Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/76363436-9bdb-31f3-ba84-081796280041.roa
File:                     76363436-9bdb-31f3-ba84-081796280041.roa (raw, json)
Hash identifier:          0f6lYjvW5XUcSz/jfpKVdSOw0WAZnbmORXdL3UPWw3k=
Subject key identifier:   90:4E:DA:90:44:D6:5D:F1:A9:27:C1:36:51:72:7B:A2:22:DA:AC:85
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61C97605A48371CFBDBF500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/76363436-9bdb-31f3-ba84-081796280041.roa
Signing time:             Sat 24 May 2025 16:40:17 +0000
ROA not before:           Sat 24 May 2025 16:40:17 +0000
ROA not after:            Fri 22 Aug 2025 16:40:17 +0000
asID:                     213238
IP address blocks:        172.120.163.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1c:97:60:5a:48:37:1c:fb:db:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:40:17 2025 GMT
            Not After : Aug 22 16:40:17 2025 GMT
        Subject: CN=0e0bb3ca-a67f-47b3-8bec-2997aaef76b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:fc:d7:8e:8f:2c:7e:47:eb:88:f0:74:2e:
                    8d:ef:54:a0:e8:5c:c8:61:25:1d:9c:b2:9e:44:2b:
                    fa:d1:84:57:e2:c9:89:7b:e3:c9:97:32:c2:7c:55:
                    5e:d4:a9:f5:b9:7c:36:eb:97:7f:10:d8:20:da:d2:
                    75:0d:31:6b:52:48:64:d0:18:18:d8:5c:7a:8d:73:
                    8d:95:89:99:c0:85:7d:c4:5c:e7:cc:ff:c3:05:8d:
                    2b:bc:e1:35:4d:91:9d:af:20:e4:b4:28:c5:1c:07:
                    b2:69:67:5d:9a:98:24:69:d1:0d:3c:e8:b2:86:2e:
                    b6:ff:72:c3:1c:7d:38:0f:53:33:49:6b:59:07:68:
                    9a:3a:c0:62:84:2f:a3:87:5e:85:c7:26:b6:94:30:
                    fe:d6:5f:b1:28:77:36:ce:d9:1e:79:fe:53:c2:06:
                    5b:11:d8:a4:c0:9a:a0:46:a4:3f:87:c7:4a:a2:fd:
                    45:9d:3e:27:56:bb:cd:9a:29:16:e3:39:bf:71:80:
                    71:3f:0a:7b:8c:4e:54:3b:c4:5a:0c:d9:0b:5f:84:
                    93:e6:e2:f7:4b:e8:e0:f7:13:37:bc:79:db:2e:58:
                    c8:af:8f:4b:f6:03:99:90:9d:ba:f0:a7:14:c3:f1:
                    0e:c9:80:22:e1:ed:fe:f5:8c:5c:72:0c:99:80:4d:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:DA:90:44:D6:5D:F1:A9:27:C1:36:51:72:7B:A2:22:DA:AC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/76363436-9bdb-31f3-ba84-081796280041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:49:a9:39:be:a8:e4:a2:8c:bd:c3:a1:e2:e6:c2:8b:4c:0e:
         ee:cf:bd:ea:2c:d6:1f:c1:b8:ec:57:7f:bd:30:4e:90:f8:e2:
         34:78:9c:ab:2a:57:ca:bf:54:fa:69:53:e3:eb:c5:16:1d:fe:
         40:00:52:14:ff:fb:fc:ca:63:9a:3b:c9:46:dc:cf:24:f4:96:
         24:b5:82:bc:9d:2f:0a:9d:37:8a:58:a6:5b:e1:54:ca:a2:f9:
         6c:e9:4b:c7:c7:13:64:85:0b:b3:6d:37:a4:21:f8:9a:a8:41:
         2d:3e:31:b9:37:34:2b:3a:0f:da:78:5b:d9:df:63:a0:16:0b:
         d7:d5:46:56:7b:4c:52:b2:6c:34:af:03:f3:e6:65:3c:b9:b3:
         3b:16:dd:39:f5:c2:28:35:5f:7f:94:2e:51:2a:e7:97:98:7c:
         d0:61:95:5d:09:5e:1d:b9:8b:c2:fc:42:16:6d:1e:af:2c:8e:
         76:cd:55:5d:fd:81:46:ef:79:b3:89:b4:86:23:f3:fa:c9:de:
         6e:d5:66:0b:48:de:ac:05:f8:01:b3:69:c7:af:3f:4f:17:17:
         fb:07:5f:38:0e:89:21:fd:ce:ea:f7:44:b3:f0:77:ca:dc:6e:
         16:8d:51:92:4e:97:1c:f4:c8:90:f1:29:ff:55:57:95:52:75:
         09:3d:32:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn2HJdgWkg3HPvb9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUyNDE2NDAxN1oXDTI1MDgyMjE2NDAxN1owLzEtMCsGA1UEAxMk
MGUwYmIzY2EtYTY3Zi00N2IzLThiZWMtMjk5N2FhZWY3NmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zX8146PLH5H64jwdC6N71Sg6FzIYSUdnLKe
RCv60YRX4smJe+PJlzLCfFVe1Kn1uXw265d/ENgg2tJ1DTFrUkhk0BgY2Fx6jXON
lYmZwIV9xFznzP/DBY0rvOE1TZGdryDktCjFHAeyaWddmpgkadENPOiyhi62/3LD
HH04D1MzSWtZB2iaOsBihC+jh16Fxya2lDD+1l+xKHc2ztkeef5TwgZbEdikwJqg
RqQ/h8dKov1FnT4nVrvNmikW4zm/cYBxPwp7jE5UO8RaDNkLX4ST5uL3S+jg9xM3
vHnbLljIr49L9gOZkJ268KcUw/EOyYAi4e3+9YxccgyZgE2U+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBO2pBE1l3xqSfBNlFye6Ii2qyFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzYzNjM0MzYtOWJkYi0z
MWYzLWJhODQtMDgxNzk2MjgwMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHijMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERJqTm+qOSijL3DoeLmwotMDu7Pveos1h/BuOxXf70wTpD44jR4nKsq
V8q/VPppU+PrxRYd/kAAUhT/+/zKY5o7yUbczyT0liS1grydLwqdN4pYplvhVMqi
+WzpS8fHE2SFC7NtN6Qh+JqoQS0+Mbk3NCs6D9p4W9nfY6AWC9fVRlZ7TFKybDSv
A/PmZTy5szsW3Tn1wig1X3+ULlEq55eYfNBhlV0JXh25i8L8QhZtHq8sjnbNVV39
gUbvebOJtIYj8/rJ3m7VZgtI3qwF+AGzacevP08XF/sHXzgOiSH9zur3RLPwd8rc
bhaNUZJOlxz0yJDxKf9VV5VSdQk9Mss=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:17:13 2025 by rpki-client