Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/0728d736-a905-3d86-91d9-7f79c735f8a1.roa
File:                     0728d736-a905-3d86-91d9-7f79c735f8a1.roa (raw, json)
Hash identifier:          4RsKVnie2OUrtQaEhr0UUQ2s7YpRnXP4Dsl1pCoilvU=
Subject key identifier:   C1:8B:8E:EB:DE:56:B4:1E:FE:5F:62:61:00:4A:EE:22:F6:8D:4B:0E
Certificate issuer:       /CN=059070b9-988b-4e46-aae7-946425c3b9ed
Certificate serial:       010D0C9F4328584A36231DB234F9E9D364F14080
Authority key identifier: 26:CA:93:45:E9:38:1B:C0:02:94:C1:C0:A6:DE:BA:13:FD:F5:30:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/0728d736-a905-3d86-91d9-7f79c735f8a1.roa
Signing time:             Mon 16 Jun 2025 14:30:19 +0000
ROA not before:           Mon 16 Jun 2025 14:30:19 +0000
ROA not after:            Sun 14 Sep 2025 14:30:19 +0000
asID:                     1403
IP address blocks:        204.244.241.0/24 maxlen: 24
                          204.244.242.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 15:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:23:1d:b2:34:f9:e9:d3:64:f1:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059070b9-988b-4e46-aae7-946425c3b9ed
        Validity
            Not Before: Jun 16 14:30:19 2025 GMT
            Not After : Sep 14 14:30:19 2025 GMT
        Subject: CN=9a012d86-9a70-450a-835f-e4bb5e006579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:20:0e:c9:16:6d:a5:0a:05:98:a6:9b:45:
                    47:13:bc:ab:92:ba:5f:a2:c8:1e:2f:a3:b8:a3:ce:
                    ba:4f:db:81:a4:c6:02:1f:19:d7:7d:79:f5:2f:b3:
                    d6:27:0e:0d:a6:a4:74:0c:0f:16:a9:91:a3:69:f8:
                    7b:24:0c:c9:6f:77:ec:a0:26:cb:ed:2a:2d:1a:77:
                    ba:c6:51:50:b7:b7:ce:6a:da:64:af:b6:58:ab:a6:
                    3b:1b:b5:75:4a:a1:46:3e:ef:94:b1:53:fe:25:17:
                    b4:8d:22:35:e9:94:43:10:e2:f5:6e:f2:53:73:ff:
                    35:24:6f:48:7d:1b:8d:ff:b1:46:65:e4:ff:ac:08:
                    1e:3c:7f:d3:8e:08:0f:43:42:12:02:f3:80:ee:cb:
                    ec:1e:03:29:f1:13:06:7f:c1:53:00:f5:d8:c8:d3:
                    f1:bc:fa:1c:40:18:9e:78:29:93:b9:8f:a5:37:c5:
                    44:e4:c9:3f:0f:15:8c:95:bb:87:01:62:bb:89:c9:
                    5a:63:a6:0c:54:5e:fc:c6:a9:f7:c8:93:74:6e:ef:
                    2a:4f:75:64:9c:1d:b5:6a:38:fc:2d:06:06:bc:31:
                    92:c7:6a:36:ae:1a:59:f0:35:8e:67:36:13:25:f7:
                    d8:e5:3b:77:c9:77:12:15:14:c6:5e:11:27:59:9f:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8B:8E:EB:DE:56:B4:1E:FE:5F:62:61:00:4A:EE:22:F6:8D:4B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/0728d736-a905-3d86-91d9-7f79c735f8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed/059070b9-988b-4e46-aae7-946425c3b9ed.crl

            X509v3 Authority Key Identifier:
                keyid:26:CA:93:45:E9:38:1B:C0:02:94:C1:C0:A6:DE:BA:13:FD:F5:30:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/059070b9-988b-4e46-aae7-946425c3b9ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.244.241.0-204.244.242.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:ef:f0:40:c6:c4:a1:82:5d:ae:c0:3e:a7:46:df:cf:bd:
         a9:65:98:30:c1:d3:ae:68:9c:a6:ea:61:e6:d7:1f:d8:1e:dd:
         34:f2:02:28:fd:e3:83:3a:76:60:03:17:16:84:68:21:44:b9:
         2b:13:c7:b9:b0:8c:14:23:7e:63:7a:20:d2:76:ff:bc:41:99:
         26:f3:18:cc:37:b4:2a:32:64:51:80:03:88:db:7d:ad:5a:fa:
         89:a1:7a:75:eb:c5:eb:db:35:80:da:e1:dd:b7:2e:75:33:9a:
         19:5f:a7:4b:68:85:c0:3c:c6:be:ff:f4:fb:5f:00:5a:58:46:
         a6:05:7f:e9:37:c7:5e:12:64:09:8d:73:65:ca:03:79:dc:16:
         2c:1b:97:2c:b7:be:9f:76:42:66:5a:98:a8:54:b2:d5:0b:30:
         be:02:01:32:17:2b:f4:84:16:f4:34:45:a2:72:a0:71:9b:60:
         5f:b0:13:fc:4e:f2:2e:7b:73:66:0b:64:31:40:ba:f2:48:87:
         3d:b1:f6:36:7d:e8:f2:6e:96:33:e7:d1:b6:6d:5d:9b:f8:18:
         5c:a9:8e:18:a1:a2:79:44:5d:da:ec:e3:11:af:91:f4:05:f4:
         bb:06:18:82:fd:88:27:e9:b2:f9:23:ff:75:0d:a9:21:0b:7a:
         ca:7f:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:59:14 2025 by rpki-client