Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4bcc888f-8287-3270-9e63-a52804412cba.roa
File:                     4bcc888f-8287-3270-9e63-a52804412cba.roa (raw, json)
Hash identifier:          d0s+jqhwd+Fx/Qxy62Grzuzjygw6KYHE8M6zQDWJ3y4=
Subject key identifier:   68:1C:07:D8:3E:B7:DE:FD:24:25:63:E7:59:33:37:08:DE:A4:D3:42
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584953C420998B30DBEB2BA62800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4bcc888f-8287-3270-9e63-a52804412cba.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     399989
IP address blocks:        198.20.144.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 02 Apr 2025 23:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:20:99:8b:30:db:eb:2b:a6:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=819cd524-81ac-43f6-b000-b615ab2d3a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:5c:8a:12:ec:94:c7:fb:74:db:b8:7b:bf:
                    af:06:0f:93:47:f5:0c:42:f3:94:1c:94:0b:aa:23:
                    88:5a:ff:7f:57:9b:de:62:e1:2b:5f:90:13:7d:be:
                    0a:3a:58:92:eb:5a:86:81:49:cd:73:be:8d:bc:0a:
                    3f:50:89:48:5e:9b:c6:a5:ee:66:3a:e1:a5:91:eb:
                    f5:4b:ca:15:50:46:0a:f1:80:73:a6:4e:68:c4:fe:
                    67:ab:17:11:48:b8:a2:1e:66:27:b8:97:a9:93:5f:
                    73:a1:cf:d4:bf:e5:2e:cc:c8:ac:38:24:0f:f9:7e:
                    e5:c2:c7:82:ee:a8:ed:3c:5a:c8:55:99:85:8c:aa:
                    5e:c9:3c:27:7c:7b:19:8a:d7:dd:70:60:2a:44:04:
                    3f:00:00:2b:85:c2:2a:14:eb:38:8f:b6:bd:31:09:
                    43:52:4b:f9:61:f9:72:93:11:37:40:0e:90:29:41:
                    d8:d2:e3:79:d1:d2:71:f2:3c:51:c5:7f:e0:4f:3c:
                    0a:45:f8:78:cf:62:e0:bf:52:b4:61:3e:e5:74:26:
                    38:96:35:ba:87:4b:f4:f2:fe:b9:c4:20:98:1c:c5:
                    d0:03:0a:0d:b4:da:d2:cd:1b:ee:66:89:35:d4:8b:
                    24:70:97:4d:bd:06:02:0c:7f:a1:fb:64:4e:c2:7f:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1C:07:D8:3E:B7:DE:FD:24:25:63:E7:59:33:37:08:DE:A4:D3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4bcc888f-8287-3270-9e63-a52804412cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:da:9b:d3:bf:0d:f4:0a:3b:35:9d:7a:74:44:15:ac:1c:d3:
         2b:2c:6c:3c:9b:38:a7:eb:78:e3:7d:fc:06:8f:c4:f2:75:44:
         ad:7f:8b:49:5f:20:7a:4e:a3:e6:e1:50:55:2f:1b:d0:75:5b:
         b6:66:17:1e:7e:83:db:38:5b:86:f1:d7:b7:f2:55:c0:4b:10:
         85:11:a6:a6:6a:1d:a1:f7:f8:ab:84:8a:6d:98:b7:d5:1c:fe:
         28:dc:fa:fa:9c:df:66:31:af:37:a4:2d:62:46:f2:22:83:df:
         6c:8a:05:a9:22:a8:8c:7d:e0:7a:e1:49:c6:6a:bd:c4:bc:c6:
         12:47:94:bc:3f:94:96:e4:55:26:8e:a5:b2:92:77:67:36:22:
         37:be:02:05:16:ad:f1:24:92:a9:f2:1c:c9:d5:ed:ba:35:b3:
         fa:d1:91:d9:5d:91:ef:2f:af:53:5b:58:8a:3b:5d:b4:0e:03:
         47:3c:c6:11:3a:32:de:c7:3e:8b:d4:23:36:4f:60:47:04:9a:
         e6:b8:c3:25:69:e2:36:f8:d5:e0:ab:d2:09:f1:cf:a6:57:72:
         dd:45:f3:d4:90:65:e2:a6:17:67:ff:63:87:fb:de:ab:ed:6e:
         cd:07:e4:b6:c8:a5:53:49:17:56:c6:9b:84:08:0a:eb:5f:4f:
         d1:83:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:41 2025 by rpki-client