Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/322dd8a6-830c-32ef-ae9d-24e5930414c8.roa
File:                     322dd8a6-830c-32ef-ae9d-24e5930414c8.roa (raw, json)
Hash identifier:          2s4aakbhgqNDbSgddxaMGGuz3wNB221c0RWItiJvWYQ=
Subject key identifier:   C6:30:26:1D:73:52:A1:5A:E4:0E:00:BA:EB:14:57:ED:62:9C:09:10
Certificate issuer:       /CN=93753507-8452-4ab9-aff2-37428e87a308
Certificate serial:       010D0C9F43285848FC70591305208E3807105A80
Authority key identifier: FB:07:9A:FD:8B:79:5F:27:DD:F4:27:28:DA:26:CC:EE:66:D3:02:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/322dd8a6-830c-32ef-ae9d-24e5930414c8.roa
Signing time:             Mon 24 Feb 2025 06:16:58 +0000
ROA not before:           Mon 24 Feb 2025 06:16:58 +0000
ROA not after:            Sun 25 May 2025 05:16:58 +0000
asID:                     3356
IP address blocks:        23.133.244.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 26 Feb 2025 14:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fc:70:59:13:05:20:8e:38:07:10:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93753507-8452-4ab9-aff2-37428e87a308
        Validity
            Not Before: Feb 24 06:16:58 2025 GMT
            Not After : May 25 05:16:58 2025 GMT
        Subject: CN=546a6d27-f6e6-4081-be29-7d6b3ecb7fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:b3:29:2d:e1:28:e4:38:56:ed:53:a6:dd:
                    a0:d0:8f:db:18:d1:12:10:5e:52:d6:9e:ea:aa:05:
                    95:a9:db:d9:73:19:27:3a:df:c9:dd:bf:9f:63:be:
                    f5:97:35:83:f4:e4:90:e4:74:e5:1a:89:9e:60:ec:
                    8b:1a:aa:9c:65:39:6e:fa:8f:fc:3b:90:5d:46:42:
                    f4:1f:d9:77:cd:43:98:67:ee:9c:50:75:40:b4:a1:
                    9e:7c:41:96:6d:2a:48:6c:1d:47:86:7b:0a:44:98:
                    cf:77:f7:49:2d:bf:4a:65:33:03:ee:fb:28:47:06:
                    82:4b:a9:a4:f4:c8:30:ec:23:59:06:fd:ad:32:5d:
                    dd:7a:75:9c:5d:8c:40:51:23:5b:4e:94:3e:f0:b2:
                    5b:ee:f4:92:3d:2b:1a:45:1a:a2:6a:32:d5:51:c9:
                    4e:8a:fa:ac:a8:9b:65:8b:84:18:01:b3:11:25:44:
                    66:d4:6e:0d:15:91:58:a7:95:73:92:4c:c0:39:a5:
                    25:44:2f:77:1b:e7:84:59:41:8e:54:a7:85:2e:e5:
                    3f:a5:a9:2c:54:c8:fc:2e:61:40:dc:55:9b:ce:ed:
                    a3:63:37:53:76:32:cf:a9:90:36:35:ce:0c:b7:4f:
                    ff:fd:0d:73:2b:ec:05:80:d4:a5:f7:a1:80:b4:60:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:26:1D:73:52:A1:5A:E4:0E:00:BA:EB:14:57:ED:62:9C:09:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/322dd8a6-830c-32ef-ae9d-24e5930414c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/93753507-8452-4ab9-aff2-37428e87a308.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:9A:FD:8B:79:5F:27:DD:F4:27:28:DA:26:CC:EE:66:D3:02:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:d9:32:02:ad:d3:92:89:28:ab:66:18:68:0a:0b:a5:3b:
         ad:eb:e2:3d:52:80:d1:49:a1:93:4f:3e:8a:bb:1e:a4:9f:eb:
         52:a0:88:bb:3f:78:0e:7f:32:46:4d:be:05:0c:a4:aa:97:8f:
         24:0e:0f:24:7e:3b:82:a8:d1:6b:fe:70:1d:1b:f2:62:8c:51:
         9a:09:84:9f:8f:d9:a2:f7:d8:56:46:7b:cf:4c:68:3f:66:5a:
         f0:e9:76:79:0d:46:e0:00:3a:f0:09:f1:68:35:b4:55:92:36:
         78:8e:ac:02:3c:73:57:73:03:17:f2:52:d0:cf:49:a9:6e:64:
         91:98:22:36:72:72:57:a7:48:d4:8e:1f:6c:85:a5:fa:64:10:
         7c:5e:cb:b5:b1:58:09:60:07:5e:6c:eb:30:14:3e:fa:f6:ba:
         3b:61:e1:dd:32:80:b4:7a:64:3e:fd:66:29:d6:2a:5b:31:39:
         7d:09:73:67:fc:c4:47:c3:9f:7a:79:88:5a:40:d0:ae:49:35:
         61:9a:db:04:35:24:3a:b5:3c:ff:a1:9c:51:0f:cc:6b:db:29:
         3e:ff:3d:61:68:c0:e4:d6:03:18:86:34:3f:f9:29:77:a0:bc:
         74:01:b8:c0:80:42:89:7f:f1:fd:e4:55:6d:bc:43:cc:31:5d:
         77:63:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:50 2025 by rpki-client