Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/8e9eeaa9-e829-3fa0-9867-e94d1cb90011.roa
File:                     8e9eeaa9-e829-3fa0-9867-e94d1cb90011.roa (raw, json)
Hash identifier:          kkxMIj13RcXEqG0ytAX7gl4nlcNOGxFeebhCMpmD/W4=
Subject key identifier:   06:D5:CF:8C:47:52:CF:2A:00:56:A9:B0:4F:96:ED:DD:81:63:4E:8C
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858492183B67F31CBB081460E4980
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/8e9eeaa9-e829-3fa0-9867-e94d1cb90011.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     29802
IP address blocks:        194.179.146.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Sun 16 Mar 2025 23:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:b6:7f:31:cb:b0:81:46:0e:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ac37f261-7a74-48c0-8203-7a99d7c79652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:49:f4:c4:6e:e4:17:f1:b6:25:a9:51:14:65:
                    0f:66:c7:64:96:b2:67:5b:79:a4:b2:d2:1f:22:b7:
                    35:89:88:77:73:14:47:4e:c8:dc:2c:7e:fc:b6:84:
                    6d:7b:51:4d:5f:f6:01:d1:c7:88:97:fb:08:72:11:
                    0e:50:77:de:13:1f:b6:b7:9b:d5:a8:a2:71:0d:ff:
                    73:59:ff:3d:96:28:cf:8d:c2:e6:04:e3:58:70:29:
                    3a:66:47:26:4a:2b:25:3e:73:ce:93:76:db:9b:1d:
                    8a:4e:3a:99:bc:85:e1:7b:b8:e0:57:80:84:32:55:
                    f9:4b:4b:d0:1d:43:91:92:06:2c:01:bd:1e:e5:8d:
                    8a:3d:c6:37:46:b7:54:77:55:cb:39:15:47:09:0d:
                    2a:47:bd:d4:eb:13:87:25:17:8b:b2:12:8f:d5:84:
                    34:ee:20:d3:c6:fa:9f:11:99:85:ca:10:99:6a:db:
                    c7:9e:fd:36:65:f1:6c:45:67:a4:e0:46:63:fc:92:
                    0e:f4:0f:8c:60:57:34:00:d4:99:7d:80:28:74:07:
                    07:15:58:49:05:ea:7c:d9:f5:e0:55:7e:7d:9f:c1:
                    fd:b7:d9:84:c8:d1:ba:b9:83:1b:1f:c5:a7:94:51:
                    c2:80:7d:06:ae:26:2b:ba:04:02:19:f0:80:b0:47:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:CF:8C:47:52:CF:2A:00:56:A9:B0:4F:96:ED:DD:81:63:4E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/8e9eeaa9-e829-3fa0-9867-e94d1cb90011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:cb:91:ef:e5:f3:0e:76:71:e7:83:67:2a:66:41:f2:f2:
         b2:94:13:20:df:cb:e7:e2:75:a5:b8:64:e2:90:ea:7c:a4:9a:
         3d:67:a9:56:94:2d:12:53:f4:27:7f:40:74:01:32:eb:fe:37:
         c2:a7:3f:3e:b4:18:dc:85:bd:c7:06:b4:b3:47:70:a3:ad:7d:
         41:e7:2f:cd:2c:57:8d:6e:a8:84:ae:14:b7:82:42:2b:5f:00:
         07:6f:d4:48:4c:12:cb:10:51:a3:64:f1:c1:32:98:5a:ca:33:
         54:bf:28:a7:16:fe:66:01:49:5d:2e:f9:98:f4:02:0f:6e:86:
         ff:1a:b4:fb:58:c9:41:29:b2:de:34:c5:a5:23:af:63:c5:b2:
         ae:db:40:e6:95:06:40:0d:16:4e:d2:bc:28:28:0b:6d:00:9b:
         fc:74:97:ed:2c:b7:b4:7f:2c:61:ef:f7:d1:f1:81:cf:e3:69:
         f4:db:f4:26:20:39:11:f8:06:8c:a6:50:1e:55:04:69:33:bf:
         b3:8d:66:ad:ae:7b:ee:72:36:0b:f0:76:b8:52:6c:b7:3a:76:
         26:39:a0:12:5e:65:ef:79:c0:f7:71:29:cf:e2:23:4f:1c:6a:
         e2:30:75:59:65:a2:6f:9f:88:80:38:02:48:ea:e9:0b:52:e7:
         ba:04:33:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:23 2025 by rpki-client