Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79a7115e-c94e-337f-b78b-254b73e94f6f.roa
File:                     79a7115e-c94e-337f-b78b-254b73e94f6f.roa (raw, json)
Hash identifier:          YhAxUKLTPqDgflOCgYKlMgaQt0F54VcwbN2GOw67KeY=
Subject key identifier:   7E:F7:6B:A9:E3:34:83:F5:1F:06:AB:83:94:34:E9:31:20:E1:58:C4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841C1676FBB0FFD4E804AE79980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79a7115e-c94e-337f-b78b-254b73e94f6f.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 04 Aug 2025 04:00:00 +0000
asID:                     204796
IP address blocks:        108.165.95.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 09 May 2023 16:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:c1:67:6f:bb:0f:fd:4e:80:4a:e7:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  4 04:00:00 2025 GMT
        Subject: CN=1e9bcf6a-9b6f-43e6-a2f6-6d78d5e5ac70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c3:29:6a:19:94:71:cf:a4:41:49:80:9d:69:
                    86:8b:8a:26:8f:63:15:85:60:06:e2:a3:5e:be:cf:
                    b3:b2:d9:9f:4d:f7:d6:d8:8d:97:fb:a0:fc:22:96:
                    de:84:cc:c5:53:a5:cc:c0:ff:e1:16:29:b6:fa:24:
                    67:da:ea:f2:23:17:44:20:7e:67:8a:2f:ef:9d:0b:
                    75:21:91:38:77:67:63:ae:b4:f4:bf:ba:20:ca:f8:
                    0c:55:af:28:f3:4c:d5:42:8c:a8:50:04:d0:7a:e6:
                    8f:ac:74:aa:b6:3b:6f:46:ca:54:6f:12:a3:eb:56:
                    6a:32:cc:7e:23:77:9a:05:22:0d:f0:2c:e2:cf:88:
                    cf:07:12:7f:4f:cc:57:ac:82:20:47:31:b3:ed:69:
                    3a:a2:95:8b:e0:41:99:27:03:7e:80:f1:46:98:6d:
                    21:89:5c:cb:d2:8d:cc:62:dc:8f:e2:d2:2d:85:de:
                    58:5c:a5:8c:4f:f2:5e:cf:47:44:51:aa:f5:a4:a5:
                    bd:6f:0a:2b:1d:91:fe:20:a3:c5:1c:da:45:a5:59:
                    32:19:23:f3:fb:cf:39:d3:cc:96:ec:13:3f:4a:e5:
                    2d:71:81:fd:b7:b8:65:c0:2c:b2:f4:43:56:fa:bd:
                    ac:31:2d:a1:e5:9a:09:ec:f4:11:91:12:a2:f0:2e:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F7:6B:A9:E3:34:83:F5:1F:06:AB:83:94:34:E9:31:20:E1:58:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79a7115e-c94e-337f-b78b-254b73e94f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:5a:07:91:61:81:cf:79:d3:50:3e:72:00:e4:5c:2c:88:
         e4:4e:8c:bc:c1:0a:a9:c8:cc:34:bc:b4:e0:f1:10:eb:79:23:
         ce:d7:cf:46:c6:fc:d0:38:86:b2:7e:97:6d:3e:8c:c2:76:8f:
         74:86:d4:55:fd:1a:9a:96:4a:77:ee:2e:01:c5:80:25:9b:9e:
         27:0e:91:dd:f9:7e:a1:ef:5e:20:f6:19:16:17:eb:56:34:0f:
         c3:4f:97:cd:61:2c:ec:21:83:d4:48:d3:09:4e:09:a3:ad:3d:
         ea:8e:8b:a6:f7:28:52:fe:23:01:0d:d8:a4:4a:63:69:59:b7:
         25:44:0f:97:fa:41:1b:51:d1:75:9e:d7:17:ad:d4:83:56:50:
         75:b5:2b:dc:9f:bd:22:91:c3:d9:e5:93:76:73:ca:2c:87:2b:
         c8:22:38:0b:ef:c2:bb:17:d5:cf:de:e7:41:47:2b:9f:85:02:
         b6:79:a3:e5:b0:b0:e7:df:e3:a5:4f:1e:49:5d:56:5c:4e:83:
         56:17:ec:f3:13:77:2e:a0:46:2b:1f:3c:62:03:24:bd:c0:3e:
         3f:ba:d1:ae:f7:2a:c9:8c:c8:f1:7c:5d:5f:4e:af:41:e2:bc:
         f9:bd:58:40:f4:09:fb:61:da:49:0a:f9:06:94:34:5e:bf:e6:
         52:1e:b6:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHBZ2+7D/1OgErnmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDgwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MWU5YmNmNmEtOWI2Zi00M2U2LWEyZjYtNmQ3OGQ1ZTVhYzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicMpahmUcc+kQUmAnWmGi4omj2MVhWAG4qNe
vs+zstmfTffW2I2X+6D8IpbehMzFU6XMwP/hFim2+iRn2uryIxdEIH5nii/vnQt1
IZE4d2djrrT0v7ogyvgMVa8o80zVQoyoUATQeuaPrHSqtjtvRspUbxKj61ZqMsx+
I3eaBSIN8Cziz4jPBxJ/T8xXrIIgRzGz7Wk6opWL4EGZJwN+gPFGmG0hiVzL0o3M
YtyP4tIthd5YXKWMT/Jez0dEUar1pKW9bworHZH+IKPFHNpFpVkyGSPz+88508yW
7BM/SuUtcYH9t7hlwCyy9ENW+r2sMS2h5ZoJ7PQRkRKi8C4SpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH73a6njNIP1Hwarg5Q06TEg4VjEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzlhNzExNWUtYzk0ZS0z
MzdmLWI3OGItMjU0YjczZTk0ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8lWgeRYYHPedNQPnIA5FwsiOROjLzBCqnIzDS8tODxEOt5I87Xz0bG
/NA4hrJ+l20+jMJ2j3SG1FX9GpqWSnfuLgHFgCWbnicOkd35fqHvXiD2GRYX61Y0
D8NPl81hLOwhg9RI0wlOCaOtPeqOi6b3KFL+IwEN2KRKY2lZtyVED5f6QRtR0XWe
1xet1INWUHW1K9yfvSKRw9nlk3ZzyiyHK8giOAvvwrsX1c/e50FHK5+FArZ5o+Ww
sOff46VPHkldVlxOg1YX7PMTdy6gRisfPGIDJL3APj+60a73KsmMyPF8XV9Or0Hi
vPm9WED0Cfth2kkK+QaUNF6/5lIetnE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:59 2025 by rpki-client