Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/1552cb59-19a2-31d2-b252-cb519d1a67b9.roa
File:                     1552cb59-19a2-31d2-b252-cb519d1a67b9.roa (raw, json)
Hash identifier:          eHd5eD4f08Dr10pDnyCB2tRwOSr/EC2qonKz5k1zncY=
Subject key identifier:   7F:12:00:FC:77:C9:A6:7B:60:7E:F5:33:A5:4A:BD:EB:95:42:4E:CF
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F43285848159FE581CA7C2A0415EC8870
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/1552cb59-19a2-31d2-b252-cb519d1a67b9.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     393398
IP address blocks:        96.47.41.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Feb 2025 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e5:81:ca:7c:2a:04:15:ec:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=dac4a98a-b949-4186-b6d8-c177c23c0cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:c4:6d:41:a2:54:ee:58:0b:b7:a1:c1:99:
                    3b:fc:b9:45:11:f4:c9:a0:1b:66:8f:22:ae:4b:06:
                    44:be:49:5a:ec:c1:da:27:a7:9b:e9:45:36:b9:9c:
                    9f:60:ce:09:ad:4c:42:b6:e7:ca:f9:39:18:14:a0:
                    3a:4d:fb:32:71:0e:bf:4d:9e:04:49:7f:1c:af:59:
                    32:ce:1a:15:89:cf:b9:f6:86:13:ba:18:b6:52:06:
                    1c:2a:49:f3:f2:b7:2a:9e:59:50:31:90:f3:0d:2c:
                    23:9e:f2:9d:92:00:6b:7c:ce:b8:5a:d8:e3:3e:d3:
                    65:70:bb:21:9e:7a:fb:8c:2c:cc:56:3d:c5:31:9c:
                    20:9c:b9:d7:04:22:6d:ef:89:f0:14:2f:c7:5b:cb:
                    39:0a:72:dc:b3:f5:e3:48:76:86:1b:8a:6b:6e:99:
                    2d:d8:d6:f5:3e:c8:ed:ae:0a:e4:5c:9d:63:3f:a8:
                    8f:da:c7:1c:13:c4:be:dd:90:5b:0e:e1:87:fb:b0:
                    c7:91:2d:40:bf:dd:1e:17:5a:75:b2:d1:43:a9:6d:
                    ab:d4:25:81:02:cd:c5:a8:03:19:a7:f9:c8:1e:34:
                    d4:f6:de:06:0e:8e:48:12:d9:5f:5b:c4:30:e1:00:
                    46:4d:08:e5:99:e0:08:b4:90:23:c1:dd:16:db:e2:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:00:FC:77:C9:A6:7B:60:7E:F5:33:A5:4A:BD:EB:95:42:4E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/1552cb59-19a2-31d2-b252-cb519d1a67b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6f:1b:04:26:42:80:5b:a1:6d:26:9f:e5:e5:25:a7:8a:f5:
         41:52:54:96:df:e7:a4:64:18:3b:cd:71:3c:0f:4f:3a:c6:00:
         2a:eb:cd:15:a0:7a:42:57:f0:a0:74:e8:87:d3:b5:09:76:4e:
         3f:27:54:09:5d:ad:98:ce:93:64:4d:f3:1e:42:76:3a:4d:65:
         92:78:33:13:2a:79:3c:53:a9:bd:be:21:d2:80:8a:1a:31:3f:
         5c:44:3f:dd:e5:70:9e:ea:17:e7:a4:fb:29:2f:80:2b:ec:a9:
         94:cd:75:2a:a2:ee:f6:44:e7:3b:24:7d:5b:a6:51:d9:31:66:
         cf:f6:65:c3:b9:74:01:e9:3b:02:8c:f3:a3:51:cc:55:cf:f1:
         6a:d6:b2:f1:b9:3e:14:72:24:5a:19:4c:50:6d:15:fc:2d:20:
         61:2c:73:d1:8b:7f:c1:2f:1e:53:55:71:5f:20:b6:d4:a7:31:
         56:be:b2:3e:88:0b:5a:fa:0d:fa:4f:dc:ad:c4:6d:0f:d4:29:
         d3:e7:86:38:b2:6e:44:09:b0:23:87:31:1f:fb:4a:2f:29:4e:
         17:da:05:0e:46:eb:a7:1c:5b:53:50:32:ee:e0:33:d2:0d:1c:
         6e:a3:5e:e8:99:10:d6:d6:c1:07:32:55:af:19:f8:19:28:f0:
         29:c5:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:20 2025 by rpki-client