Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8709ba0e-f2bf-32cf-b037-fe7cfbdaa2e5.roa
File:                     8709ba0e-f2bf-32cf-b037-fe7cfbdaa2e5.roa (raw, json)
Hash identifier:          gN4tDyRynnfemtdgiIXA82phSTjxjh3DjxrxDCkcFg4=
Subject key identifier:   71:08:A7:C8:4F:45:93:8E:2A:58:68:E9:BA:D0:4B:97:7A:DC:F2:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61B128C47E3677A99BD4CC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8709ba0e-f2bf-32cf-b037-fe7cfbdaa2e5.roa
Signing time:             Sat 24 May 2025 16:37:14 +0000
ROA not before:           Sat 24 May 2025 16:37:14 +0000
ROA not after:            Fri 22 Aug 2025 16:37:14 +0000
asID:                     213238
IP address blocks:        172.121.58.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1b:12:8c:47:e3:67:7a:99:bd:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:37:14 2025 GMT
            Not After : Aug 22 16:37:14 2025 GMT
        Subject: CN=fb5d2441-badc-42ed-9c37-0f97fcd24d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:02:ac:7b:c4:a8:78:fb:22:27:f7:31:0b:
                    52:a0:33:ad:db:5f:74:6c:67:75:1d:ca:40:fc:c1:
                    2e:5e:29:9d:35:02:a4:c7:06:af:ab:e0:0d:0c:6d:
                    c1:c5:b9:5a:af:60:33:bb:34:ea:04:d9:03:d9:95:
                    d9:5c:94:a1:e1:b5:30:42:94:bd:d2:29:73:b8:de:
                    7a:cb:32:65:21:bc:15:fa:f3:94:16:5e:ae:46:06:
                    fb:32:73:12:91:96:b2:8e:e8:89:de:77:76:0a:ea:
                    f1:b3:76:48:17:6f:e2:e6:0b:67:55:12:94:c1:21:
                    49:5a:f6:c4:15:39:ea:10:1b:ab:c7:89:88:ee:ba:
                    da:6e:1f:a1:fb:fc:97:0e:cc:00:a2:ff:e1:cc:95:
                    b4:b3:d1:e7:19:60:94:48:d1:fe:e9:59:02:1a:12:
                    cd:bd:9f:31:95:f5:55:06:49:af:8b:50:47:9d:87:
                    ca:dc:bb:b2:e5:32:61:ed:69:3a:45:99:af:bf:70:
                    12:97:34:21:50:fc:0f:94:79:8b:af:99:f5:ff:7e:
                    7d:7a:c7:0e:29:76:fc:9d:3a:b4:ce:32:77:4e:77:
                    f0:96:1a:1c:ac:6d:96:42:da:bf:5e:0a:12:23:a6:
                    53:dd:f2:5b:7e:b8:ea:a8:fa:9c:3c:64:20:a4:63:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:A7:C8:4F:45:93:8E:2A:58:68:E9:BA:D0:4B:97:7A:DC:F2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8709ba0e-f2bf-32cf-b037-fe7cfbdaa2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1a:74:c1:d9:5a:e7:ac:de:7e:b3:d7:b0:e8:af:bc:af:1d:
         c8:0a:67:4b:33:1f:89:9c:1a:27:9f:a7:a0:94:65:dd:fe:5e:
         b8:cb:c5:87:7f:a4:bf:7b:75:08:ea:29:9c:d1:cc:ac:73:c5:
         95:a6:af:e3:d8:c5:92:43:b6:6d:7e:47:1a:51:01:8c:ca:03:
         b8:f6:3e:9d:3d:af:99:75:9a:6f:54:69:02:d2:33:5c:02:0c:
         df:fa:9d:33:65:88:a1:3a:63:aa:0b:43:27:56:a6:a6:39:d8:
         37:d9:35:ab:95:35:70:8a:af:50:f8:79:c8:16:87:77:d1:20:
         d6:9c:58:26:73:15:44:a4:19:22:23:e3:ee:3b:a2:69:f2:59:
         a7:97:a2:00:bd:85:b4:ba:5f:3b:36:78:58:8e:f5:da:18:ef:
         d7:3a:93:73:18:4a:84:52:ff:a2:11:6f:a6:c3:0f:1f:c3:b3:
         7f:dd:c3:46:30:dd:1c:78:5f:fe:2f:32:e0:52:c2:13:02:19:
         91:1f:e9:2f:1d:d6:09:a9:fa:36:0f:6b:2e:0c:bf:99:03:f1:
         09:10:5d:dd:61:9e:ea:83:4f:01:7a:a1:99:cb:8f:dc:eb:cd:
         f2:04:29:6f:53:0a:5a:5d:4c:0c:f1:5e:ef:11:04:58:2f:48:
         9c:2d:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:51:56 2025 by rpki-client