Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3af1d7b-fbb9-31d1-a643-896efe4f98df.roa
File:                     a3af1d7b-fbb9-31d1-a643-896efe4f98df.roa (raw, json)
Hash identifier:          zAO3WyBIqHnr8JV3CaR39N+MNOqqInmpRosNVWfud1Q=
Subject key identifier:   1E:4D:10:D1:B6:44:C6:D5:9C:24:5F:1C:D8:B8:4B:A7:C1:A5:C0:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858416D6FBAEF1FBA820C55F44800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3af1d7b-fbb9-31d1-a643-896efe4f98df.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 05 Jul 2025 04:00:00 +0000
asID:                     200131
IP address blocks:        50.114.101.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 30 Apr 2023 04:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6d:6f:ba:ef:1f:ba:82:0c:55:f4:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  5 04:00:00 2025 GMT
        Subject: CN=2f6d0ba8-6d85-4247-8b72-e91e6040fe24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:04:4b:c8:e2:5a:25:bc:84:5e:24:36:ee:7e:
                    42:5f:53:c6:5f:0b:1a:49:30:10:db:7f:e0:f1:4f:
                    06:69:52:64:a4:51:32:25:0c:4b:b4:7d:36:32:12:
                    5d:19:d9:4d:ca:9c:d2:b0:7d:4d:9e:56:a6:30:42:
                    8e:91:d0:e1:45:db:b9:d9:e3:29:16:8a:b6:c1:37:
                    12:0d:92:1c:33:3e:b0:91:c0:ea:46:68:20:0c:99:
                    e0:63:95:dc:d6:da:37:6c:c4:20:e2:9a:4b:f3:13:
                    2a:c4:fe:32:2e:15:c7:7e:26:1e:f2:e2:0a:bd:9f:
                    9b:12:35:cc:ae:03:06:88:7c:99:25:56:b7:f9:73:
                    44:b5:74:2b:ab:d3:ab:77:12:cc:f4:b8:04:1f:bb:
                    dd:68:0f:bf:a1:ec:51:14:a3:2b:87:5a:7c:ce:5c:
                    b1:ed:f2:8e:86:c8:b5:0c:be:fd:94:2f:81:77:74:
                    74:90:78:03:cc:2b:f4:4c:53:50:82:5d:26:a4:76:
                    31:d9:73:fb:0a:dc:f5:11:67:9c:5c:5b:42:8d:ed:
                    01:8b:a8:01:f3:87:87:a3:db:62:90:e7:7b:5b:34:
                    18:c9:52:e9:41:6b:6f:6f:1d:8b:a5:ba:6c:02:fe:
                    72:4b:f6:c9:de:37:0c:d0:62:4f:d3:43:bc:40:31:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:10:D1:B6:44:C6:D5:9C:24:5F:1C:D8:B8:4B:A7:C1:A5:C0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3af1d7b-fbb9-31d1-a643-896efe4f98df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:e8:48:7e:9b:56:52:00:3e:bf:75:91:62:92:7d:b8:cc:
         11:1e:92:c6:a0:76:e3:1a:49:6f:df:4f:a7:17:f9:67:93:69:
         49:bf:b8:ba:f4:9a:80:57:de:56:a3:5d:e2:d1:ee:69:97:05:
         0e:64:3c:36:12:9d:42:5e:01:5a:99:13:c4:79:9c:4d:ab:a1:
         d0:df:21:3d:06:fa:28:74:de:bb:09:28:42:62:84:ce:90:7b:
         d4:df:e5:c7:09:d2:31:33:49:25:21:37:09:8f:f2:a5:1d:04:
         e5:7b:e6:b6:fb:f4:71:b3:9a:79:df:ce:21:cb:78:86:45:4e:
         ad:f2:40:ee:c6:1f:29:ea:b1:8f:c4:74:0e:dc:e8:5e:e7:5a:
         ea:6b:65:e9:cf:8d:57:18:be:59:c1:2a:3a:15:ad:b5:87:c8:
         2b:4d:df:5a:20:d8:84:74:6e:4d:02:d2:d3:ec:7b:f6:ab:79:
         fe:1b:e5:f5:f9:d4:3e:f2:f4:21:f1:8b:29:37:a8:9c:17:fc:
         25:9d:cb:e3:bb:d1:39:9b:84:30:fe:cf:34:3e:20:d8:49:ac:
         55:76:db:8c:68:89:31:84:ad:93:7c:87:34:d0:97:67:fd:03:
         8e:ed:87:ea:82:a7:8d:6b:30:74:d7:3a:fe:12:4c:af:92:49:
         d3:68:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:22 2025 by rpki-client