Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26febc95-92b7-3646-bdeb-4b469c8e338b.roa
File:                     26febc95-92b7-3646-bdeb-4b469c8e338b.roa (raw, json)
Hash identifier:          NHw8VdU8ywhpAn1LJQ1OuvKrBEJ99MN8zkOO5e674N8=
Subject key identifier:   7C:D9:39:4E:7E:71:FD:73:52:DD:81:4F:4A:88:4F:33:2A:3C:0D:FD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DFDE76DDE46340E66BAC20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26febc95-92b7-3646-bdeb-4b469c8e338b.roa
Signing time:             Thu 01 May 2025 16:26:12 +0000
ROA not before:           Thu 01 May 2025 16:26:12 +0000
ROA not after:            Wed 30 Jul 2025 16:26:12 +0000
asID:                     22773
IP address blocks:        72.206.139.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:de:76:dd:e4:63:40:e6:6b:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:26:12 2025 GMT
            Not After : Jul 30 16:26:12 2025 GMT
        Subject: CN=64ddadd3-c192-4f3b-a00c-19ca1616dd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:62:5e:c2:3a:b4:07:ca:21:2b:95:e5:20:
                    3d:07:05:fc:94:05:0e:0e:66:ca:99:a4:b8:59:7b:
                    25:65:a9:ff:6a:4c:3b:63:7e:c7:df:50:37:b6:cd:
                    74:88:5e:12:6d:f0:a9:4e:79:86:78:82:b2:29:75:
                    b8:2b:58:10:cf:4c:b2:c4:2b:55:80:46:17:00:9b:
                    7f:7e:47:0a:94:91:26:e4:26:20:09:71:f1:a7:1c:
                    0b:cb:11:49:45:fd:c6:2f:ad:10:bb:03:31:d3:c2:
                    32:53:c3:ae:40:a6:61:31:0f:9a:9e:45:8c:2e:5a:
                    d2:a7:e3:d9:25:4b:a6:f0:68:3d:7d:d1:9a:65:73:
                    8a:e2:b2:0f:c4:5c:c5:14:6e:34:b3:75:a3:e5:3a:
                    ae:2b:22:39:ba:f0:9c:e2:35:db:a7:bc:3e:cb:ee:
                    39:db:9e:2f:45:95:85:8b:9d:a2:40:2a:1c:ae:67:
                    29:62:ab:08:4e:20:39:a8:86:07:12:53:e3:e1:ab:
                    dd:64:f6:b3:12:81:ff:38:17:8d:5c:8d:1c:ee:99:
                    2b:23:17:a7:cf:25:ae:8f:36:ae:6f:4b:3b:ae:a6:
                    1d:52:6e:04:3d:3f:cf:26:ca:35:e4:89:4d:80:c8:
                    71:aa:aa:26:ae:fa:8b:4d:cc:e3:fb:6c:cc:b3:c3:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:39:4E:7E:71:FD:73:52:DD:81:4F:4A:88:4F:33:2A:3C:0D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26febc95-92b7-3646-bdeb-4b469c8e338b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.206.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:ad:14:0a:3d:a1:74:96:cb:8b:d3:74:12:fb:08:f2:4f:
         fc:99:8a:ec:5d:83:86:02:46:29:fd:1a:dc:c8:e6:35:91:03:
         77:ed:99:da:a6:6e:ca:90:70:76:4d:48:6a:35:90:af:f8:ec:
         b7:e9:15:b3:a9:86:86:6c:d8:3b:7a:57:91:1f:8c:f4:bc:01:
         a9:03:68:b9:5c:b9:b7:45:aa:5a:5c:11:45:eb:23:a7:2d:57:
         0e:5e:93:0c:b4:05:03:23:74:89:a0:47:52:ac:fb:b5:07:e6:
         77:e6:6c:88:ee:2d:64:31:a6:c7:01:45:12:8e:b2:c5:66:3d:
         ca:91:00:c2:08:c0:b5:56:6f:f1:fc:42:ca:30:8d:9c:1e:9f:
         1d:eb:34:44:6e:d2:e6:84:e1:0c:f9:09:4b:8a:50:fa:32:57:
         df:d8:a8:34:f1:78:7c:25:b0:49:82:96:95:e7:1b:0a:f1:7b:
         56:10:1d:93:9b:3f:03:f0:c8:d2:16:9f:1e:f1:db:c7:5b:9b:
         dc:c4:67:ab:0f:0b:6b:d9:8a:54:01:71:b2:38:74:b7:69:2f:
         29:3b:fe:1e:9b:80:aa:33:da:75:dd:7f:2c:cf:51:f2:cd:26:
         55:41:20:07:6a:98:f3:71:22:db:d4:e8:f4:ee:85:32:da:42:
         bf:d3:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:35:56 2025 by rpki-client