Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0dcc5f19-479f-3107-bb55-07b8023e090d.roa
File:                     0dcc5f19-479f-3107-bb55-07b8023e090d.roa (raw, json)
Hash identifier:          div9cRKaNpgZVwubrlxH/HaEUJ4xIhuob6cn8FYT6a0=
Subject key identifier:   61:6C:2B:0B:38:F3:11:70:08:46:D9:49:3E:CC:C5:8B:B5:19:FA:49
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584ABDF3B7F897FA2B7FCDDB4A00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0dcc5f19-479f-3107-bb55-07b8023e090d.roa
Signing time:             Mon 04 Aug 2025 06:39:36 +0000
ROA not before:           Mon 04 Aug 2025 06:39:36 +0000
ROA not after:            Sun 02 Nov 2025 07:39:36 +0000
asID:                     9009
IP address blocks:        172.94.112.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 05 Aug 2025 12:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:f3:b7:f8:97:fa:2b:7f:cd:db:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  4 06:39:36 2025 GMT
            Not After : Nov  2 07:39:36 2025 GMT
        Subject: CN=57fb15be-c73a-4d86-b0ed-bddfb8ad0fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:ec:a1:6c:1a:01:e4:2e:bb:13:b7:a1:05:
                    8b:3b:08:aa:e5:df:89:52:ea:79:b4:ce:be:7f:a4:
                    19:ea:dc:24:7a:55:a0:a1:6d:e7:dd:c5:cf:03:8e:
                    f5:51:85:e8:b0:30:bb:a1:a0:2b:d0:53:b7:64:15:
                    d9:b3:1d:57:a2:cb:2f:5d:fe:c5:5a:1a:28:dd:5b:
                    c6:20:8b:4f:c0:aa:ae:12:cc:f3:82:9a:79:5c:c9:
                    5f:41:66:c7:1f:d1:2e:a4:79:b3:1f:8a:c9:db:8f:
                    ca:96:2b:af:57:46:32:10:c7:6e:d6:b4:ee:1d:66:
                    3c:7b:8c:a4:06:80:86:c7:e5:66:c8:2c:55:9e:1c:
                    55:9b:28:8a:2c:bb:ac:fa:52:3e:a2:62:5d:73:45:
                    7d:74:59:93:d7:46:e9:e0:91:70:61:f9:c2:c2:ba:
                    88:f8:d1:a0:93:3d:fd:de:02:47:81:00:43:f3:f6:
                    08:7e:59:bd:d8:64:3f:ad:cf:d4:48:4b:1d:94:1a:
                    8f:1c:c1:08:89:9f:fe:ab:29:76:96:61:9a:79:10:
                    02:aa:79:79:bf:1f:04:52:c3:08:82:f8:9e:c4:c2:
                    e1:d0:5e:c8:39:fe:64:6d:68:44:d7:ba:73:4d:44:
                    5c:d9:81:60:2c:79:8a:4a:39:32:34:06:ca:ee:8d:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6C:2B:0B:38:F3:11:70:08:46:D9:49:3E:CC:C5:8B:B5:19:FA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0dcc5f19-479f-3107-bb55-07b8023e090d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:41:d4:b0:b9:81:5a:f9:d9:51:af:f4:fa:56:32:79:d3:b9:
         4b:12:0b:d7:77:77:c8:aa:5f:da:47:ff:b9:12:d7:f4:59:ea:
         9d:35:f8:4e:48:8e:25:0b:a3:08:2a:04:6d:7c:c1:3c:52:f4:
         a8:6e:64:a3:50:e2:15:fc:4d:67:ea:9c:a9:51:56:b4:98:a4:
         d7:5b:3a:85:f9:f1:f0:47:87:98:40:01:e1:57:14:74:09:ea:
         e0:e5:fa:0b:f1:e8:94:21:64:a1:83:03:03:68:27:c8:08:04:
         25:bf:79:58:9a:38:69:06:75:7f:04:57:1d:81:69:1c:31:0b:
         07:18:49:c4:77:84:71:bc:39:a0:03:a9:4b:98:9d:51:9c:1d:
         d4:a1:cd:6d:57:51:9d:a6:98:b6:02:1a:b7:6a:bc:ca:06:7d:
         2a:13:1e:ae:64:60:fd:59:3c:8a:b8:cd:b7:aa:3b:28:23:68:
         22:86:42:d4:c4:02:7e:2e:5c:e5:a3:29:6d:3f:ae:d8:19:b6:
         5c:d5:e8:5a:90:38:b5:af:db:35:c3:3b:8a:9a:b6:29:3a:28:
         0e:e6:58:64:9a:0b:89:5a:39:0e:5b:20:38:fe:9e:06:5a:27:
         fb:8f:f7:16:88:60:1c:dc:07:54:50:3d:64:81:fc:f0:21:8d:
         a5:a4:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:41 2025 by rpki-client