Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20796ea4-b491-3866-b9a0-b77b8f70b259.roa
File:                     20796ea4-b491-3866-b9a0-b77b8f70b259.roa (raw, json)
Hash identifier:          UZXh8qVER4Z2YXH8p3gb4P0YFEbM0ERC3udqkzVPd3U=
Subject key identifier:   FF:CB:BC:81:14:FC:0D:69:E0:1F:31:71:13:DA:BB:51:5B:8B:AA:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841A7767A2C09BEE48E50BF7D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20796ea4-b491-3866-b9a0-b77b8f70b259.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 26 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        108.165.135.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Apr 2023 17:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a7:76:7a:2c:09:be:e4:8e:50:bf:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 26 04:00:00 2025 GMT
        Subject: CN=6261c31c-1b99-4d38-811e-8ced105343dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:c7:cf:0a:99:78:f2:5a:b9:68:ea:13:6b:
                    c3:5b:3d:9b:e2:2a:2f:48:57:bc:52:e4:0d:7e:04:
                    53:65:4e:db:42:66:2c:a9:49:86:87:33:64:3f:fa:
                    b5:3c:ea:1e:c1:e4:ac:7b:08:1f:cd:55:e3:b8:5e:
                    1f:15:08:e5:1e:43:3e:b9:15:c3:64:43:6b:e0:9c:
                    0d:9c:90:e6:0e:0c:da:74:81:b7:32:3c:44:90:e2:
                    99:78:29:a2:79:5a:62:25:7d:ee:7a:1b:53:1f:1e:
                    61:4d:c9:fc:01:8a:98:fd:d2:69:8c:84:6f:1e:15:
                    ad:ef:83:ba:bc:62:78:fe:b4:6e:93:ac:3f:7b:6c:
                    02:1f:96:b1:f9:d4:a3:8a:d9:b2:de:11:72:2b:40:
                    96:e6:46:d6:c3:a4:d1:bb:9a:ed:08:3a:d8:97:a2:
                    d0:3b:57:1e:b5:86:6d:ea:01:71:0a:b5:84:21:12:
                    7d:e3:6d:64:80:04:98:c7:58:ed:a8:9c:1a:3a:14:
                    e0:9b:03:31:62:c1:49:13:bc:4d:9b:df:b3:32:53:
                    5b:12:ed:29:86:7b:dd:d4:0f:b3:12:9b:b1:da:f0:
                    30:74:31:56:43:79:03:92:26:12:ed:ec:5e:e3:0e:
                    75:c4:0e:51:e4:02:74:21:d4:8f:26:cc:c6:e8:2d:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CB:BC:81:14:FC:0D:69:E0:1F:31:71:13:DA:BB:51:5B:8B:AA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20796ea4-b491-3866-b9a0-b77b8f70b259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:52:7e:e8:dc:5e:86:b7:1b:1b:32:59:f1:f0:74:ba:44:9c:
         bb:f8:3f:b4:4b:9a:1b:1c:e8:96:69:ea:48:7b:55:ec:60:06:
         67:d7:1d:61:d9:0b:0a:eb:40:b6:68:a2:bd:db:31:c7:e9:6f:
         cc:d2:0d:c7:54:ed:f7:93:67:dd:b7:34:e0:76:3a:fa:d0:6f:
         a1:8b:49:d5:ec:3c:ee:93:05:bf:55:ce:90:e8:57:02:7c:d2:
         9c:b5:00:2a:05:3e:e8:97:07:13:29:85:91:60:ee:15:a4:e5:
         cf:67:92:e2:a3:9d:97:a9:fa:fd:c5:e6:9f:54:b5:79:c5:3d:
         c0:93:5b:76:da:2b:7e:95:b8:ac:41:ff:ac:49:54:8e:aa:64:
         7b:8b:30:71:a9:72:8a:36:00:da:97:07:48:b4:4b:8a:28:ab:
         13:f7:19:de:ff:32:72:4a:0e:5d:3d:82:25:7a:a7:e8:8d:fc:
         81:64:94:32:5c:35:56:a8:12:08:dd:34:f3:9c:ca:0d:a1:83:
         10:64:76:63:d2:63:19:48:09:f9:ff:f2:d0:05:52:25:0e:61:
         ab:13:c1:9b:eb:7e:ac:85:35:49:f7:e3:0c:ad:2b:f1:5f:30:
         ea:34:a8:30:78:e0:fc:83:a4:b6:ba:d9:25:6f:41:ed:e6:ce:
         f1:f2:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:26:44 2025 by rpki-client