Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa
File:                     147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa (raw, json)
Hash identifier:          9Z8KvC+993UU0eRlQRQo5mtSgTB5eEN74fdvb8FJODQ=
Subject key identifier:   79:FC:73:B2:AA:3B:C5:99:AB:1C:3B:54:3D:00:50:41:8B:A6:B1:2F
Certificate issuer:       /CN=4454f19d-c14e-499f-8d66-357970248d2c
Certificate serial:       010D0C9F4328584A23C00CFDB94B1AD18A1B1680
Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     2914
IP address blocks:        199.192.176.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 00:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0c:fd:b9:4b:1a:d1:8a:1b:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=39becc86-ab3d-4967-aed3-033d49b68d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:f4:66:2e:3c:d8:a6:cc:b4:29:38:21:f0:
                    2b:f4:4f:76:5d:8e:6c:22:9f:37:43:4c:9b:fd:15:
                    7d:eb:8f:ca:75:42:a3:36:61:58:d8:ae:df:fa:84:
                    69:45:02:35:2e:04:d8:d2:87:3e:93:7a:5e:40:b3:
                    5d:3d:f4:75:19:d1:8b:ea:eb:a4:5c:02:c0:b9:12:
                    24:96:55:42:c9:1b:9d:8c:84:12:2a:13:43:05:3e:
                    da:bb:42:cc:98:0c:ce:ca:98:43:6a:9f:d3:ac:fc:
                    29:d9:55:2e:9a:c5:b0:88:d1:8e:e6:0b:d1:40:92:
                    63:26:d6:f1:38:97:53:9b:89:db:9b:8e:9e:77:10:
                    74:23:5f:b2:80:54:11:06:d9:c3:a1:fb:2d:2a:00:
                    97:7d:f5:c5:89:44:d2:a1:42:5c:ec:38:5c:08:74:
                    ee:67:e0:6f:30:73:88:a5:52:86:e0:b7:e5:7d:33:
                    a9:e5:52:e1:95:ef:8a:c8:a9:de:80:2e:3b:8b:ca:
                    96:cb:4d:20:b0:b4:91:5d:f1:b0:1e:1e:ea:86:8d:
                    9d:b9:4d:c7:e9:30:0f:a4:56:6d:fe:6d:d4:6a:f0:
                    37:1d:7a:93:94:98:55:c8:cb:af:c8:2d:50:9a:63:
                    12:2c:4e:86:cf:56:b6:53:8d:19:88:3a:5f:6b:c4:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:73:B2:AA:3B:C5:99:AB:1C:3B:54:3D:00:50:41:8B:A6:B1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:dd:b0:b7:d5:75:d7:64:4b:a1:a1:02:38:64:5e:5a:dc:
         44:11:e8:bd:6a:8a:97:e1:67:c5:30:00:04:10:c4:1b:31:6a:
         14:c3:69:1b:1e:91:08:3c:94:bc:b3:72:7f:61:32:26:1b:68:
         96:94:f3:4e:76:39:da:64:6f:27:fe:91:d5:5c:02:aa:a5:76:
         d5:0f:29:20:45:73:aa:25:64:9b:95:aa:5e:4b:c6:51:e1:a5:
         19:d0:c0:45:08:dc:be:5b:f0:0a:87:c8:d6:40:4f:a0:54:46:
         8d:6b:ac:bd:d1:c4:f1:26:59:13:b9:9d:f0:9f:d5:66:49:be:
         44:c2:48:ab:a6:86:3d:dd:37:8d:d3:7a:5a:16:88:ef:ba:02:
         2e:79:69:0e:62:73:7b:a7:75:a3:0e:ad:98:a7:86:07:f0:b5:
         a0:e3:ce:b0:5d:fe:95:50:7e:56:e9:18:26:a6:78:eb:d9:66:
         e7:47:09:b5:fb:d7:58:ab:f8:2d:f3:78:c1:0e:98:a5:f6:9d:
         fa:e6:0b:6b:ff:c3:43:6f:d8:2a:f6:27:a0:88:64:f2:86:f2:
         f6:62:f5:7a:ae:e5:66:7f:d0:4e:d5:ed:8c:bf:4d:19:80:e7:
         4d:79:2f:a6:06:42:33:39:3c:72:04:cf:40:2e:51:43:2b:7f:
         9e:05:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:50:37 2025 by rpki-client