Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32342d3234203d3e20383334.roa
File:                     3139382e3137372e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          54rsaUXEM3kBN5g+JeORuND80Lvo++UcaSqTq0HCnaU=
Subject key identifier:   52:15:F8:B4:5C:80:35:38:A9:4A:D0:D2:A2:0E:D8:0E:7F:03:94:29
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       2BC373512699950CC4B84F3F7066C383CF6A1A1C
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32342d3234203d3e20383334.roa
Signing time:             Fri 28 Feb 2025 16:48:11 +0000
ROA not before:           Fri 28 Feb 2025 16:43:11 +0000
ROA not after:            Fri 27 Feb 2026 16:48:11 +0000
asID:                     834
IP address blocks:        198.177.56.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 31 Mar 2025 00:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c3:73:51:26:99:95:0c:c4:b8:4f:3f:70:66:c3:83:cf:6a:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Feb 28 16:43:11 2025 GMT
            Not After : Feb 27 16:48:11 2026 GMT
        Subject: CN=5215F8B45C803538A94AD0D2A20ED80E7F039429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:d0:90:27:74:91:ba:a0:8b:7d:bb:1e:ce:
                    20:75:d8:1e:f0:96:ff:b9:f9:15:ad:63:5f:d8:be:
                    38:19:49:0e:ed:e5:38:74:4c:27:37:7f:0d:2d:78:
                    eb:d1:2d:dc:d2:83:8c:6d:7f:04:d1:b2:70:93:08:
                    3b:23:a0:08:db:e2:59:22:82:a0:9c:34:04:d8:d0:
                    32:ae:45:9d:a5:aa:61:f6:07:3f:2e:0e:66:c6:91:
                    a0:22:20:c3:13:9d:2a:ec:99:ac:34:9c:6b:c6:64:
                    62:d1:ed:56:20:20:4a:0b:74:1b:e6:37:fb:6c:b8:
                    be:26:6d:ad:78:01:05:73:df:e7:a7:77:18:fc:8e:
                    f5:09:e2:af:70:8c:9f:47:69:7c:b0:fa:e7:95:d4:
                    22:55:f0:ea:a4:ec:52:4f:77:68:dc:00:4b:b3:12:
                    b0:11:05:8e:3f:d4:46:8a:60:eb:a3:61:c6:65:55:
                    cc:5e:9c:52:4c:db:f1:7b:44:df:1f:84:3c:a6:84:
                    d0:08:d9:0f:92:27:11:cb:30:a4:17:00:fd:c0:9e:
                    93:49:8c:70:ea:fa:05:22:15:d5:68:cc:b1:8b:4b:
                    bb:92:a3:16:05:ae:b6:3b:19:18:17:dc:70:ad:df:
                    ce:0b:14:db:dd:a1:7e:35:fd:7c:a3:50:df:a8:ed:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:F8:B4:5C:80:35:38:A9:4A:D0:D2:A2:0E:D8:0E:7F:03:94:29
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:90:33:00:94:b4:97:37:56:8c:57:08:c8:2b:52:13:6e:
         a5:73:db:a6:1c:7f:4f:a7:13:c6:d7:4a:e6:62:75:d0:d6:4f:
         ef:6b:a2:97:6c:9e:51:61:b7:48:4c:75:f8:bb:40:44:06:c2:
         18:cc:2d:da:e9:49:2a:32:f2:11:e4:e0:61:ba:9f:e1:4e:a3:
         c0:b2:4e:cd:b1:e6:fe:e3:44:bf:5a:66:4d:1c:80:74:42:19:
         5e:36:53:cd:ce:e1:fd:d7:56:a5:38:7d:60:03:14:c2:c4:92:
         21:c0:80:22:cf:3a:e9:6b:05:35:f5:40:bb:65:ab:16:8b:3c:
         f6:44:b7:db:12:a5:a5:44:ec:51:b7:e6:d7:ab:54:fd:ef:ed:
         45:c3:52:b1:fe:8a:23:05:b6:6f:68:42:2b:b9:10:4f:70:60:
         ad:05:88:09:ff:79:de:8d:f7:c2:56:d1:86:a7:6e:d0:34:af:
         37:be:9e:11:da:7a:c8:12:34:92:59:da:fb:04:4b:10:33:f9:
         7b:cb:9e:87:ff:17:4c:b9:db:9a:51:7b:d4:c5:b0:99:cd:79:
         d1:b2:c2:67:13:4b:0b:4b:d7:35:fb:68:75:79:e6:dc:07:88:
         c8:81:98:1a:29:8a:85:c0:a4:75:f1:1c:05:3e:ee:02:1a:e3:
         08:82:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:00:23 2025 by rpki-client