Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c7f99d6-ca15-364e-b18b-935d8705905a.roa
File:                     1c7f99d6-ca15-364e-b18b-935d8705905a.roa (raw, json)
Hash identifier:          Yudl5BTJjhIOlL9RgLz6pBrTNgPv468i730X4eetHus=
Subject key identifier:   89:25:58:D8:ED:B1:84:7C:9C:CB:EF:22:BD:D5:BB:9B:79:46:74:41
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858499829D021174F626130B7B780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c7f99d6-ca15-364e-b18b-935d8705905a.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     396356
IP address blocks:        216.74.123.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 May 2025 15:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d0:21:17:4f:62:61:30:b7:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=501dc534-ed0f-497a-83df-37e19e098c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:e9:f3:8f:77:92:de:5f:be:68:38:e0:58:
                    d2:81:a1:dc:42:3b:a9:7f:d0:c1:36:7e:b9:df:d4:
                    5b:9b:0e:11:d9:4d:9c:8d:56:b6:35:10:f9:fc:bb:
                    a3:e5:f5:43:e8:57:e9:0d:8a:f9:8b:95:af:82:dd:
                    cd:70:9d:f9:49:34:0d:d1:54:90:ca:69:0b:5c:73:
                    57:ef:00:55:ac:86:eb:c6:2e:df:8c:81:04:63:0f:
                    96:79:38:d1:45:3a:05:8d:a7:47:ec:c2:84:47:ee:
                    06:0e:fc:b2:32:ab:f7:3d:78:f6:f6:1a:f6:d4:7a:
                    80:8a:8b:e1:47:8d:60:b3:ef:6a:88:4c:3d:b3:3c:
                    21:b9:e9:ce:b7:00:b9:28:01:c9:7a:fc:49:77:71:
                    00:71:0f:db:b8:ea:07:7c:5e:30:4c:2c:c2:b4:df:
                    23:a6:9f:7c:f0:b1:dd:d3:38:bd:8d:db:e7:ba:82:
                    10:cf:d8:7d:d1:16:12:d7:c0:b4:e2:c7:ca:b9:4a:
                    56:12:c2:b3:88:f3:0c:6b:ca:eb:54:91:76:30:12:
                    c5:4c:bd:49:33:1d:b3:26:5e:29:b9:07:ea:ac:d8:
                    91:a0:bb:52:bd:35:50:85:5a:e8:fd:a8:4a:de:5a:
                    e1:f6:4f:31:d5:c2:c2:9b:2c:ff:0f:a6:16:8c:e4:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:58:D8:ED:B1:84:7C:9C:CB:EF:22:BD:D5:BB:9B:79:46:74:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c7f99d6-ca15-364e-b18b-935d8705905a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:8f:ed:a3:8c:bc:d1:76:08:5e:6f:14:35:4e:02:25:70:
         d2:77:69:d7:fb:b8:8e:67:eb:d9:41:51:ff:78:1e:4c:8f:cb:
         ae:b0:41:db:5b:f3:ae:eb:85:bb:4d:0a:5e:d9:a0:2e:03:46:
         68:02:52:2a:4c:fe:ea:48:98:ff:92:d0:22:20:be:7b:16:c7:
         77:e4:75:69:ed:40:52:00:8e:5b:a7:1a:68:dc:fb:95:19:c5:
         3d:1f:f9:2b:4d:60:95:00:75:9a:fb:a3:42:da:12:9a:38:48:
         62:c2:00:56:bc:90:2d:ba:d7:c8:d4:ae:49:47:d2:46:06:76:
         43:30:9b:30:6c:6c:13:b0:d0:d3:84:99:03:1e:27:85:db:e5:
         aa:dc:20:2a:2d:f8:af:12:47:ae:8a:0d:70:3c:4c:66:33:de:
         a1:1e:36:37:77:1b:64:a9:84:09:5d:7a:b2:54:8c:98:80:80:
         a6:f4:09:59:ce:5e:eb:db:02:18:99:0c:3b:6d:72:e9:36:e6:
         f9:5d:f3:32:8d:55:e8:26:bf:e3:b6:f2:da:95:53:ee:d9:7d:
         ab:94:12:85:e1:3b:9c:58:61:e1:0c:2e:c7:34:ea:5d:73:8b:
         2a:20:76:9e:da:52:f4:b0:b5:56:cd:7d:22:ec:c5:b9:60:05:
         33:b8:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:52:10 2025 by rpki-client