Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa
File:                     63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa (raw, json)
Hash identifier:          ZyXGxTCDpoDSeAYXu2CpFpdzXPD/xG7EOBW1oNUo0CE=
Subject key identifier:   A0:A2:B4:AF:CE:47:6D:8A:34:73:DC:E5:5D:25:C0:24:84:A4:BA:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC7A6F81B48D59F635980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396557
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c7:a6:f8:1b:48:d5:9f:63:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=6c491fa8-91c5-4c6e-a322-2c055c9b00b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:8d:1c:aa:3b:96:8d:a3:af:a2:da:d7:2d:
                    1d:a2:bf:7c:21:70:74:5c:36:0f:5d:94:cf:59:c7:
                    48:6e:db:8e:c5:bc:ec:9c:80:22:4e:7f:a0:1b:b4:
                    46:5c:2f:35:a4:6c:9d:58:9d:38:17:03:6a:1c:98:
                    12:4c:4a:58:01:04:01:93:d4:56:c4:01:7b:45:85:
                    d3:48:13:26:78:13:8d:89:47:1a:1c:c6:e9:3e:0b:
                    db:fc:fb:ed:3f:4a:62:ac:43:5d:25:ba:39:d3:68:
                    a7:47:96:8e:ce:7c:22:bb:6c:07:cc:58:46:71:dd:
                    58:89:e5:e8:ce:68:6d:a1:2d:c4:19:ee:87:ad:be:
                    70:72:b4:2d:75:de:4a:40:31:76:bb:1d:b2:1a:a2:
                    cb:7a:6d:ed:8d:03:e7:e3:18:d7:33:c4:36:20:4e:
                    fc:3d:c6:15:a4:e7:f9:2a:2f:cb:85:08:d4:42:18:
                    67:d8:f9:c6:88:90:53:c5:57:e5:45:4a:37:d2:03:
                    b7:4a:5a:59:08:cb:78:31:b3:b3:d6:21:a0:f3:94:
                    34:4b:d8:9a:55:55:ac:0e:08:2e:4d:2f:52:cb:b3:
                    66:c0:b5:05:cf:5d:d0:cf:ee:de:43:c2:04:b0:f2:
                    87:1c:1b:56:90:21:51:98:af:e5:aa:31:4e:94:c1:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A2:B4:AF:CE:47:6D:8A:34:73:DC:E5:5D:25:C0:24:84:A4:BA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:05:a8:ee:13:a0:bc:a2:a2:1e:c8:2c:74:a4:12:2e:3f:58:
         2e:92:10:5d:10:56:0c:cc:88:79:98:d5:be:43:72:65:da:58:
         0b:7b:a5:90:08:21:cf:be:0a:8f:9a:46:46:36:8e:8e:47:7f:
         56:cf:91:cd:b8:f2:4d:1c:43:cc:1f:84:b8:c4:10:ca:ef:26:
         d7:06:a6:f2:d7:a6:13:cc:dc:56:08:d5:52:ac:78:4f:29:9e:
         81:7d:e6:cb:b5:21:2d:c6:a8:fb:1c:ba:fb:52:6b:c2:ee:18:
         b3:2e:bf:0f:16:ee:8c:62:89:f7:31:f5:ec:7a:da:f6:3a:82:
         59:a4:19:d4:0f:4e:44:f3:80:d3:73:03:b2:d9:1b:06:8f:54:
         fc:01:9e:24:27:83:74:70:45:77:93:71:af:36:8e:25:07:7a:
         69:47:9f:d0:fa:1c:e4:1c:a3:0f:5e:9f:4d:be:47:81:ea:13:
         ef:1e:0a:6f:88:2d:3a:90:c6:b1:ce:14:1e:87:c5:fb:3c:d9:
         a5:73:7a:3b:00:e1:a1:92:12:a0:ba:e6:96:c9:29:8a:49:f5:
         0e:d8:0a:70:14:81:23:7a:c7:55:3d:80:39:09:bd:9f:5c:0b:
         4a:e8:ae:3f:4b:90:f0:a2:92:93:b2:12:6c:10:d7:34:98:e1:
         1b:97:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:24:56 2025 by rpki-client