Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cd9a6ace-9405-341b-b7c2-95da3e4efd21.roa
File:                     cd9a6ace-9405-341b-b7c2-95da3e4efd21.roa (raw, json)
Hash identifier:          QPPddr8wMg4Vlrq0ns6NDB5FcBwQGJ387nNLnNJK9V8=
Subject key identifier:   76:15:42:E8:65:7C:E3:AE:BE:BF:C7:CC:AE:C0:15:6D:5B:E6:E0:A8
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285848F3911BD423A536F40B31499C
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cd9a6ace-9405-341b-b7c2-95da3e4efd21.roa
Signing time:             Fri 21 Feb 2025 02:00:39 +0000
ROA not before:           Fri 21 Feb 2025 02:00:39 +0000
ROA not after:            Thu 22 May 2025 01:00:39 +0000
asID:                     7270
IP address blocks:        207.202.24.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 16:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:91:1b:d4:23:a5:36:f4:0b:31:49:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Feb 21 02:00:39 2025 GMT
            Not After : May 22 01:00:39 2025 GMT
        Subject: CN=9b8deb45-7a7b-43bf-8c0b-d18f9a61045f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:42:19:10:11:0a:ea:ee:27:39:ee:1b:83:
                    6d:39:7b:c9:43:6c:a3:47:09:53:32:b4:32:dc:35:
                    a4:3a:e2:52:f6:15:ed:1a:b2:9b:fa:17:5a:2f:fa:
                    74:d1:ca:5e:bb:1b:db:55:d4:e8:bc:71:39:5a:29:
                    6e:93:11:90:02:96:b5:1c:ff:77:97:5a:5a:6d:40:
                    02:f9:7f:c6:b9:22:fc:24:10:5a:6e:e3:13:40:4d:
                    fe:64:2f:4b:6f:06:d7:bb:b1:e5:25:5f:8d:78:5a:
                    1a:9f:06:a2:8d:01:04:bd:28:e7:e7:a3:f4:66:91:
                    3a:43:7b:57:61:dd:98:71:e8:ab:af:2e:2d:f0:d4:
                    ae:9e:b5:0a:49:88:78:33:20:7f:f0:ff:c2:dc:18:
                    33:6c:6b:8c:42:aa:d5:77:f1:d8:96:5a:46:d1:4f:
                    6c:3b:f5:9b:04:26:08:c9:cd:a1:23:f8:9d:f3:44:
                    43:5b:1e:c4:79:53:24:8d:d3:7f:5d:54:4d:08:6a:
                    df:e6:f1:db:bd:c1:5c:f8:4c:dc:37:c0:88:ce:87:
                    85:23:37:69:50:7c:1f:b5:e9:a8:19:a0:55:92:fb:
                    a0:55:f6:7c:80:3f:b0:21:de:da:41:0f:fe:ec:45:
                    7f:de:0f:a3:e3:ae:42:4a:9c:96:98:f2:64:57:22:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:15:42:E8:65:7C:E3:AE:BE:BF:C7:CC:AE:C0:15:6D:5B:E6:E0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cd9a6ace-9405-341b-b7c2-95da3e4efd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:8f:5e:d4:36:01:d3:4e:00:f5:1f:06:db:be:ca:92:85:
         e6:d7:00:16:da:4d:c6:0b:1c:49:21:5c:1a:94:f8:f4:8d:8a:
         65:b8:02:1f:2b:5c:f7:e1:24:a5:ad:ae:51:b3:5f:88:21:1b:
         8d:db:1c:29:e8:65:79:e5:39:70:b4:15:c2:79:96:a3:19:a4:
         f8:9b:1f:d7:82:63:fa:c3:c8:d9:80:27:53:c1:ac:ea:47:dc:
         22:08:fd:06:8e:77:21:47:d1:33:3d:c1:1b:39:2f:c0:23:04:
         b6:17:a0:23:22:64:6f:50:d6:5b:f4:b5:cb:fd:c0:fb:6a:4f:
         e7:0e:31:0f:52:0c:c9:31:95:b4:b3:a3:63:56:25:75:59:29:
         c8:68:80:85:09:42:83:e1:c8:46:5b:64:ce:0f:69:ea:2d:ae:
         23:53:08:fd:18:38:3d:f9:d6:61:ea:bc:78:2f:52:80:c2:fd:
         c0:2b:db:48:53:1a:bc:07:17:f9:1e:ac:63:62:a8:d2:a9:08:
         92:f2:1b:1a:5b:e0:3a:ee:79:8a:c0:74:7e:49:ee:1d:40:58:
         b9:94:7f:b8:8a:69:6f:d8:3e:3b:ab:05:0e:fc:24:bf:4b:18:
         a6:0d:3c:9c:3f:98:2c:cd:f7:4f:84:1b:63:c4:38:b8:8c:07:
         b3:ca:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:23 2025 by rpki-client