Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fbe8351-89c3-38ff-975c-fd1a90dcf22a.roa
File:                     7fbe8351-89c3-38ff-975c-fd1a90dcf22a.roa (raw, json)
Hash identifier:          zdEYLWPYzN5aFvCcWZbp64GUZxYYm4/XzM/7LQseFVU=
Subject key identifier:   E5:38:2E:B2:D0:D0:55:07:7F:4D:55:9D:80:7D:9D:F2:D2:79:93:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841564DAA03F4EAD76C59F4E100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fbe8351-89c3-38ff-975c-fd1a90dcf22a.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Fri 27 Jun 2025 04:00:00 +0000
asID:                     40676
IP address blocks:        166.0.6.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 07 Apr 2023 18:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:56:4d:aa:03:f4:ea:d7:6c:59:f4:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 27 04:00:00 2025 GMT
        Subject: CN=8bbaa971-de85-47d1-8746-8b6791e02b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:e7:25:85:fc:e0:fb:0f:78:c4:92:60:c9:
                    2f:f7:90:60:16:d2:fe:1d:60:14:dd:bf:85:e4:d3:
                    1f:e5:44:8d:b3:6d:98:8b:e6:11:de:40:52:9f:5e:
                    54:3c:f8:ea:18:83:34:85:3c:4d:de:74:f2:33:db:
                    38:06:75:a6:bb:01:72:27:87:5f:b8:d3:19:c1:06:
                    4b:28:ca:f6:24:4d:6f:c4:ad:fa:54:12:58:10:88:
                    da:98:39:b0:8c:32:15:f5:33:b4:0a:77:c0:74:c4:
                    47:08:c8:b9:11:75:c7:c8:e7:95:14:4e:b2:5f:a5:
                    df:31:d4:cc:00:4a:8e:57:79:39:97:96:f0:8c:28:
                    9a:8a:82:7d:db:64:34:26:12:08:6f:7c:af:60:f3:
                    ad:45:c7:c1:7c:c6:eb:2e:2f:16:a1:e2:bb:7d:ec:
                    5f:72:67:8c:fa:1d:30:41:ad:3d:ce:32:fc:30:67:
                    54:4b:1f:f5:cb:93:e7:f2:31:c2:79:5a:0e:be:6f:
                    76:18:ba:01:a1:58:d1:38:82:ed:75:7b:c5:08:17:
                    63:b2:f8:10:46:a2:90:fc:e2:4e:75:65:4b:4b:3a:
                    0c:62:36:eb:b8:71:a5:6e:4c:9f:9f:a4:61:46:ac:
                    d5:05:f0:35:8e:59:39:3c:60:c8:84:0d:42:97:c7:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:38:2E:B2:D0:D0:55:07:7F:4D:55:9D:80:7D:9D:F2:D2:79:93:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fbe8351-89c3-38ff-975c-fd1a90dcf22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:72:bf:27:31:94:90:84:4c:c3:85:6c:5f:ca:18:3f:7d:da:
         0c:e5:fa:38:88:60:30:ef:60:f5:65:c1:44:b6:de:e0:0a:55:
         91:ee:5e:45:4c:e8:48:63:53:77:da:b2:5e:a2:6f:15:ee:60:
         d6:c9:ee:d1:e9:45:64:37:d3:94:6d:da:3e:0f:01:cc:db:a9:
         ce:3e:60:86:3e:69:bc:62:9a:b7:37:93:89:2f:be:f8:3b:09:
         df:45:e5:54:50:2a:0b:d6:e7:b8:56:be:28:fc:dc:be:ed:ab:
         d0:8f:69:b6:0b:d7:64:74:09:1f:56:4a:80:58:87:e0:5d:86:
         1e:2b:bc:bd:9c:7e:9f:11:33:98:10:f3:f1:bf:66:cb:31:68:
         ea:af:4a:ce:6a:1c:89:48:75:47:6f:af:da:27:be:ef:c2:53:
         e3:70:ec:75:ea:fd:49:e9:ee:1e:84:da:81:23:dd:35:c5:c4:
         b9:47:0c:bf:89:e4:71:8c:d8:42:17:dd:16:65:af:27:ae:6e:
         dc:fd:9c:23:a7:7b:c7:91:e1:a2:76:8d:d1:ee:82:3b:e5:fb:
         f9:62:fd:4d:87:23:be:3c:e5:39:c6:58:d1:54:79:1b:e9:18:
         66:5e:5f:ab:e3:c2:78:15:64:41:ca:8b:c0:2d:d8:37:07:aa:
         eb:75:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:38 2025 by rpki-client