Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/20fa51c3-c4b2-39ea-b22a-e10ccd666313.roa
File:                     20fa51c3-c4b2-39ea-b22a-e10ccd666313.roa (raw, json)
Hash identifier:          NUv9pX/vTTz4RBndDVEaj1Z+fw6WMcFpBmLKiM9stxU=
Subject key identifier:   6E:54:2C:16:D4:B1:E9:35:57:EF:E5:BA:47:59:D0:5D:CA:67:E6:D6
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F43285848A78C85888991D35D84FF8980
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/20fa51c3-c4b2-39ea-b22a-e10ccd666313.roa
Signing time:             Fri 24 Jan 2025 20:30:01 +0000
ROA not before:           Fri 24 Jan 2025 20:30:01 +0000
ROA not after:            Thu 24 Apr 2025 19:30:01 +0000
asID:                     32709
IP address blocks:        63.134.128.0/19 maxlen: 24
                          63.134.160.0/20 maxlen: 24
                          63.134.176.0/21 maxlen: 24
                          63.134.184.0/23 maxlen: 24
                          63.134.186.0/24 maxlen: 24
                          63.134.187.0/24 maxlen: 24
                          63.134.188.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 28 Jan 2025 12:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:8c:85:88:89:91:d3:5d:84:ff:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Jan 24 20:30:01 2025 GMT
            Not After : Apr 24 19:30:01 2025 GMT
        Subject: CN=36eb8fdf-cd91-4fce-bcd8-f105161ad988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:97:05:93:73:2f:e4:b5:5a:c4:0d:0d:f2:
                    02:76:38:c9:b8:66:c5:e9:db:7f:b7:39:85:3c:ed:
                    b4:45:eb:2a:04:0c:d9:d4:75:c8:94:52:56:bf:61:
                    cd:36:22:6f:18:b4:05:68:32:23:c6:cf:b5:fb:b2:
                    d9:ab:3a:a1:6a:dc:5b:90:57:ef:2f:da:2c:f0:9f:
                    7c:cb:f4:cc:83:7a:a2:e3:9b:b0:51:fa:37:24:ef:
                    a5:58:77:18:23:f2:3a:b5:05:1a:70:62:d9:10:b7:
                    80:13:62:b8:f2:6d:55:63:d8:21:3b:27:78:c2:79:
                    e6:25:d8:1c:2c:9d:72:0c:aa:8a:59:98:71:45:6e:
                    46:9b:37:82:66:db:b8:b0:a4:86:2e:92:5e:97:bd:
                    37:2d:07:5a:13:da:bc:ce:6d:d5:b1:76:95:57:a8:
                    51:c7:4c:fb:40:0c:43:70:94:63:ae:fc:f5:ed:58:
                    f0:a6:14:e7:bf:fc:a2:38:62:ba:46:43:ed:4e:d1:
                    cc:bf:e0:03:cb:4d:f2:28:4b:a7:3f:30:e4:cb:af:
                    66:d5:16:74:a2:6f:22:03:02:b7:23:b1:0c:05:92:
                    c8:b3:88:c6:38:27:9d:28:4f:6c:ce:24:2b:f1:53:
                    c5:5c:2c:36:5e:7b:bb:0d:71:77:68:c4:08:7c:bf:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:54:2C:16:D4:B1:E9:35:57:EF:E5:BA:47:59:D0:5D:CA:67:E6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/20fa51c3-c4b2-39ea-b22a-e10ccd666313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.134.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:9e:f4:51:07:b6:d2:62:05:78:20:5a:cf:9b:0d:67:ba:
         3d:f8:36:e7:cf:4e:84:4f:77:4b:63:cc:3d:e6:0d:dd:97:38:
         22:ed:e0:20:8f:d9:08:6b:2b:8d:9b:38:4c:dc:b4:b4:0b:62:
         92:60:e9:57:d2:0c:a3:60:0a:e0:01:e3:5e:03:5e:8a:04:74:
         67:cc:45:36:27:d9:b7:5f:49:13:7a:89:bb:1b:8f:e5:a9:4c:
         c7:e6:06:93:0f:b8:79:90:a3:ab:9d:5b:3f:e6:36:c7:d5:9c:
         68:3e:ac:36:97:66:01:0c:ed:79:0e:5c:40:42:b9:9b:bd:27:
         bd:f1:b1:ed:89:fa:62:d7:fc:13:54:f9:26:17:fd:d3:fd:a3:
         5b:b7:47:d4:09:18:b4:90:00:14:df:c7:70:6f:6f:f7:72:eb:
         7e:ce:a0:4f:0c:b4:9e:1f:13:43:ae:a3:7a:82:37:d5:9f:ee:
         41:3b:13:50:ec:1b:05:42:11:9e:b3:cc:f0:9b:94:31:f8:ad:
         1d:56:c0:4a:1d:a1:de:aa:a9:a6:c1:43:57:1b:9f:20:e1:bf:
         b7:c9:9e:a9:9d:4a:13:5d:6b:2b:3f:bb:80:df:26:39:45:94:
         b8:19:8d:dd:af:8d:98:62:df:f3:b8:c5:bf:99:b6:23:c9:fc:
         27:3f:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:00 2025 by rpki-client