Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afe89dc-0ad5-3cb2-af0c-61dea8dd3098.roa
File:                     1afe89dc-0ad5-3cb2-af0c-61dea8dd3098.roa (raw, json)
Hash identifier:          cWmMQrLt8WTrBmmxRqCFcVyFlRs+4/SE12ZWiEO+dhU=
Subject key identifier:   64:91:A3:CB:2F:35:A0:97:2F:3A:A8:E3:1E:E1:9E:44:E6:DB:42:35
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849FABF446C35D23564E60A7E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afe89dc-0ad5-3cb2-af0c-61dea8dd3098.roa
Signing time:             Mon 26 May 2025 08:31:18 +0000
ROA not before:           Mon 26 May 2025 08:31:18 +0000
ROA not after:            Sun 24 Aug 2025 08:31:18 +0000
asID:                     22773
IP address blocks:        98.181.16.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Mon 26 May 2025 08:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fa:bf:44:6c:35:d2:35:64:e6:0a:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 26 08:31:18 2025 GMT
            Not After : Aug 24 08:31:18 2025 GMT
        Subject: CN=0bfb5ec8-1dde-4ea0-a459-0e097f357bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:06:74:dc:5e:d4:37:59:d9:56:8d:01:8f:
                    b9:78:43:90:06:bc:54:86:92:65:8d:f3:a6:85:05:
                    f8:9b:db:3b:ed:15:69:67:6c:a5:3f:a6:28:2d:ab:
                    fe:73:69:0b:8d:d8:7c:bd:8b:99:fe:72:da:f3:d8:
                    ec:ad:33:b9:93:5b:76:f9:50:7f:53:f4:16:f7:5c:
                    2a:5a:20:e1:77:ed:b6:a5:0d:84:f6:be:c7:ec:6f:
                    01:b9:67:bd:5f:1d:47:b9:08:ed:a0:fe:aa:64:6e:
                    0b:cb:0d:ee:b5:cb:b5:44:dc:50:9b:0f:72:8c:49:
                    fe:3d:d3:8b:ae:5d:2c:68:18:55:9c:a8:72:ca:12:
                    eb:b0:7c:7c:bb:3d:61:4a:a2:0a:72:26:dc:79:36:
                    89:b4:06:9a:9e:a0:ac:31:ec:b6:16:ae:9f:ed:0f:
                    c5:3f:9a:e5:7e:70:be:5a:d0:db:eb:6a:78:a0:07:
                    81:bf:30:f2:ff:bb:39:cf:7a:3e:fa:dc:48:07:16:
                    89:83:ea:b1:94:c8:33:5a:ab:5b:e5:d2:a3:dc:57:
                    68:77:c7:13:70:d4:1f:07:34:b8:9a:1f:17:71:60:
                    34:3d:c3:77:2f:b8:29:34:cb:e1:2b:f0:57:ac:64:
                    24:a8:3c:cc:a7:b0:75:60:58:2b:52:68:be:40:01:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:A3:CB:2F:35:A0:97:2F:3A:A8:E3:1E:E1:9E:44:E6:DB:42:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afe89dc-0ad5-3cb2-af0c-61dea8dd3098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.181.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:07:7e:0c:d7:69:76:af:8d:2c:c0:6f:b7:d4:26:6e:c7:02:
         d5:b6:9d:57:ac:c3:43:12:c9:19:51:23:73:96:23:3a:28:c0:
         0f:a9:3f:16:89:23:9f:9f:ed:69:ef:4d:f7:c6:f9:a5:20:ee:
         7c:50:bf:72:14:b8:a1:29:e3:b1:1a:2d:0e:0a:97:cd:05:96:
         2b:78:b7:a6:e8:b8:c8:cf:a3:42:44:39:e7:c5:28:01:2e:b8:
         ce:57:8b:f2:15:92:ab:28:90:ce:fb:ee:3f:87:58:bc:1e:81:
         58:85:ef:3c:6d:cb:13:ac:5a:63:fc:55:cd:07:bb:8c:13:91:
         84:53:d5:10:b3:26:6f:34:cd:cb:f5:5f:58:43:21:4c:9f:00:
         2d:3a:84:b0:88:e0:f7:1f:c8:52:5b:36:56:e9:7f:95:34:72:
         50:06:15:fc:a6:ac:51:74:52:40:03:cd:d5:aa:23:95:01:4c:
         30:76:b2:82:f1:7a:55:15:d7:65:16:e6:0a:c4:02:0a:8c:d3:
         48:a9:07:1f:18:2d:45:b6:c1:60:e6:a9:40:7e:5c:11:a7:30:
         5a:bc:33:98:e6:69:93:ff:b6:82:b9:63:45:78:96:aa:51:0f:
         87:cd:48:38:fc:1b:5b:cb:7a:bf:23:2f:68:15:77:9e:f2:dd:
         e4:ad:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:54:13 2025 by rpki-client