Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6194e105-9626-3e5b-b213-66f898f043f3.roa
File:                     6194e105-9626-3e5b-b213-66f898f043f3.roa (raw, json)
Hash identifier:          druMyJnYAbzRoYCEg4tnaozpTE3yOGpKHGUeorwbAL8=
Subject key identifier:   3B:08:AD:A6:AB:9C:61:53:1C:D4:82:40:1F:C3:EE:2E:9B:11:2F:80
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DF279BE9436DAE6773B340
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6194e105-9626-3e5b-b213-66f898f043f3.roa
Signing time:             Thu 01 May 2025 16:24:46 +0000
ROA not before:           Thu 01 May 2025 16:24:46 +0000
ROA not after:            Wed 30 Jul 2025 16:24:46 +0000
asID:                     22773
IP address blocks:        70.180.21.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:27:9b:e9:43:6d:ae:67:73:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:24:46 2025 GMT
            Not After : Jul 30 16:24:46 2025 GMT
        Subject: CN=2c2b5b3f-70ff-4c23-a977-0ec897baef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:62:5b:55:e0:0d:de:e6:d5:e5:b1:61:96:
                    46:d8:7f:5c:31:95:5e:9e:2b:b4:e1:80:49:3a:36:
                    aa:df:bb:a1:c2:6a:9f:72:84:16:9a:eb:0d:b0:a9:
                    93:40:42:5a:ae:da:ca:64:41:65:9c:f9:9a:ad:99:
                    8c:cc:63:df:05:cc:5e:31:19:2f:b0:5e:1c:77:e4:
                    7a:8b:9b:1d:e5:63:cf:b7:69:f2:b3:fc:3d:ed:7b:
                    74:16:34:ab:28:ad:8e:71:64:e7:79:1c:93:ed:14:
                    7d:f6:a5:09:28:c4:12:1d:ac:f0:f6:ae:e3:88:3d:
                    bf:ce:8a:bf:56:86:f5:3d:7d:36:3b:ea:7b:2f:14:
                    86:02:ad:41:11:fb:8a:e6:3d:20:47:0e:64:ec:83:
                    93:36:08:30:08:c7:41:75:35:9e:46:95:9f:76:32:
                    c2:9d:28:30:e0:da:74:f7:b7:ac:2c:e3:82:75:ef:
                    89:65:0c:c6:6d:fa:dc:a6:da:8c:5b:a8:06:30:96:
                    9a:11:a8:81:a6:c4:f4:dd:1a:26:fb:57:22:88:aa:
                    8c:f8:6e:6c:e6:3f:fb:e6:75:ee:6a:22:a2:cd:a5:
                    3e:5c:ab:2c:f6:85:b5:1f:32:09:0a:37:55:6c:24:
                    31:e3:a0:86:98:6d:3e:f6:83:7d:c3:11:0a:44:35:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:AD:A6:AB:9C:61:53:1C:D4:82:40:1F:C3:EE:2E:9B:11:2F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6194e105-9626-3e5b-b213-66f898f043f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.180.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:00:20:bd:cc:05:cb:fb:77:94:b3:79:55:11:10:46:24:
         30:73:de:bc:28:f3:fa:b3:bf:f3:8d:27:bb:8e:37:af:ea:74:
         e3:8c:45:4f:a9:b9:af:01:a0:6f:f2:e7:e5:6c:32:71:d6:9c:
         42:2d:7f:2e:1d:10:b1:33:d7:c7:05:f4:20:7b:cb:31:ee:68:
         f0:81:64:2f:15:44:cd:12:09:32:14:bf:da:81:7a:46:74:be:
         1e:ae:94:8f:6e:9e:38:d5:0d:ab:49:af:a9:71:52:43:c9:a8:
         0b:9f:1a:34:19:59:7d:e4:ba:3b:cb:d2:a0:a2:1e:8b:5b:c3:
         2d:8b:a9:8f:63:c2:1e:7c:ba:d5:58:e5:e0:38:8d:66:68:ca:
         75:2c:59:21:16:bd:27:01:a4:61:ea:7f:ba:25:6c:64:75:d3:
         d8:92:ea:fb:3c:c6:9a:4b:e3:11:27:53:89:60:60:3d:2d:80:
         8b:92:7c:ea:61:36:28:3e:cc:d2:db:b7:94:58:97:f5:a9:17:
         eb:31:b2:cb:82:74:9b:b0:cf:a9:4b:a4:99:17:6e:1e:2b:92:
         2f:6f:14:0a:c5:fb:b9:95:27:67:4f:11:62:6c:f0:e2:b6:7b:
         0a:a4:37:dd:8c:36:31:e9:4f:fe:37:b3:91:13:a5:11:5d:83:
         60:52:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:31:03 2025 by rpki-client