Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/4cbb4d23-624e-31b3-85c2-50292075d94f.roa
File:                     4cbb4d23-624e-31b3-85c2-50292075d94f.roa (raw, json)
Hash identifier:          RD3qZo7Ob8QuyQCflSLF1vqS9OLPxQ8s1IYaD4unhmY=
Subject key identifier:   E3:68:55:B4:EE:21:10:B5:49:AD:82:E4:87:03:C8:D5:78:07:EE:27
Certificate issuer:       /CN=21428d3a-0040-4c60-9202-cd68b2fd51de
Certificate serial:       010D0C9F43285849095E3F24D5877E67D0C12000
Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/4cbb4d23-624e-31b3-85c2-50292075d94f.roa
Signing time:             Fri 28 Feb 2025 21:26:00 +0000
ROA not before:           Fri 28 Feb 2025 21:26:00 +0000
ROA not after:            Thu 29 May 2025 20:26:00 +0000
asID:                     23342
IP address blocks:        198.207.169.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 28 Mar 2025 05:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:5e:3f:24:d5:87:7e:67:d0:c1:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de
        Validity
            Not Before: Feb 28 21:26:00 2025 GMT
            Not After : May 29 20:26:00 2025 GMT
        Subject: CN=58f85307-9871-4171-bb1d-587a697cc6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:ee:70:ed:ad:1d:5f:50:63:63:1d:87:6a:
                    84:35:09:dc:b9:2f:24:6c:fe:11:d1:ca:c7:54:14:
                    81:f2:be:1d:03:b5:70:5d:81:97:eb:db:ab:1b:1c:
                    c1:7a:ce:01:cc:e0:86:f5:4d:2f:63:8a:72:98:e2:
                    21:fe:94:3b:07:49:c5:1f:6b:9c:a6:b3:4c:22:25:
                    0a:89:32:84:10:58:be:11:26:4c:6d:8b:5d:62:c1:
                    f6:3d:fc:b7:f5:52:85:bd:ad:f0:91:b7:75:d1:34:
                    44:d2:20:db:22:91:18:34:0a:69:e3:e1:f8:c1:98:
                    93:22:6e:92:44:32:4b:23:a8:3e:3c:ca:c2:f9:03:
                    2f:12:19:98:95:6b:8d:1e:0b:4f:f0:ab:7f:1d:42:
                    3e:69:ae:78:ed:da:75:45:af:52:1b:d8:25:e1:80:
                    f7:ba:d7:e8:28:9a:e8:e8:1d:4b:34:49:ce:37:a5:
                    36:69:6f:6a:4b:6d:8c:07:fd:46:0a:3d:5e:94:2f:
                    00:00:63:f9:14:15:ec:74:bf:ac:14:98:a6:08:12:
                    66:ff:ef:c6:df:1f:7d:3d:7a:a3:2e:de:c2:9b:3f:
                    d6:ea:a1:78:f1:15:7c:0e:9c:dc:49:da:ad:b5:22:
                    97:6e:c2:b8:94:e5:24:61:02:e7:b4:a1:98:2c:c9:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:55:B4:EE:21:10:B5:49:AD:82:E4:87:03:C8:D5:78:07:EE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/4cbb4d23-624e-31b3-85c2-50292075d94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:2f:de:e4:a6:9f:b6:1f:f8:b9:9f:6a:a1:b9:41:7f:bb:
         7d:34:31:1d:59:a6:e2:e5:c3:b7:fe:75:bf:14:c5:1c:02:aa:
         a3:69:52:65:81:3b:bb:45:1c:6d:db:a5:bb:08:52:fa:02:6d:
         0f:1b:96:2d:cf:6b:55:6d:2b:74:c7:2a:5f:78:31:3c:42:b9:
         b1:a7:bd:52:98:b9:b4:55:e0:ab:f4:55:df:68:47:19:0a:a8:
         ab:d6:4f:ea:b4:5f:52:30:e0:d7:ed:c8:09:70:ce:ac:5a:c3:
         b3:e9:ac:a0:a6:b2:e5:dc:c4:9a:fc:03:b2:c2:25:9e:c5:88:
         bc:23:10:99:29:99:25:37:94:6e:fa:62:bd:fc:3c:42:f0:be:
         75:ca:15:8a:11:4f:74:1f:0c:76:a8:9b:35:ac:1b:bb:6d:af:
         41:e7:73:34:58:87:b6:8d:80:8c:9a:dc:ea:0d:e1:02:63:e6:
         94:4f:5d:b1:1c:2a:f0:41:5f:8d:ef:c2:ce:4f:05:c5:d0:49:
         7a:90:67:87:d6:2b:b4:1d:88:0d:d5:87:5a:ee:8c:67:75:a8:
         d8:a5:65:73:3b:33:f9:b9:d0:8a:dd:e5:9e:49:71:c3:0c:0c:
         df:85:67:d6:60:f2:51:b0:c4:65:69:6a:f0:e8:da:60:90:61:
         3d:79:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:24:17 2025 by rpki-client