14:4e:47:f1:d9:52:2e:0d:02:ef:1f:38:36:
         f2:52:df:26:45:a3:d0:84:32:0e:f0:7d:97:5b:b9:fd:96:c4:
         d9:86:60:e7:da:5a:cd:3a:0f:8e:20:97:9e:38:61:42:50:e9:
         1b:00:0c:b3:20:21:ab:31:cd:4f:ec:3c:7c:49:92:52:fa:0b:
         6f:bb:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:33:41 2025 by rpki-client