Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1466d927-0fd0-3653-9b09-d2100fbe38a9.roa
File:                     1466d927-0fd0-3653-9b09-d2100fbe38a9.roa (raw, json)
Hash identifier:          VLbB0Uq66wVjsXfYwwmfqCFEPFM2EVme1DwW8s7cYWM=
Subject key identifier:   AB:BA:C4:A9:38:25:27:DE:E2:F8:19:74:CB:2C:6D:70:32:1C:67:0E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D2039E2286A600D43E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1466d927-0fd0-3653-9b09-d2100fbe38a9.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.45.1.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d2:03:9e:22:86:a6:00:d4:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=67e6ba1c-b516-407c-9fdb-6777c80655c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:21:3f:3c:da:10:bc:2c:5a:61:aa:85:38:
                    a9:73:af:3c:10:b2:26:b0:38:19:56:b4:36:69:1c:
                    f0:f8:36:43:1e:9a:7f:c7:b1:0d:51:dc:46:03:55:
                    25:8a:fe:32:80:68:d4:30:bc:26:57:ba:38:a6:c5:
                    8b:22:3d:43:5f:ef:cd:6c:f3:b2:ba:74:72:ac:9d:
                    9d:78:cf:47:ad:0f:aa:64:2f:01:e5:5c:cc:38:00:
                    3d:44:56:e6:6a:0e:67:37:51:b1:4f:e2:fd:df:8c:
                    ad:e6:57:21:b8:e5:e2:62:c3:7f:fc:f0:37:11:e6:
                    dd:07:ba:29:54:75:43:c4:ef:97:f1:cc:8b:ca:5b:
                    ff:0c:ba:96:4f:da:92:e7:b6:7c:54:60:d6:c7:9c:
                    4b:69:5f:f0:2b:4a:69:21:d9:7e:bf:8a:3c:62:7d:
                    b2:3a:dc:d5:48:02:3d:5b:ac:23:e0:c6:1b:b8:5d:
                    26:8e:c9:ec:85:de:82:fa:5a:6d:c2:e9:70:19:23:
                    b0:e0:65:50:7d:09:8b:10:6e:b8:d2:b1:9b:1e:81:
                    f6:6f:91:6f:a7:c8:ba:c9:67:07:d4:75:c5:83:fd:
                    8c:ef:32:a9:81:b9:c7:7e:df:20:e9:21:8b:e2:85:
                    e2:f1:f5:28:a5:cc:be:59:27:0c:24:89:1a:90:f1:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BA:C4:A9:38:25:27:DE:E2:F8:19:74:CB:2C:6D:70:32:1C:67:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1466d927-0fd0-3653-9b09-d2100fbe38a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0b:e3:d2:63:0d:0f:91:6b:9e:01:10:82:b6:d9:6d:f4:ec:
         b2:50:47:67:c6:0d:8a:ad:77:fe:df:7e:a1:28:d2:3d:64:ee:
         32:f2:55:6e:2e:07:d4:4a:e9:0e:1a:73:a4:da:1f:ad:65:e8:
         a0:5e:71:dd:20:68:c5:53:49:56:5a:e5:d2:41:95:fa:49:6f:
         3f:e8:b2:89:7b:06:2f:d9:49:b1:a4:c9:b1:5f:b6:6b:e9:84:
         36:28:f7:9b:c7:6a:6b:03:34:fe:3e:e2:14:96:07:c0:e1:94:
         32:5c:75:5d:ad:f0:34:83:c9:28:d2:53:06:5e:88:e8:d5:8b:
         3c:86:62:a0:4e:89:18:1f:0b:3f:ef:b4:38:4b:7e:35:7c:0f:
         95:5d:97:e6:69:3d:c6:93:04:72:34:90:f0:d2:b5:20:0f:d8:
         99:74:c3:27:45:da:54:d3:d8:3e:0e:44:30:b5:6c:1e:91:67:
         5e:b8:53:a4:25:52:7f:82:cc:02:31:5a:73:c5:95:5b:c4:33:
         d3:23:e9:d8:9f:66:55:31:e1:68:9a:13:29:e6:7f:2a:2d:83:
         bb:89:20:97:fd:f8:7e:8d:d3:63:4f:f2:c3:c1:76:8e:85:01:
         50:29:5d:82:5e:1f:a1:82:e8:26:4c:c3:4b:e0:f9:34:f1:8d:
         56:70:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----