Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/06e6eacc-9b74-363e-a770-11c8531a0683.roa
File:                     06e6eacc-9b74-363e-a770-11c8531a0683.roa (raw, json)
Hash identifier:          ke5KAqrSRH4l+/4kQHNHWp/uYBJ9QvulkjZRcaanEn0=
Subject key identifier:   E4:72:15:00:DB:61:E7:1E:6F:A7:24:FA:ED:47:1B:07:F9:2D:56:87
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DED785B578E459745923B100
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/06e6eacc-9b74-363e-a770-11c8531a0683.roa
Signing time:             Fri 16 May 2025 08:37:32 +0000
ROA not before:           Fri 16 May 2025 08:37:32 +0000
ROA not after:            Thu 14 Aug 2025 08:37:32 +0000
asID:                     0
IP address blocks:        169.145.4.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 19 May 2025 01:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:d7:85:b5:78:e4:59:74:59:23:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 08:37:32 2025 GMT
            Not After : Aug 14 08:37:32 2025 GMT
        Subject: CN=13504c26-c8c2-4eeb-b5ac-492ba97c2a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:76:c7:68:0d:49:f1:67:06:6f:b4:96:74:
                    11:42:d2:95:8e:d1:93:f9:72:f1:39:27:db:a8:23:
                    71:8b:d5:59:10:5d:64:24:fa:b7:fc:88:d5:2d:a1:
                    a3:c4:72:ac:e8:51:e3:38:98:18:45:49:56:24:29:
                    d9:0b:47:35:91:0f:a1:1a:8e:33:7c:3b:23:fa:30:
                    47:78:0e:e5:5e:03:44:d9:8b:cd:41:c4:fc:13:70:
                    62:ba:46:16:cc:78:cb:b8:e1:b9:6d:10:20:3c:d8:
                    35:56:7b:a6:7c:39:d9:14:80:40:73:db:5f:a7:28:
                    0c:86:7f:f7:a9:1c:db:32:d1:23:a0:82:60:e8:46:
                    d4:5c:a2:5c:48:01:76:73:32:19:19:66:af:89:53:
                    bc:44:7f:86:a5:b6:1c:88:44:7c:09:96:9b:41:e7:
                    67:b6:2c:7b:f7:50:4d:cc:97:50:0c:fe:27:fe:2d:
                    c8:9f:de:6f:fc:b8:cb:07:4e:44:37:60:e4:28:15:
                    e9:a1:14:9f:1e:52:7a:76:c2:d3:14:83:af:46:ef:
                    de:b7:67:39:9b:ad:96:d9:4c:d6:0a:fc:8f:1d:32:
                    c7:04:e6:c8:ca:fd:6c:7d:0e:b2:11:30:1c:db:77:
                    0b:a8:7c:ef:f6:32:0b:d1:5a:48:d7:10:a7:3b:fe:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:15:00:DB:61:E7:1E:6F:A7:24:FA:ED:47:1B:07:F9:2D:56:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/06e6eacc-9b74-363e-a770-11c8531a0683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:01:61:52:d7:7d:b5:79:97:0a:b3:b1:c5:07:40:ec:10:
         25:9e:cb:36:0b:35:af:66:9e:8a:b6:82:71:4e:22:67:48:75:
         1b:27:be:22:b8:a1:a5:09:40:7d:09:11:1e:23:49:5e:eb:d6:
         80:68:57:8f:fb:d7:a7:de:91:c4:74:91:2e:fa:fc:2f:94:ff:
         25:b5:db:4c:cd:b7:c3:02:2d:fa:8d:9f:3e:a3:45:2e:d8:17:
         8d:e3:3f:c9:e2:83:f9:35:ae:08:7d:ca:21:9a:cf:dd:39:45:
         d9:e5:fc:04:1a:43:ae:13:8e:c2:0f:ad:d7:8d:5e:f0:b2:9e:
         9d:1f:fa:61:02:e2:6f:54:52:72:70:af:59:9a:d4:64:5d:db:
         3a:28:1d:22:cc:eb:0a:4b:39:b6:64:2f:28:16:8f:a0:94:aa:
         cd:95:b4:f2:b1:4f:ea:40:fb:f9:68:35:08:13:de:11:4c:a5:
         42:a4:00:eb:db:58:7e:3c:76:ce:a6:06:76:86:4a:77:82:2b:
         f7:ee:45:5d:06:8d:64:b9:46:0a:8a:27:e1:3a:13:0c:3c:4f:
         d3:f3:8a:bc:0c:c0:b1:da:ec:8b:42:29:75:5b:f0:06:c8:10:
         eb:d7:c0:e6:8d:bf:be:ff:f6:f3:88:13:d1:72:ba:7a:b2:2d:
         ae:c1:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:51 2025 by rpki-client