Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/68b0324e-e6ad-3651-a00c-34784066371d.roa
File:                     68b0324e-e6ad-3651-a00c-34784066371d.roa (raw, json)
Hash identifier:          WIePAL62sGBUE36BfZw6oPIC3Wc3DLYKqyiF7f0wJZ8=
Subject key identifier:   73:4A:8A:77:DB:CB:04:88:C1:FD:68:88:CF:83:DA:A2:4E:AF:43:04
Certificate issuer:       /CN=01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf
Certificate serial:       010D0C9F43285849E38A3A79161439C5181853E0
Authority key identifier: 36:C2:32:DB:EF:7B:52:C2:E0:28:F4:9F:03:33:42:5E:C0:C0:A4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/68b0324e-e6ad-3651-a00c-34784066371d.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     54861
IP address blocks:        23.135.20.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 21 Jun 2025 21:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:3a:79:16:14:39:c5:18:18:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=05bb3eaf-9b87-41f8-9fca-e7df55ed28c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:92:5f:88:53:c2:46:bd:75:0c:1f:45:41:
                    4c:a7:d0:7f:42:b5:0d:6e:37:17:15:9d:c2:63:5e:
                    83:9b:9b:4f:f2:f3:f2:27:2c:82:1b:45:d4:62:07:
                    9f:5f:52:44:44:27:a2:57:3a:57:dc:6f:0a:97:2b:
                    5c:b1:e5:d5:7a:46:5c:a2:7f:c5:82:0b:80:28:82:
                    a2:27:7f:a9:98:80:87:62:59:ab:ac:e4:74:92:d1:
                    82:fc:5c:82:37:6e:28:7e:f5:aa:ab:a7:e0:cb:ba:
                    51:af:ea:37:b7:41:f1:63:dc:36:a7:96:c9:4b:a4:
                    f4:92:74:fe:c3:64:51:db:ad:fd:d2:3f:38:5f:9f:
                    cd:e1:47:39:16:c2:5f:0f:de:78:aa:79:6d:21:08:
                    4f:94:63:bf:06:79:0a:cf:b9:0a:12:57:0c:a4:95:
                    7b:e8:6d:65:58:91:32:19:78:d9:7c:0a:13:a8:40:
                    52:50:e9:fb:15:6d:ad:c3:77:2f:40:6b:8c:19:00:
                    df:8e:9e:99:5c:23:7f:7d:c7:fb:0d:ca:b3:72:c8:
                    39:ba:b7:0b:f6:e7:81:f2:59:30:8a:ef:3f:85:d7:
                    a7:ac:fe:0e:e5:79:75:9f:59:73:60:38:7a:7c:2d:
                    e8:24:87:ef:53:50:b9:60:9b:6e:f6:ad:94:7c:d8:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:8A:77:DB:CB:04:88:C1:FD:68:88:CF:83:DA:A2:4E:AF:43:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/68b0324e-e6ad-3651-a00c-34784066371d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.crl

            X509v3 Authority Key Identifier:
                keyid:36:C2:32:DB:EF:7B:52:C2:E0:28:F4:9F:03:33:42:5E:C0:C0:A4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:d1:fd:70:d6:15:23:5a:da:7e:51:68:c8:9b:54:f4:8c:
         89:65:f5:14:20:fc:d0:ce:72:77:44:fe:37:47:44:05:62:5a:
         68:59:1b:b8:4d:cd:38:2b:b4:b3:4c:fd:45:96:e8:19:b9:12:
         cc:25:20:e6:4f:9f:a9:c4:e6:22:02:83:64:1a:61:d1:68:f6:
         36:b9:15:2f:e4:01:44:44:57:44:eb:b9:49:5b:e8:da:12:38:
         41:3c:58:d4:7e:e3:86:7b:8c:19:90:96:d2:89:62:9a:c4:4d:
         83:24:3a:56:a3:3f:ef:24:3b:58:8a:a4:d6:c5:18:9d:c8:ed:
         79:9d:e8:89:43:8d:8e:4d:10:b5:eb:f3:78:25:a7:a3:ed:fd:
         c3:45:1f:47:a5:bc:18:bb:0e:8e:4f:b3:0e:78:ce:29:74:7f:
         27:19:84:ab:6e:7a:a1:bf:88:59:2b:cb:58:69:0f:68:09:f2:
         55:09:bb:e8:4d:c5:4b:8c:54:a3:7e:65:24:07:4f:8e:51:47:
         f7:6b:04:b4:bb:93:a1:49:91:47:a7:35:53:5b:20:2e:21:7c:
         58:4c:18:b2:7c:98:12:9b:7b:71:a0:63:3e:68:da:f2:09:a7:
         5b:6e:94:37:2e:e5:a7:5d:16:41:4b:25:73:12:4c:2a:a4:a1:
         e6:4c:48:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 18:14:18 2025 by rpki-client