Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94ec411d-3fef-31e3-a1f8-f6222283a002.roa
File:                     94ec411d-3fef-31e3-a1f8-f6222283a002.roa (raw, json)
Hash identifier:          w0Uf65dwASiWbxeCJCSff3XQJg1bXfZqLHVZgV4gHvU=
Subject key identifier:   D8:B4:4E:E3:1D:52:09:19:43:F7:25:95:50:CF:D0:FA:68:F8:5C:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849EAE7DE6B1853BEBC5257DAB0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94ec411d-3fef-31e3-a1f8-f6222283a002.roa
Signing time:             Tue 20 May 2025 16:20:10 +0000
ROA not before:           Tue 20 May 2025 16:20:10 +0000
ROA not after:            Mon 18 Aug 2025 16:20:10 +0000
asID:                     401152
IP address blocks:        50.114.12.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 28 May 2025 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:e7:de:6b:18:53:be:bc:52:57:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 16:20:10 2025 GMT
            Not After : Aug 18 16:20:10 2025 GMT
        Subject: CN=1a12f08f-bd77-48ef-aa59-074a82d29b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:8c:d6:4b:8e:ae:53:5a:96:3e:2c:04:fd:
                    15:62:24:36:b0:d7:3d:27:4a:5b:18:3f:9f:f0:d1:
                    b5:e1:c7:59:c6:a9:26:26:4c:72:e5:75:bd:1d:7c:
                    e9:d6:f8:b6:3e:4b:f0:84:5a:53:d6:51:fa:b7:f1:
                    52:8e:e6:12:01:23:e4:fa:37:38:cf:4e:5e:18:65:
                    b1:46:31:56:5b:f7:52:b4:39:cd:fd:67:cf:c7:1c:
                    e8:cf:0d:3e:81:10:30:91:44:6b:69:9f:d2:bb:57:
                    49:99:8f:b9:6c:d7:b6:6e:c4:f5:ac:89:48:4b:54:
                    3a:96:c3:af:d5:d7:2b:38:a1:a8:2f:ad:eb:ee:fe:
                    8c:ad:77:91:38:33:72:2e:68:9e:45:ba:7a:d5:79:
                    78:a2:45:2a:4d:22:23:64:29:b5:77:43:84:f2:59:
                    c4:12:a7:62:a0:4d:ad:56:5f:8f:9f:a3:7b:c3:c6:
                    54:c8:0e:ec:80:4a:97:b4:b5:cb:3c:53:70:4b:0e:
                    d9:99:08:8d:7e:06:c6:99:8e:98:a7:87:3e:38:78:
                    f2:11:15:20:5c:80:db:13:9f:72:02:df:e3:5f:49:
                    ea:6b:6f:a9:6e:cc:0e:4b:97:40:88:ce:24:8b:85:
                    1e:30:8b:72:a3:b2:70:b7:be:2d:b5:38:b5:23:9c:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B4:4E:E3:1D:52:09:19:43:F7:25:95:50:CF:D0:FA:68:F8:5C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94ec411d-3fef-31e3-a1f8-f6222283a002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:2b:fe:f8:73:5b:72:eb:a3:47:c5:5c:c6:9a:cc:fa:54:
         32:28:7a:03:da:bc:81:98:6e:6e:d1:c0:b2:e9:5a:2f:18:5c:
         d1:68:65:85:d9:4d:b4:8b:80:01:05:5e:b0:fc:4e:9e:0c:5d:
         2b:68:4d:73:66:f7:19:c5:b8:0c:00:1b:54:70:ff:59:98:ff:
         2d:7d:b3:5e:4b:41:a4:2a:66:e9:d4:da:5e:a7:9b:17:05:16:
         ff:4a:3b:34:40:12:34:98:6b:99:e5:fe:53:f1:75:7b:db:6c:
         0c:5c:7b:c9:5c:2e:ee:c8:60:75:3c:6c:8e:f2:31:30:33:91:
         37:63:fe:7f:1b:7a:32:0f:70:31:ae:ca:4d:77:69:0d:d2:da:
         94:64:7f:e8:47:02:62:03:8c:6e:79:24:19:ab:15:6d:db:f7:
         0e:ed:5a:17:be:30:fd:52:e3:c4:e6:2b:6a:65:52:7a:05:11:
         83:80:4f:9d:2d:e6:df:b6:96:87:dd:e4:6c:25:c7:79:51:07:
         1b:25:d7:16:19:3c:e8:41:f6:2b:67:52:d6:f5:b2:82:17:a7:
         fa:65:31:6d:df:75:3a:6d:d0:b7:46:be:1a:96:7e:9a:9b:ce:
         84:1b:ef:ca:07:10:a1:b2:3e:3c:31:74:eb:01:46:cc:97:87:
         7a:ce:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:28 2025 by rpki-client