Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d9ec667-7503-3475-a660-910e90ce6626.roa
File:                     2d9ec667-7503-3475-a660-910e90ce6626.roa (raw, json)
Hash identifier:          44TeLd7AQsOpEhRblKERSPlK40GB6823nmpv3vmeDkg=
Subject key identifier:   0E:8A:92:1B:74:2D:72:6B:45:4B:6A:3B:C0:09:B0:FC:EB:30:EB:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61C5C794769B3B322905B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d9ec667-7503-3475-a660-910e90ce6626.roa
Signing time:             Sat 24 May 2025 16:39:49 +0000
ROA not before:           Sat 24 May 2025 16:39:49 +0000
ROA not after:            Fri 22 Aug 2025 16:39:49 +0000
asID:                     213238
IP address blocks:        172.120.184.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1c:5c:79:47:69:b3:b3:22:90:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:39:49 2025 GMT
            Not After : Aug 22 16:39:49 2025 GMT
        Subject: CN=135f5353-df0a-4a10-848e-e9399d563132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:bb:aa:bb:a1:ba:35:67:2a:3e:7d:73:1d:
                    8f:6a:f7:8a:0e:c4:97:0a:4b:a5:23:76:6c:2e:3e:
                    a8:eb:fd:95:2a:60:f8:25:c3:41:4e:6f:88:99:18:
                    91:b0:c9:2f:00:15:59:7e:9a:bd:69:39:d5:92:4b:
                    85:65:26:fe:fe:96:f0:f4:46:37:3a:13:15:29:86:
                    45:7c:56:3b:13:88:09:60:48:3a:07:c5:5c:e4:26:
                    06:21:8e:09:aa:f3:38:5d:53:f8:4a:52:5f:95:b3:
                    26:69:76:46:8c:82:44:39:28:c8:ea:ed:f4:3e:35:
                    89:96:48:e7:c8:db:95:2d:2c:6f:6d:93:1d:4f:ab:
                    d4:46:9a:26:a8:13:38:ba:3d:ba:0e:81:16:a9:b7:
                    ca:72:b3:05:e2:1f:a2:a4:f4:1f:8e:d7:da:dd:88:
                    1b:ea:30:18:48:f7:62:16:c0:fa:37:92:fd:6a:4f:
                    c8:3e:9e:6b:bf:b2:0f:f2:56:e2:38:96:91:a8:e2:
                    30:8e:c8:9b:66:e7:7a:a8:60:c4:cc:cd:d4:01:ff:
                    26:b8:8d:d3:70:dd:7e:e7:12:24:99:0f:fc:1c:bd:
                    80:f5:28:ca:e7:c5:98:a4:df:d2:9c:19:41:e8:e2:
                    1f:9d:c3:97:9c:5e:07:67:34:a4:1f:b2:0c:9a:98:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8A:92:1B:74:2D:72:6B:45:4B:6A:3B:C0:09:B0:FC:EB:30:EB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d9ec667-7503-3475-a660-910e90ce6626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:26:88:9b:a9:d4:9a:03:76:9a:b6:ab:31:f7:b3:fe:cf:4a:
         09:99:45:00:0e:9d:5b:87:2a:b6:eb:4f:9d:3d:51:74:36:41:
         d8:1f:b1:dd:4d:f8:35:e9:17:da:1a:d6:4b:13:5a:c7:e3:9a:
         9e:25:a0:ef:5f:ae:39:39:af:64:32:5c:a1:92:6a:06:08:0d:
         57:2d:ed:2a:db:d4:72:b3:09:40:80:82:ef:1c:11:5f:3b:65:
         33:48:68:d8:cb:f7:db:61:30:f7:26:23:0a:c0:43:69:ed:83:
         8e:05:bf:50:a8:69:52:35:bd:3e:d8:d1:f2:2e:5c:1d:1e:89:
         31:a1:d9:25:4d:90:37:51:25:28:80:b8:0a:1a:88:ab:ca:4a:
         0b:0b:e9:d1:5d:c6:53:7c:25:b8:37:04:4b:87:8e:c8:27:c9:
         17:0f:b5:43:35:56:0d:f7:a7:e1:6f:40:10:93:45:e1:31:94:
         d5:e9:2f:fa:b0:b1:dc:8b:10:f6:53:06:3d:55:67:d0:5d:08:
         3f:2e:72:d1:54:bc:d1:64:55:77:95:ac:d1:f5:aa:db:cb:36:
         cd:73:c3:b0:56:53:a5:24:e2:16:b6:94:d4:03:01:5f:68:7e:
         43:27:1b:28:ed:20:00:c0:e8:10:79:87:ab:a1:8d:46:fc:45:
         c2:df:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:54:04 2025 by rpki-client