Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/63dc77c4-2361-3ca0-a208-9073ac2d7864.roa
File:                     63dc77c4-2361-3ca0-a208-9073ac2d7864.roa (raw, json)
Hash identifier:          gS96B2vRcaItiWsbvkxn8BkFdkhMjgKYZoRlD3NZDYs=
Subject key identifier:   FD:F6:9A:2B:88:F3:DA:43:9F:24:D1:77:71:BB:BE:8C:86:8F:68:3D
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285849DA5371177181B22077366A80
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/63dc77c4-2361-3ca0-a208-9073ac2d7864.roa
Signing time:             Wed 14 May 2025 17:48:10 +0000
ROA not before:           Wed 14 May 2025 17:48:10 +0000
ROA not after:            Tue 12 Aug 2025 17:48:10 +0000
asID:                     33548
IP address blocks:        66.235.116.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Thu 15 May 2025 17:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:da:53:71:17:71:81:b2:20:77:36:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: May 14 17:48:10 2025 GMT
            Not After : Aug 12 17:48:10 2025 GMT
        Subject: CN=e6ed31ab-b166-4fde-81ae-2ef70fbb60e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:cb:d9:8a:5f:2e:27:2d:0b:09:26:fa:b9:
                    f2:a3:4a:8c:41:f8:be:3e:fd:22:0b:5d:ab:65:30:
                    c2:c7:95:72:4c:e0:5b:0a:8f:a0:38:93:0c:a4:7e:
                    c7:71:aa:45:e2:45:0b:94:af:4d:a6:65:c4:6a:2b:
                    02:d3:44:16:71:7e:51:84:4a:c8:72:9b:2f:14:0f:
                    7a:6e:59:8e:ec:50:0d:d7:6c:70:cf:c1:79:f2:8f:
                    ee:a4:9b:6a:a5:e3:a1:ff:f8:c7:5a:76:c2:f3:34:
                    8b:f8:85:f3:fb:f6:4f:1c:9e:6c:0c:26:a1:1c:ba:
                    f8:18:d7:e1:4e:6d:ad:25:c6:7a:dd:3f:e7:aa:d3:
                    58:35:84:9c:f8:c5:30:a7:fd:d7:e0:70:c5:36:6f:
                    df:02:ea:8c:50:08:a1:ff:05:16:cd:27:06:10:34:
                    c6:6d:4a:1d:e0:61:25:cb:4c:af:fd:ff:41:fe:f4:
                    9a:dc:8d:bc:1d:b3:ea:50:7f:68:45:1c:07:fb:25:
                    dd:9f:7d:33:8f:ce:cd:eb:43:a2:55:69:b6:68:80:
                    75:b6:28:d9:fc:42:c5:c2:f3:7e:4f:54:3a:c4:9d:
                    99:d7:21:6d:33:15:99:fc:a3:b2:c8:ca:a8:57:59:
                    87:c1:97:af:be:c0:55:05:4e:6c:39:98:4f:19:de:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:9A:2B:88:F3:DA:43:9F:24:D1:77:71:BB:BE:8C:86:8F:68:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/63dc77c4-2361-3ca0-a208-9073ac2d7864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:32:3d:6e:52:3c:07:b5:61:30:00:c3:6e:20:99:8e:71:56:
         f9:62:ce:84:a4:e7:c7:ed:43:63:21:ab:cd:a6:62:ec:5b:3c:
         ee:05:d4:b8:d7:e2:3c:28:85:4e:22:e3:0d:e4:95:64:a7:e2:
         26:b5:4a:b2:aa:21:70:f3:94:8f:b9:f0:a5:e5:e5:25:b2:2d:
         c1:64:9b:a9:94:c7:db:fb:2f:6d:47:93:30:e3:2a:70:ff:30:
         2f:aa:cb:13:7d:b6:3e:1b:4c:f6:a5:1f:99:3c:55:b5:63:a7:
         30:a2:27:e5:3d:7e:b4:91:73:b9:c9:69:aa:9f:03:8b:a9:36:
         9f:14:3e:21:e9:9d:3f:fb:21:0b:9f:9c:38:90:69:ea:db:2a:
         ed:68:a1:22:bd:c2:3a:4c:74:15:90:7f:a4:55:35:11:97:d5:
         d6:e3:f9:69:6b:53:61:bf:d4:5f:74:4f:8e:14:34:75:9a:44:
         a3:c6:0d:ca:bf:5a:4c:23:37:bc:03:4c:31:5f:7f:1b:6f:a0:
         51:9d:e0:5d:eb:f2:64:8e:74:f9:d7:d7:07:76:2c:60:00:0f:
         ae:63:a5:b0:1b:cb:cf:98:ae:d7:1b:1d:7c:b7:c0:5f:3a:88:
         46:4a:3a:c3:52:53:82:db:97:8e:a5:ed:5b:24:b8:c2:f3:4d:
         08:d1:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:17 2025 by rpki-client