Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/7eb25906-685a-3936-af85-7ec7c8e1dc2d.roa
File:                     7eb25906-685a-3936-af85-7ec7c8e1dc2d.roa (raw, json)
Hash identifier:          gaINBcyo6F7Mz0WcG+qezZQzC9pqxMqKiWokvdfR1do=
Subject key identifier:   15:CC:E4:0F:AC:43:4B:5A:E3:16:BF:55:54:B2:86:D4:35:B8:93:09
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F4328584938E29B060D7B2FB7377E5E40
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/7eb25906-685a-3936-af85-7ec7c8e1dc2d.roa
Signing time:             Mon 17 Mar 2025 21:55:40 +0000
ROA not before:           Mon 17 Mar 2025 21:55:40 +0000
ROA not after:            Sun 15 Jun 2025 21:55:40 +0000
asID:                     13335
IP address blocks:        104.245.243.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 30 Mar 2025 23:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:38:e2:9b:06:0d:7b:2f:b7:37:7e:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: Mar 17 21:55:40 2025 GMT
            Not After : Jun 15 21:55:40 2025 GMT
        Subject: CN=11e84a6d-2aec-45b1-8abf-692a69bf263f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:6d:b4:06:cc:a2:fe:7e:47:78:6b:76:2f:
                    77:06:13:1c:77:a5:a2:02:25:7f:24:ae:35:31:ba:
                    1a:61:55:c2:27:c7:37:cf:96:34:6b:58:5c:32:f2:
                    7e:c5:63:5e:a1:bb:1d:18:07:56:24:dd:39:69:6c:
                    a5:da:52:a0:46:5e:aa:39:3f:43:c8:6d:8b:26:cf:
                    75:36:e9:94:b5:85:b8:6d:33:fe:32:3b:68:96:77:
                    0d:70:70:87:12:db:2a:a4:b7:52:2d:b4:88:e9:61:
                    c7:3b:5c:da:5f:49:3d:51:1b:41:ed:2c:61:ad:98:
                    2d:74:13:1c:f9:35:51:2a:b0:82:cd:29:5d:a6:0b:
                    53:cf:36:87:f5:cc:00:cd:84:6c:62:b4:56:94:3f:
                    73:64:24:61:c2:74:13:82:ab:f6:7b:83:7b:ab:4a:
                    b5:6e:73:e3:54:75:a7:d6:2a:a4:6b:aa:93:58:cd:
                    c8:ec:c1:29:0a:b6:b6:67:1e:8f:2b:d0:a5:6a:60:
                    10:85:09:9c:1a:46:aa:bd:61:e2:a2:89:6f:4b:47:
                    a5:a7:b5:ba:b0:eb:f2:71:c1:42:43:ca:b5:33:7c:
                    5f:72:a1:80:15:73:56:11:d5:59:41:11:15:27:2c:
                    4c:33:29:d2:90:6c:a6:33:75:cb:76:97:cd:b6:6c:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:E4:0F:AC:43:4B:5A:E3:16:BF:55:54:B2:86:D4:35:B8:93:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/7eb25906-685a-3936-af85-7ec7c8e1dc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:a9:21:5c:6c:33:f4:35:d5:b8:47:b3:eb:1c:fb:46:a6:
         79:cb:dc:4a:3e:01:30:1e:61:83:22:6c:49:33:f4:43:48:45:
         b3:7d:6e:9f:48:cc:d1:25:9b:2f:2d:0d:30:7d:c2:6d:27:29:
         9a:8d:c7:5b:2c:a7:6d:75:ed:4f:1d:bd:b6:13:74:04:6f:3e:
         a5:d3:d6:c7:51:57:1f:2e:44:5f:3d:33:1a:30:51:c4:51:18:
         51:88:50:df:99:33:d9:15:55:36:7c:0c:a3:93:b3:3a:82:b7:
         c6:92:bd:2f:91:2e:3b:dd:a3:8f:a6:3d:61:32:4a:12:be:49:
         a1:35:b9:25:21:ce:d2:0a:eb:a8:31:cf:6f:a5:34:fe:da:ee:
         5b:06:8e:36:44:40:07:e2:8a:0b:8f:f2:aa:0c:8b:50:42:2a:
         bf:97:b3:7c:3f:40:91:dd:7f:29:13:7d:a4:fb:1f:9e:36:a5:
         57:43:c0:fc:25:89:a2:98:14:e5:42:fa:0c:50:eb:6f:c2:4d:
         83:22:1c:52:da:84:af:8e:8a:85:ab:81:e8:2d:e8:ce:e7:ce:
         d9:dc:1d:21:c4:c9:a6:90:fa:57:36:e3:e2:5b:e3:47:12:0a:
         39:be:ae:f3:4e:31:dc:fe:37:b1:0f:10:8d:5b:39:c7:d6:3d:
         1d:2f:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:46 2025 by rpki-client