Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9178ea66-700f-3f9a-8886-d762e45f2283.roa
File:                     9178ea66-700f-3f9a-8886-d762e45f2283.roa (raw, json)
Hash identifier:          27q3O3dez1gz0v+dUMemx54LCVodJEVXqw1QUASS7iM=
Subject key identifier:   73:5E:2B:40:EC:36:D8:86:B2:48:B5:F5:1D:0B:AE:E5:8A:CD:4F:91
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849287E624BB0709DCDB09C6380
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9178ea66-700f-3f9a-8886-d762e45f2283.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     1239
IP address blocks:        198.145.160.0/20 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 06:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:62:4b:b0:70:9d:cd:b0:9c:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=42dc6d0c-a801-43ab-8d39-ac974fa59231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:0e:bc:fb:3f:11:7b:55:31:16:ef:4b:ab:
                    d3:85:c9:0c:ec:3e:1b:c6:f5:70:e2:49:4e:1d:75:
                    e7:13:15:28:c5:31:79:ef:23:fb:c0:68:ec:db:1d:
                    15:ad:2c:91:a4:bc:cd:9b:08:cb:2d:eb:04:80:b3:
                    9a:42:1d:75:90:53:d8:36:f0:84:d4:1a:b9:18:8a:
                    11:27:8f:f1:07:c4:ad:b1:18:57:93:c8:ba:c3:d4:
                    06:d8:47:5c:8a:c5:6a:61:ac:d0:41:fa:6e:ac:e9:
                    33:a0:b1:59:74:12:26:8b:57:e8:ef:a8:9f:3a:86:
                    88:d9:19:15:01:fe:4c:22:8f:53:fd:74:9c:0f:a8:
                    09:c4:d5:8f:e5:18:fb:cf:c0:18:0c:a1:0c:23:b8:
                    a4:81:8a:b4:55:b8:c4:f6:d9:66:7b:b1:64:55:04:
                    f9:d3:59:96:59:5d:18:8b:11:8c:29:bb:68:7b:5d:
                    02:4f:bf:ef:51:bd:b7:77:32:92:7f:98:67:c3:27:
                    d5:14:55:82:cd:93:cb:86:57:4d:00:d5:59:44:29:
                    a9:db:6a:11:84:38:1c:92:da:74:a0:7d:bb:7b:ff:
                    66:3d:9c:88:e4:58:f9:d6:a0:92:08:e5:81:25:67:
                    ba:0b:af:36:72:f6:95:25:74:18:25:1e:58:fe:95:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:2B:40:EC:36:D8:86:B2:48:B5:F5:1D:0B:AE:E5:8A:CD:4F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9178ea66-700f-3f9a-8886-d762e45f2283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:00:6e:44:58:fc:ae:77:00:76:de:01:45:2c:8c:11:68:9f:
         71:d9:bb:b9:6b:a2:b9:52:c7:fe:45:dd:34:24:52:2f:99:b8:
         b0:ae:d4:67:8c:84:98:e3:87:bd:bb:94:80:7d:65:c7:7e:7e:
         2e:49:7c:23:63:b0:3a:99:b4:43:78:ac:0a:fa:8a:75:16:ca:
         b0:72:93:5d:93:a5:7c:30:bd:44:80:ed:e2:42:04:2a:d1:d8:
         5b:e3:3b:44:80:b9:53:42:43:b0:fc:49:15:d6:d3:29:7a:22:
         a3:11:4c:af:e9:33:21:14:33:2c:df:85:d5:c5:a8:7f:38:00:
         28:f7:9a:8a:65:4f:25:c1:46:7a:15:1b:f5:bd:c1:7d:00:0a:
         fa:48:91:65:25:d6:ad:f6:9c:fe:c0:2c:ad:12:2b:d0:70:03:
         18:ef:e9:46:70:b6:c4:e1:6a:07:7e:b8:0e:0c:1b:f6:e7:87:
         da:4b:69:4f:7e:34:72:0c:12:cc:f0:17:dd:25:2e:81:31:e3:
         89:cf:c9:08:a6:6d:33:3a:a7:f1:30:e1:67:45:b3:a6:11:39:
         a0:9d:02:09:31:66:5f:aa:de:21:dd:3f:02:51:22:ea:ec:b2:
         e5:fc:28:f5:3d:1f:d9:04:86:59:2a:73:33:52:fa:c5:29:ed:
         2f:c2:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:24 2025 by rpki-client