Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1adc0644-dedf-3108-bfde-8d844ef0a4a3.roa
File:                     1adc0644-dedf-3108-bfde-8d844ef0a4a3.roa (raw, json)
Hash identifier:          VzMV469IiN5Ysid/YfcIqC510D3BmdFLuV8nEQ7GQvA=
Subject key identifier:   03:F2:FE:C4:C0:92:CD:CB:A5:17:68:52:A1:99:6A:65:A3:88:7E:6F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858414AF110BFF3E9FBA40C154A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1adc0644-dedf-3108-bfde-8d844ef0a4a3.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 23 Jun 2025 04:00:00 +0000
asID:                     397423
IP address blocks:        23.26.152.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 01 May 2023 16:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:f1:10:bf:f3:e9:fb:a4:0c:15:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 23 04:00:00 2025 GMT
        Subject: CN=48097301-4f19-4ee1-8773-6fcc6bacd509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:60:e2:b9:53:38:77:29:75:29:70:8d:87:
                    1a:0a:72:48:8c:67:47:63:f4:66:bb:16:43:4d:bb:
                    03:e8:d2:32:99:5c:09:4d:a8:95:4d:f6:0d:2e:02:
                    1c:05:5e:f6:4b:3c:57:d5:a7:c7:80:4f:74:3e:df:
                    f3:b9:6a:4d:64:3e:23:1a:6c:80:ea:a4:09:5e:ea:
                    00:38:f4:e3:ef:13:58:be:89:b8:7a:5c:55:16:0c:
                    f9:e9:bf:a1:99:01:c2:33:a0:d5:60:46:86:e3:0e:
                    22:ab:b6:62:48:19:9d:ce:fc:e7:dd:1a:f9:59:24:
                    aa:44:de:d2:c7:05:fc:01:b6:c3:68:de:bb:62:96:
                    fa:eb:d2:61:73:16:f3:8f:cf:65:fe:47:3c:09:f0:
                    20:ff:9e:1c:96:be:91:c2:f5:a0:8f:ba:ba:00:51:
                    f0:64:50:6d:62:c4:1f:eb:dd:1d:7a:3f:5e:1f:8b:
                    3f:58:0f:9a:de:43:64:6c:ad:30:ca:ff:83:97:0c:
                    cc:77:3c:6c:b6:29:98:f2:04:a0:fd:b1:b8:74:90:
                    99:c0:96:a1:b8:f6:81:2f:ea:32:cf:ff:e3:ac:7d:
                    00:ae:15:3f:30:3a:1a:55:4c:12:33:e0:5e:95:b0:
                    6c:cf:c9:34:6e:58:12:1e:b0:cf:c3:4d:97:62:dd:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:FE:C4:C0:92:CD:CB:A5:17:68:52:A1:99:6A:65:A3:88:7E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1adc0644-dedf-3108-bfde-8d844ef0a4a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:e5:9b:83:27:18:31:91:6e:3e:67:a9:3e:e3:2b:3c:24:
         22:91:d7:bb:0e:ad:7f:b2:44:cd:7f:11:bf:21:0b:7c:cc:f8:
         b3:73:fe:cf:16:90:e7:f9:6b:75:36:e0:7b:7a:05:95:c1:0c:
         da:7d:b4:30:82:3c:8c:aa:00:a2:b0:2d:67:97:55:fd:71:b2:
         af:49:56:26:43:81:14:8b:e1:75:cf:0f:4c:62:96:47:62:3d:
         de:c2:71:b7:75:5f:53:03:01:69:1f:c2:8f:98:bf:c8:7a:d4:
         83:ff:5f:11:22:9e:fa:e4:fc:36:b3:49:b9:df:e7:74:18:bf:
         4a:64:bb:67:29:ce:c3:a1:cc:d4:b5:ae:28:aa:82:18:32:1f:
         d7:8b:35:f6:23:03:d0:a3:bc:66:1c:fe:1f:6f:58:33:31:ec:
         ea:eb:39:a8:4f:5b:24:b5:43:41:96:40:9d:87:74:d0:24:54:
         5c:1d:30:cc:1a:02:d9:e3:ac:fe:82:cf:a0:02:9b:ce:7f:9b:
         5e:59:7f:0f:7b:80:91:e7:5f:fe:3a:af:a8:2f:44:1f:eb:b0:
         fc:83:04:13:f7:aa:73:6f:43:95:f3:bb:f4:f5:b7:1c:ff:14:
         ea:a1:d2:b7:4e:02:50:62:d2:0b:cc:d1:b1:19:97:89:02:7d:
         bd:84:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:34:06 2025 by rpki-client