Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/b891f099-65f6-3473-95b6-1d1e5b6a9bb7.roa
File:                     b891f099-65f6-3473-95b6-1d1e5b6a9bb7.roa (raw, json)
Hash identifier:          gRhi8PdpabIdvR1k4Uy4T8LI4fIMqUxEQfBxztXJF4A=
Subject key identifier:   DC:D6:5B:42:BB:8D:99:6D:0B:A9:C0:F2:A4:D8:64:3A:6F:93:C8:B1
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285848DF5A301FFE3E666C7D607760
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/b891f099-65f6-3473-95b6-1d1e5b6a9bb7.roa
Signing time:             Thu 13 Feb 2025 20:13:52 +0000
ROA not before:           Thu 13 Feb 2025 20:13:52 +0000
ROA not after:            Wed 14 May 2025 19:13:52 +0000
asID:                     3755
IP address blocks:        199.109.224.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Thu 13 Feb 2025 20:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:df:5a:30:1f:fe:3e:66:6c:7d:60:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Feb 13 20:13:52 2025 GMT
            Not After : May 14 19:13:52 2025 GMT
        Subject: CN=bfe63271-59d3-46ce-8385-11aedc76d86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:70:c0:be:bb:86:8d:00:b7:a2:d8:e8:0c:
                    91:bd:51:0a:e0:c5:dd:f4:c6:0e:a9:f8:8e:1b:ea:
                    07:16:19:8f:70:79:62:a9:ce:59:d1:27:3f:77:66:
                    1b:11:77:33:c4:c4:0d:3f:41:d0:94:38:05:a7:24:
                    72:0b:d9:0d:cc:36:ca:fa:e0:4a:87:f8:14:12:7d:
                    f8:bd:9c:e5:1f:71:80:5c:fe:80:a8:30:0b:66:4b:
                    3e:ef:cf:4f:2d:39:b4:ba:a4:89:ab:25:1f:71:1f:
                    ae:43:78:0b:57:3c:e8:62:6b:db:0b:da:f3:ad:26:
                    35:62:ac:08:a1:a4:3a:c7:22:53:20:ab:ba:6e:fb:
                    1f:ce:15:d8:4d:3c:f4:02:c4:86:c1:02:ad:48:f4:
                    b4:10:48:a7:aa:8e:fa:15:3c:f4:e0:06:df:f6:f5:
                    a5:22:92:bc:78:aa:f3:74:19:4a:2b:cb:31:1b:7b:
                    43:a2:83:28:1e:f6:f6:f5:1f:c2:d9:b8:de:dc:1f:
                    4a:54:52:a6:b5:10:e0:8c:5d:a7:88:2e:f8:5f:ed:
                    68:59:fb:06:6f:8e:2e:7a:31:0e:ee:69:c3:9d:94:
                    1f:f3:3c:92:34:8b:c0:0b:8b:4f:04:bb:bb:be:b7:
                    a7:d0:95:92:ac:61:ad:5d:7d:6c:0a:e5:74:3a:7a:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:5B:42:BB:8D:99:6D:0B:A9:C0:F2:A4:D8:64:3A:6F:93:C8:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/b891f099-65f6-3473-95b6-1d1e5b6a9bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9e:28:24:48:5e:95:19:e1:67:5c:c6:11:20:9f:61:6c:88:
         43:21:88:68:ba:57:b8:94:1b:5f:02:c4:86:9d:0c:31:c3:e4:
         65:c8:83:9b:55:68:d7:20:09:ea:8d:da:26:e0:2d:0c:27:b7:
         61:6a:74:e5:5d:36:3f:d7:fb:12:cc:65:70:39:4a:88:dc:59:
         2b:29:dd:33:a1:ab:c2:49:8e:2f:9a:cf:40:f7:ce:32:1e:45:
         1d:36:66:f0:c1:5d:27:2b:3d:67:8a:b8:f4:68:3d:6b:b3:b3:
         2c:2b:aa:5d:eb:52:f2:76:dd:1d:45:f0:82:2f:64:60:e4:3d:
         de:23:6a:34:2e:a5:2b:12:b2:aa:0e:9c:a9:09:01:c9:bd:c6:
         8f:ee:ad:f2:1e:9f:52:ef:d2:10:d7:2f:6d:b0:52:27:f3:1a:
         16:cd:d2:9e:2c:fb:fa:6c:27:38:04:55:d2:45:c6:42:ed:20:
         12:d4:e8:4b:aa:c6:65:be:6e:06:ea:f4:69:d9:5a:5f:0c:7f:
         32:e4:3b:e0:47:2c:18:6e:f7:85:7a:eb:04:48:57:93:40:64:
         7e:66:d7:98:26:5d:cb:f8:aa:d6:fe:a0:6e:64:a8:fd:a6:b3:
         1b:f6:63:cc:84:c5:38:54:78:5f:a6:9c:1b:8e:3c:27:a9:4e:
         77:d9:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:04:52 2025 by rpki-client