Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/45b48026-53f4-350c-ba83-fd15c2ad4de8.roa
File:                     45b48026-53f4-350c-ba83-fd15c2ad4de8.roa (raw, json)
Hash identifier:          uTtEmSvq1gFuZzrAmosJ2ttbRhm3eEJn6WZK+AlK/8g=
Subject key identifier:   FF:91:1D:34:7D:6C:9B:E4:AF:9D:82:78:E9:85:82:34:13:32:C7:DD
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285848C580F89275FFB207F277F980
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/45b48026-53f4-350c-ba83-fd15c2ad4de8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     31898
IP address blocks:        168.225.27.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 11:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f8:92:75:ff:b2:07:f2:77:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=50e0806f-eb86-4880-9afc-31910f6818e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:db:86:c9:9e:bd:8f:ea:dc:ae:ef:04:0d:05:
                    6e:cd:0b:ab:f6:64:72:bc:eb:26:76:73:af:f4:93:
                    dc:fb:1a:8c:8a:8d:af:51:78:29:ae:49:e1:49:e1:
                    11:72:a8:ed:43:51:67:f8:fb:2a:79:94:38:40:1c:
                    36:86:2a:6f:0a:f9:e7:ec:34:5b:e6:7d:45:9d:c7:
                    a4:a2:f1:57:69:c9:c4:21:fe:ed:b5:1f:00:47:a5:
                    fe:37:f4:c1:35:3c:5d:61:d8:fb:c4:bd:0e:bc:2b:
                    df:25:f7:51:48:99:62:02:8a:e2:bc:00:65:8a:f7:
                    94:2a:3a:c7:2b:45:5d:6c:43:01:13:2b:c1:fe:6b:
                    4b:ee:25:4b:be:b0:c2:7f:ad:30:64:5f:d7:5c:22:
                    52:58:17:be:d0:26:ee:cf:a5:58:d1:13:29:0c:de:
                    46:4a:49:40:c6:c4:fa:7c:84:98:fc:9a:5d:e3:73:
                    f7:66:19:fc:31:30:64:26:47:b3:b0:8b:bc:81:03:
                    e1:43:7a:fe:52:c3:07:64:fe:3e:fe:52:28:f9:9d:
                    d0:ff:68:e2:7a:69:3d:00:a2:6f:41:19:0d:66:38:
                    46:3a:a4:ec:d9:9e:06:68:d9:8a:72:c9:8d:19:fc:
                    cd:e6:2d:18:f3:e6:89:8b:de:16:9b:ec:e5:cb:b3:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:1D:34:7D:6C:9B:E4:AF:9D:82:78:E9:85:82:34:13:32:C7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/45b48026-53f4-350c-ba83-fd15c2ad4de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:51:27:14:6b:3f:ca:2d:e3:20:b3:05:80:90:cb:bf:ae:
         b5:17:03:ae:e8:4f:2c:ca:63:b1:23:61:d6:18:0a:86:15:a2:
         38:c4:2f:38:4a:77:91:74:12:7e:5b:5c:b0:c5:2a:2c:66:46:
         da:a5:9e:04:21:0d:4e:b7:ab:da:a8:c5:35:6c:67:fb:67:41:
         44:d6:79:9b:0d:ee:c2:fc:72:b4:3f:9b:f7:92:9f:ea:df:12:
         c9:37:21:48:de:93:52:38:95:16:da:62:61:05:42:af:7c:95:
         a8:e4:4b:88:28:fa:93:54:82:b4:51:4a:4b:1b:37:a1:3e:b8:
         5d:41:35:71:15:d7:a0:88:56:98:fe:72:a2:44:1f:9d:e8:e3:
         42:48:c4:b0:38:ca:61:36:19:28:a2:bc:76:a3:90:b8:25:19:
         41:34:e1:ed:c9:33:d9:94:02:3d:d7:30:7a:d7:97:2b:09:99:
         23:cb:77:94:6c:a8:bc:1f:46:15:8f:12:d3:e5:8d:be:86:0f:
         cb:3a:8c:ca:26:7e:e8:12:df:e2:7b:8e:30:15:20:7d:89:15:
         f5:0c:66:fb:d7:1a:00:81:69:a6:69:49:65:69:de:9b:54:a8:
         31:f6:dd:33:90:12:22:58:1c:a4:e0:07:18:44:64:7e:90:f5:
         27:b6:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:38:33 2025 by rpki-client