Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f4c57c-3ae9-35a1-84bd-a0d445a0504e.roa
File:                     48f4c57c-3ae9-35a1-84bd-a0d445a0504e.roa (raw, json)
Hash identifier:          YewqOF1KETYCTGcQ91mBA+OON28Q7Ubog3fT2qWU5tQ=
Subject key identifier:   AA:DF:BC:73:03:CD:29:2D:1D:16:F3:AB:B4:01:DB:9A:1B:CC:F2:97
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583EC347F81B69D866C3088D5E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f4c57c-3ae9-35a1-84bd-a0d445a0504e.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Mon 24 Jul 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        69.40.120.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c3:47:f8:1b:69:d8:66:c3:08:8d:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2028 GMT
        Subject: CN=9668915a-6539-4a3c-9283-013347903e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:f6:18:06:e1:63:47:53:ba:75:8f:4b:a6:
                    7c:9e:6c:3d:72:7e:38:e6:35:f7:a2:af:b0:4e:8e:
                    4f:d0:c7:5b:09:cd:e0:6f:ec:1e:bd:d0:89:75:de:
                    bd:8f:9c:c9:93:ad:4c:2c:9c:5f:ca:9b:8b:0e:69:
                    54:a8:60:66:94:93:a3:41:18:26:3c:5e:4c:c3:3a:
                    18:0e:b5:23:f6:f5:eb:bf:33:a0:14:43:f6:66:39:
                    f6:94:93:bc:d2:94:f6:67:bc:80:f3:50:98:b0:2a:
                    ca:a9:a7:8b:fb:b3:77:c7:5a:69:51:79:e6:16:8a:
                    f7:74:c6:c4:10:fc:1a:cf:77:e5:d4:06:4e:4f:88:
                    6f:d3:83:6e:98:32:39:5b:b6:b5:f5:da:43:3b:03:
                    10:82:94:ff:1e:3e:00:7c:14:43:45:85:0c:3c:06:
                    20:cf:8e:7a:56:17:3d:5d:c0:02:35:e1:1f:c4:9a:
                    a9:e4:36:40:1a:e6:e1:8f:3f:c3:c1:9e:bb:19:f8:
                    41:81:a9:bd:6e:6e:30:ce:dd:a7:90:86:7b:93:82:
                    7f:cd:9b:60:cc:2e:dc:47:ab:70:0e:4c:e9:6d:98:
                    0f:95:e7:f1:43:9f:0c:94:b9:e9:9e:da:f3:9d:2d:
                    8b:3e:4f:57:d1:e2:71:65:ad:a9:cf:88:30:7a:7a:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:BC:73:03:CD:29:2D:1D:16:F3:AB:B4:01:DB:9A:1B:CC:F2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f4c57c-3ae9-35a1-84bd-a0d445a0504e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.40.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:39:9b:20:02:03:f3:06:4b:25:ae:c0:22:fc:ae:b0:21:cb:
         18:b1:e8:2e:f8:5b:e4:94:27:aa:73:9c:bb:5c:46:a5:fb:9b:
         97:e0:0a:8b:68:17:91:4b:2a:1a:f4:17:01:b5:49:40:6f:e8:
         8d:b1:23:d1:67:df:cd:e4:99:ed:1d:36:d1:92:4d:5b:78:f5:
         45:18:3c:21:ae:9b:02:29:3b:b5:e2:a4:6a:cd:7f:99:09:79:
         bf:5b:ae:a4:14:5a:2b:93:5e:82:17:f8:e2:1b:d9:a9:d9:21:
         59:c0:21:56:d5:98:22:c3:eb:88:82:06:aa:e2:50:9a:88:e4:
         b0:b9:ba:9b:05:92:3a:8d:0a:b7:6b:37:45:2e:79:24:a3:f6:
         3b:60:98:a3:44:2d:26:62:38:a1:f8:f7:a6:ca:43:ee:5f:e2:
         ad:92:da:9b:e8:20:bb:5b:8f:fd:62:0f:ff:35:41:fb:76:03:
         c5:ed:9f:7d:1f:73:80:19:47:4a:e3:3d:9c:a5:44:15:6d:c6:
         d2:7a:2b:9f:0f:eb:82:fe:2c:22:60:4e:db:26:9a:13:04:99:
         f2:9a:29:f9:76:73:d2:0c:2f:9e:05:c3:2c:f5:b5:07:b7:4f:
         9c:43:ae:c9:09:cc:e2:25:82:aa:91:86:34:1c:df:0e:4a:3c:
         f4:94:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:38:20 2025 by rpki-client