Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa
File:                     f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa (raw, json)
Hash identifier:          i9y8z5AFKj1Fc4JfHCjC7z0Tt97VO65d7IzW5DXDwFQ=
Subject key identifier:   4E:22:B4:69:94:9F:E2:95:64:4D:D4:5A:16:F9:20:C5:A0:E3:AB:73
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849D85F930AE8D092AAD23E69C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16550
IP address blocks:        165.85.151.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:93:0a:e8:d0:92:aa:d2:3e:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=6d3850ef-c4a5-40bf-8e8e-2c12f4e90289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:83:12:20:72:f1:13:1e:fe:d0:ec:16:94:
                    aa:e9:b5:58:fb:4e:5a:07:75:22:87:6a:75:82:b8:
                    cd:0b:cf:6d:bb:bb:50:74:a8:96:c2:d7:b9:42:ba:
                    78:40:67:51:13:2f:2a:a6:40:12:29:7e:36:70:f0:
                    99:f2:54:c4:7a:8f:f3:c4:af:16:7c:4a:f9:3b:19:
                    36:f5:a0:86:1c:3c:be:a0:13:6d:5c:85:ee:d6:3d:
                    a8:06:ed:47:f7:d5:f6:2c:d8:ea:b4:8e:f9:98:ed:
                    19:8d:d6:ae:d8:62:fd:02:9a:ff:cd:0a:b6:a6:e6:
                    d0:b4:a0:c3:e4:18:3e:69:2d:75:d5:3b:a0:be:d2:
                    4b:7c:e0:79:b3:74:d9:d4:a5:41:80:af:81:51:2b:
                    85:92:8a:9c:29:7a:d7:17:42:48:ec:1e:4e:fc:c6:
                    3d:6e:9b:76:ce:20:13:cf:a1:0d:db:23:51:48:7e:
                    ed:9f:92:36:0f:08:b8:7e:fb:e6:65:d5:d7:00:62:
                    5f:be:78:47:4d:7f:0b:93:8e:ca:8e:f2:1f:c1:c2:
                    85:82:63:5f:18:2b:6c:d8:11:fe:54:70:88:5d:a2:
                    ac:4f:fb:61:06:57:44:09:55:e8:0a:da:ba:41:23:
                    52:66:de:62:17:bf:f1:83:d7:5e:00:00:d7:d8:0c:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:B4:69:94:9F:E2:95:64:4D:D4:5A:16:F9:20:C5:A0:E3:AB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:0c:eb:39:79:4c:21:32:66:de:bb:09:72:eb:e5:8f:ea:
         9c:d5:90:84:66:d9:f2:7e:a9:4b:47:04:4a:5a:32:6e:04:41:
         53:94:aa:80:d0:3c:9e:83:3c:d1:0e:97:68:8f:21:d7:f9:f8:
         5d:10:e3:98:1b:81:d3:75:67:ea:47:1d:52:ce:79:88:74:99:
         cb:82:81:87:1b:dc:a4:6f:73:f0:d4:d6:2f:7e:0b:f6:26:b7:
         ad:8b:09:25:ee:46:a2:53:c2:1c:c9:64:fc:f7:ec:d1:ee:43:
         0a:da:4b:ad:37:94:da:f8:c5:b7:6d:d5:1f:62:2d:77:b6:42:
         89:55:7f:29:83:b8:f7:6b:d6:fb:05:b4:a9:d4:b1:38:f4:10:
         ab:5a:bf:bf:ee:e6:74:b8:56:34:6d:10:79:f6:f4:5a:25:29:
         0f:a1:7e:5e:e1:4b:47:f9:70:8d:da:12:87:e7:e3:93:0c:5a:
         34:9f:89:8a:5c:0b:53:0c:7a:1f:1f:1e:61:c1:35:f4:30:51:
         54:5b:81:46:17:b4:77:f4:10:ec:f8:8c:96:ce:c5:a0:f5:63:
         87:1f:5c:cd:5f:70:c4:a4:ff:53:a8:28:be:69:93:cf:fb:a4:
         be:90:ef:01:bc:48:4a:29:2e:f0:d6:08:8b:e4:86:ff:b4:1c:
         96:4a:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:32 2025 by rpki-client