Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/2efc16a0-2657-3532-8b66-33d688deb703.roa
File:                     2efc16a0-2657-3532-8b66-33d688deb703.roa (raw, json)
Hash identifier:          9iN/2tmFeCArEuhP4KLeV1GguCpcsGg9z9i7ywV6Ggk=
Subject key identifier:   78:CB:7B:0F:FA:83:E5:F0:7A:FE:86:6E:46:33:7E:98:E7:58:91:5D
Certificate issuer:       /CN=0342da0b-b5cd-422c-807b-e1b95cb877e0
Certificate serial:       010D0C9F43285848FD9C0C701348DD104CA3EF80
Authority key identifier: E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/2efc16a0-2657-3532-8b66-33d688deb703.roa
Signing time:             Mon 24 Feb 2025 16:20:49 +0000
ROA not before:           Mon 24 Feb 2025 16:20:49 +0000
ROA not after:            Sun 25 May 2025 15:20:49 +0000
asID:                     13365
IP address blocks:        192.206.28.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Feb 2025 20:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:9c:0c:70:13:48:dd:10:4c:a3:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0342da0b-b5cd-422c-807b-e1b95cb877e0
        Validity
            Not Before: Feb 24 16:20:49 2025 GMT
            Not After : May 25 15:20:49 2025 GMT
        Subject: CN=29f26567-41fc-43ac-99da-f11cb7cca178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:e4:a0:d8:18:6f:6e:f2:62:af:82:b4:a7:
                    1d:16:87:75:c7:5b:20:00:b1:da:ce:82:33:72:eb:
                    a5:b2:9c:20:f4:02:21:ca:5c:86:2d:3a:5b:8d:dd:
                    7a:4e:ab:15:91:69:b5:50:b5:d1:88:b4:c4:4f:bf:
                    c9:df:08:3d:c8:12:b7:aa:3d:a6:cb:00:84:df:08:
                    db:d7:63:83:be:a1:d2:e2:06:9b:ba:b4:12:21:3a:
                    15:45:24:c2:cc:ff:71:49:94:66:f0:24:83:27:bd:
                    00:1d:1a:51:c6:fd:85:c2:94:bf:50:4f:6c:45:3f:
                    f2:f3:dc:c9:44:c2:29:6a:90:8b:9e:d7:8a:ba:58:
                    21:3b:18:2c:28:e5:19:d8:59:ba:70:03:c5:81:b3:
                    79:15:00:d1:27:94:94:b4:9d:7a:52:42:03:3d:d6:
                    d2:6a:b2:37:86:84:c7:76:2b:88:c5:c6:08:ef:bb:
                    b8:d8:e2:bf:3a:eb:5b:35:62:ec:ab:91:86:32:0c:
                    bf:40:83:fd:82:35:05:86:eb:3a:d7:37:7f:6e:79:
                    bb:47:59:a0:51:f4:20:c8:0a:99:4c:9b:32:e2:97:
                    91:8a:a1:4b:39:25:1b:01:a7:56:ae:d2:c5:54:8b:
                    f8:84:3f:a1:0a:d1:9d:88:8d:db:d4:40:e0:01:44:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CB:7B:0F:FA:83:E5:F0:7A:FE:86:6E:46:33:7E:98:E7:58:91:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/2efc16a0-2657-3532-8b66-33d688deb703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.crl

            X509v3 Authority Key Identifier:
                keyid:E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:db:ea:3a:57:0a:e4:2c:c2:92:40:db:a2:f6:52:f9:7f:dd:
         cb:f3:91:9e:d0:d1:a1:af:de:f9:6f:14:ac:b3:54:9e:a3:42:
         9e:9a:88:95:3b:bf:cc:35:8d:13:de:49:64:15:8c:5c:bc:81:
         3a:d5:8f:16:90:d8:e4:eb:87:21:4e:4c:42:09:3f:a5:cb:2b:
         2b:29:01:e7:e9:2e:aa:f3:bd:55:cf:2f:de:fc:d3:65:c2:4c:
         96:d8:78:26:6b:13:1b:67:9a:1f:d7:60:cd:e1:de:6b:c5:63:
         11:88:96:d0:73:b0:86:e7:6f:d7:8e:d6:e7:22:fe:2a:fb:eb:
         5b:51:8e:99:27:56:be:13:41:f9:ac:33:2b:52:3d:43:ad:9a:
         52:7c:a1:d2:ef:4e:bb:71:4d:67:44:b5:bb:e2:d5:4f:f8:9b:
         eb:ad:ce:5d:af:be:66:83:2d:ae:3c:35:eb:61:07:e1:63:8a:
         cc:7b:54:54:8c:a9:c4:6b:86:db:88:c6:ab:3f:e4:b1:8d:f6:
         20:68:ec:54:86:17:12:fe:20:43:28:f3:9b:39:2a:4b:9c:53:
         f3:02:ec:77:df:41:6f:ac:4f:a7:d7:ae:42:08:c9:da:2c:a6:
         a2:2f:e1:e2:83:64:20:ce:a6:ff:43:ba:5e:ba:df:1d:fc:96:
         91:1c:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:46 2025 by rpki-client