Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/12b9ecbd-aea7-3b6c-8c85-b6eed4674cc9.roa
File:                     12b9ecbd-aea7-3b6c-8c85-b6eed4674cc9.roa (raw, json)
Hash identifier:          VUMzvP2oUNWwmtp07yGaanLa51YlJxh74dMXAdaMqtw=
Subject key identifier:   A4:35:5B:B0:2E:50:91:02:99:9C:8C:E7:95:A8:0E:A0:47:7E:53:88
Certificate issuer:       /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial:       010D0C9F43285849287E6AB9356D6FC20CECE0A0
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/12b9ecbd-aea7-3b6c-8c85-b6eed4674cc9.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     399007
IP address blocks:        199.247.176.0/20 maxlen: 24
Validation:               Failed, certificate revoked on Tue 25 Mar 2025 14:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6a:b9:35:6d:6f:c2:0c:ec:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=3071394f-015e-41e0-b4a3-5ad581992d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:a0:14:4c:b4:02:56:e3:9a:84:64:48:64:
                    f0:55:22:6a:70:c3:62:14:a1:90:a5:21:7a:25:65:
                    50:ca:84:6f:47:5a:d1:0f:88:88:12:30:96:ee:d3:
                    18:64:2b:50:31:e7:5d:4f:e8:b1:fd:e4:cc:22:14:
                    47:31:5d:f4:e8:d6:d1:cd:c0:48:d5:ac:59:b5:1a:
                    ad:3e:a6:9d:7b:16:81:96:33:2a:a3:41:fd:43:09:
                    3d:68:e4:7c:cd:9a:86:21:f7:41:b5:54:08:de:fa:
                    7b:21:65:00:6a:d1:5c:05:a0:bc:db:49:1a:e2:c9:
                    4f:b8:63:64:82:ab:94:87:d3:f7:30:d4:95:f1:5e:
                    cb:d3:25:c1:4f:74:04:ba:cf:35:da:2b:24:f3:1d:
                    07:34:3a:69:83:57:b8:f5:e2:3f:a9:3b:3c:15:1d:
                    e4:83:17:6a:0a:b1:61:d3:98:4e:35:9d:00:15:0f:
                    44:3f:be:69:c4:af:07:ea:17:87:29:37:f8:31:cc:
                    95:95:84:e0:d8:50:55:fe:67:71:08:55:7a:ab:71:
                    14:4b:7f:1e:4b:26:0a:35:1f:5f:d9:5e:3d:a2:b7:
                    79:e2:b3:1f:c5:54:9a:30:b6:3a:94:12:de:9a:66:
                    e5:4f:07:8d:35:be:65:07:db:68:78:eb:50:0a:01:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:5B:B0:2E:50:91:02:99:9C:8C:E7:95:A8:0E:A0:47:7E:53:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/12b9ecbd-aea7-3b6c-8c85-b6eed4674cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl

            X509v3 Authority Key Identifier:
                keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d9:e4:0e:a0:97:29:11:0a:3c:d6:2f:18:f2:22:c5:97:6a:
         3f:81:63:84:5f:bd:f2:bf:4f:5c:16:de:72:d0:e1:bd:8d:3a:
         8d:f1:c3:b2:d5:7c:97:00:11:db:61:bd:b6:90:2c:cf:2f:05:
         1e:99:7a:c7:45:34:29:8d:57:c9:48:e5:03:61:79:f7:0e:b7:
         16:ce:e4:86:ce:55:cc:2b:e3:f5:f8:45:b3:82:16:4c:91:29:
         5d:27:4d:b3:24:60:3c:e6:99:57:a6:db:93:b6:ca:38:5f:12:
         d9:b6:c3:2b:80:34:ad:c6:be:ab:6b:c9:f3:46:8f:53:31:ee:
         c6:9c:51:4f:fa:8f:56:43:12:1e:be:db:7a:2e:ea:61:66:1a:
         0a:e5:66:54:5c:5f:57:02:20:68:65:66:a8:40:14:d3:c9:03:
         80:95:86:d0:db:4f:47:22:df:97:c2:88:b6:8f:03:5d:10:31:
         cd:44:ab:84:d4:c2:f8:64:2e:79:8f:2c:d5:37:15:dc:e9:21:
         50:1d:f1:59:f9:7c:d8:65:34:81:9d:cd:13:3c:49:25:d7:6e:
         72:90:3d:5f:af:d7:b9:1f:f8:42:63:08:31:54:bb:5e:3d:9d:
         41:32:bd:c1:35:0a:60:30:77:90:27:51:b1:79:08:57:13:6d:
         ef:c1:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:52 2025 by rpki-client