Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/fedadc97-d1f1-3ea0-9625-9a274e1c98fd.roa
File:                     fedadc97-d1f1-3ea0-9625-9a274e1c98fd.roa (raw, json)
Hash identifier:          /elbqab/btQ/9P/fvgCQNIYU9tzpTGWRWLPVdixMl2g=
Subject key identifier:   32:CA:B3:B1:79:DB:D8:97:14:0C:7E:1B:9D:52:2C:FA:64:2E:F2:14
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F432858491FF33090D796EAD697E04180
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/fedadc97-d1f1-3ea0-9625-9a274e1c98fd.roa
Signing time:             Sat 08 Mar 2025 23:33:53 +0000
ROA not before:           Sat 08 Mar 2025 23:33:53 +0000
ROA not after:            Fri 06 Jun 2025 22:33:53 +0000
asID:                     0
IP address blocks:        23.164.57.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 09 Mar 2025 03:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1f:f3:30:90:d7:96:ea:d6:97:e0:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Mar  8 23:33:53 2025 GMT
            Not After : Jun  6 22:33:53 2025 GMT
        Subject: CN=44765dfa-d5e7-453f-a0fc-100163eeb1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:67:aa:90:66:3e:99:6a:e5:6a:b6:9a:50:
                    63:0c:bf:78:ee:08:31:45:0e:99:30:44:72:3a:38:
                    f2:75:21:c6:a5:89:69:a6:1d:71:9e:f6:ca:b4:91:
                    3d:ca:3f:ab:76:79:4a:a8:7c:91:36:ae:31:8b:1d:
                    19:98:f8:4f:9d:80:18:cf:6c:06:bd:f7:2c:23:c9:
                    18:22:88:80:7e:e5:a0:ef:73:6b:0a:07:b9:47:06:
                    f0:f2:62:68:11:7f:2d:a5:e1:5a:db:86:43:17:0c:
                    27:2f:6e:42:23:7f:64:84:9d:1b:39:5b:74:8e:b9:
                    17:8c:24:cd:fa:bb:3b:f6:c7:42:02:bd:a6:be:45:
                    7b:dc:5e:5b:fe:b3:69:de:dd:e1:61:48:a6:1c:14:
                    2b:e6:31:c1:f9:77:10:b2:bf:2e:ac:1d:ea:09:e3:
                    d4:7c:29:11:e5:38:9f:cf:95:34:2e:b3:76:a5:6f:
                    e1:84:03:d4:a0:6a:5a:57:6c:b8:9f:72:fc:84:49:
                    87:0d:ae:a1:7b:3f:c1:47:66:1a:9a:12:1a:51:db:
                    70:62:08:3f:e8:ba:8f:1e:18:16:69:69:0f:5d:36:
                    a9:f8:86:db:7c:0a:f4:6e:0f:2e:cf:04:41:89:28:
                    38:fb:28:5f:19:e1:d1:96:81:d7:55:ee:be:59:6b:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:B3:B1:79:DB:D8:97:14:0C:7E:1B:9D:52:2C:FA:64:2E:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/fedadc97-d1f1-3ea0-9625-9a274e1c98fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:19:c9:a4:b1:ff:6a:10:f9:23:f2:1d:b7:82:b7:b1:64:9c:
         27:27:45:5b:4f:d0:91:7c:8b:c6:b8:8e:d1:e6:14:4c:34:8e:
         8d:f6:09:a1:0e:18:c2:2f:51:f7:ec:a0:f9:5e:74:9e:7d:b9:
         78:ac:1c:b8:51:6d:df:0f:f7:a3:44:3a:d6:54:2f:ec:78:3a:
         c2:f8:81:17:b6:97:04:a8:35:2f:50:bb:a9:6f:a5:be:ed:87:
         7c:7c:b8:73:5c:02:e7:98:41:d5:c2:b7:fc:e1:09:1f:35:7e:
         c1:03:68:35:47:b7:85:36:df:85:6b:0f:c7:34:4b:5b:0b:1b:
         01:c3:52:d7:25:f4:e2:11:e5:75:17:87:e0:a8:34:84:33:35:
         91:b8:ed:c6:f4:70:88:3c:2f:9f:49:a4:f2:c2:79:84:ee:51:
         27:36:0d:a8:a7:cd:03:93:96:cc:51:1f:99:5c:94:e6:07:08:
         77:9a:f1:59:c4:c1:73:ee:52:5c:b2:2d:82:d2:40:2e:8e:a3:
         e4:93:d4:c7:80:4c:43:4a:46:18:7b:ef:2a:34:1b:f8:22:ca:
         d5:a0:ad:75:0b:77:bd:a2:5c:eb:8e:b5:9b:97:5b:20:4d:96:
         88:f3:04:ae:c8:29:b3:ad:e4:c4:83:88:94:81:8a:23:80:c7:
         fb:78:c8:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkf8zCQ15bq1pfgQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkzZDE0M2YtMDA5YS00ZjdjLWJlYjQtY2U5YzczMzUy
NDE3MB4XDTI1MDMwODIzMzM1M1oXDTI1MDYwNjIyMzM1M1owLzEtMCsGA1UEAxMk
NDQ3NjVkZmEtZDVlNy00NTNmLWEwZmMtMTAwMTYzZWViMWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pBnqpBmPplq5Wq2mlBjDL947ggxRQ6ZMERy
OjjydSHGpYlpph1xnvbKtJE9yj+rdnlKqHyRNq4xix0ZmPhPnYAYz2wGvfcsI8kY
IoiAfuWg73NrCge5Rwbw8mJoEX8tpeFa24ZDFwwnL25CI39khJ0bOVt0jrkXjCTN
+rs79sdCAr2mvkV73F5b/rNp3t3hYUimHBQr5jHB+XcQsr8urB3qCePUfCkR5Tif
z5U0LrN2pW/hhAPUoGpaV2y4n3L8hEmHDa6hez/BR2YamhIaUdtwYgg/6LqPHhgW
aWkPXTap+IbbfAr0bg8uzwRBiSg4+yhfGeHRloHXVe6+WWt5XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLKs7F529iXFAx+G51SLPpkLvIUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNk
MTQzZi0wMDlhLTRmN2MtYmViNC1jZTljNzMzNTI0MTcvZmVkYWRjOTctZDFmMS0z
ZWEwLTk2MjUtOWEyNzRlMWM5OGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDkzZDE0M2YtMDA5YS00ZjdjLWJl
YjQtY2U5YzczMzUyNDE3LzA5M2QxNDNmLTAwOWEtNGY3Yy1iZWI0LWNlOWM3MzM1
MjQxNy5jcmwwHwYDVR0jBBgwFoAUwwrscmITHMiOguUvQ7Yv6opL3nQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNkMTQzZi0wMDlhLTRmN2MtYmViNC1jZTlj
NzMzNTI0MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6Q5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwZyaSx/2oQ+SPyHbeCt7FknCcnRVtP0JF8i8a4jtHmFEw0jo32CaEO
GMIvUffsoPledJ59uXisHLhRbd8P96NEOtZUL+x4OsL4gRe2lwSoNS9Qu6lvpb7t
h3x8uHNcAueYQdXCt/zhCR81fsEDaDVHt4U234VrD8c0S1sLGwHDUtcl9OIR5XUX
h+CoNIQzNZG47cb0cIg8L59JpPLCeYTuUSc2DainzQOTlsxRH5lclOYHCHea8VnE
wXPuUlyyLYLSQC6Oo+ST1MeATENKRhh77yo0G/giytWgrXULd72iXOuOtZuXWyBN
lojzBK7IKbOt5MSDiJSBiiOAx/t4yOI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:09 2025 by rpki-client