Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/b37d3dd2-2e84-32c0-9c43-a9533e103437.roa
File:                     b37d3dd2-2e84-32c0-9c43-a9533e103437.roa (raw, json)
Hash identifier:          SF1FbKKIU4oBbrpIRuNhqdQcTr1ZdS0j1TqKZA+XVRg=
Subject key identifier:   65:D6:57:34:95:5B:01:6A:30:51:CB:08:F5:CC:16:AE:BC:66:93:18
Certificate issuer:       /CN=aed01dad-662c-4720-aaa5-ea3d024bad07
Certificate serial:       010D0C9F4328584A6341339E329D45CBD05DCFC0
Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/b37d3dd2-2e84-32c0-9c43-a9533e103437.roa
Signing time:             Tue 24 Jun 2025 05:55:50 +0000
ROA not before:           Tue 24 Jun 2025 05:55:50 +0000
ROA not after:            Mon 22 Sep 2025 05:55:50 +0000
asID:                     400583
IP address blocks:        207.174.124.0/22 maxlen: 22
                          207.174.125.0/24 maxlen: 24
                          207.174.126.0/23 maxlen: 23
                          207.174.126.0/24 maxlen: 24
                          207.174.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 05 Jul 2025 23:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:41:33:9e:32:9d:45:cb:d0:5d:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07
        Validity
            Not Before: Jun 24 05:55:50 2025 GMT
            Not After : Sep 22 05:55:50 2025 GMT
        Subject: CN=c1d340d4-e8a3-4d7d-bfc5-58731b23b799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:be:58:6c:7a:64:ef:ec:cf:8c:a9:23:1b:
                    ac:d2:2e:9e:37:b2:e1:99:7d:d1:80:9a:77:59:ab:
                    8e:d7:b1:4f:97:a1:68:46:18:26:a1:bc:f4:9e:2c:
                    b7:58:62:8e:39:b3:01:77:86:72:a6:9c:87:14:f1:
                    23:d8:96:37:80:ac:5e:16:a6:78:2f:14:80:f8:14:
                    96:d4:de:e0:85:b1:17:2f:e3:03:4e:80:c0:fe:37:
                    30:61:bf:21:23:96:5e:43:9b:0d:74:73:fd:6d:f8:
                    c6:76:c5:2a:c7:58:93:08:76:bf:79:9d:9b:b8:cf:
                    6b:be:47:69:36:da:f6:f4:cc:bd:5e:cb:d9:c2:00:
                    de:c7:8a:4f:6b:7d:d0:f0:79:90:73:25:be:d7:6d:
                    96:ce:22:c1:46:73:21:1b:bd:d4:b4:28:16:ba:19:
                    d0:60:57:fe:28:96:0a:4d:8d:4e:2e:1f:5d:99:7f:
                    5c:71:86:7e:7c:0d:93:b1:53:be:11:cc:0e:c0:a6:
                    5d:98:5c:4f:1e:3c:2f:8b:d9:09:41:e7:53:45:d1:
                    7c:bb:71:a9:34:dd:fe:6d:97:8b:67:61:58:bf:a2:
                    c9:61:3f:bf:8c:8f:4c:06:86:b2:11:e3:28:fc:cc:
                    45:91:42:60:54:d5:87:2a:2f:b4:19:19:d1:1e:ca:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D6:57:34:95:5B:01:6A:30:51:CB:08:F5:CC:16:AE:BC:66:93:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/b37d3dd2-2e84-32c0-9c43-a9533e103437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl

            X509v3 Authority Key Identifier:
                keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:80:49:a3:b5:b8:0e:b8:ae:4c:29:6e:25:23:97:34:42:d9:
         da:c6:64:9d:99:7a:38:a4:1e:66:76:68:73:54:cf:9e:2e:c8:
         d2:0a:27:3a:cb:b6:75:c3:ff:3e:07:82:f4:c3:65:d7:3b:05:
         99:e0:f1:fd:55:e7:bc:f3:56:66:a4:f4:99:85:01:94:bb:5b:
         8f:2b:52:44:72:e6:06:54:54:64:68:a8:6f:95:64:3e:8e:5b:
         00:60:1a:56:db:99:32:01:37:3d:59:43:56:a7:d0:9b:3d:1b:
         06:48:53:0c:26:58:ac:bc:12:7b:9d:41:2c:d2:3a:aa:52:64:
         f5:0f:ed:0c:99:c4:90:af:c9:87:d1:dd:9e:4e:8d:30:59:cb:
         86:55:b1:89:3c:ab:a9:57:c8:2c:5d:33:18:bd:d4:d6:51:8f:
         e7:ee:d9:32:98:7e:90:8d:f9:ea:ec:94:5d:9b:47:97:5b:47:
         7c:19:8b:d1:1d:86:31:87:8a:ab:86:8b:5f:46:f0:65:4b:6e:
         90:03:8f:75:5e:3a:09:fa:8f:19:d8:98:3f:7d:d1:f0:52:02:
         24:21:a3:33:47:05:3b:1a:38:23:e6:ad:6d:0e:2a:29:7d:bd:
         e6:04:83:d0:87:05:0f:38:dc:a9:c8:33:64:a0:b7:80:34:99:
         28:46:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:39:40 2025 by rpki-client