Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/fb71276a-6caa-3b2f-9870-ea2aef1356c5.roa
File:                     fb71276a-6caa-3b2f-9870-ea2aef1356c5.roa (raw, json)
Hash identifier:          sQO64beyMotH40hEIavhpADNl8rNXPp/ZuehzLkb5rw=
Subject key identifier:   BF:62:89:42:9E:E0:37:B3:4E:C3:53:8F:8E:B5:95:5C:1B:7E:3F:1F
Certificate issuer:       /CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Certificate serial:       010D0C9F432858495B76D33893503BB9D0F4D2D0
Authority key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/fb71276a-6caa-3b2f-9870-ea2aef1356c5.roa
Signing time:             Sun 30 Mar 2025 07:11:48 +0000
ROA not before:           Sun 30 Mar 2025 07:11:48 +0000
ROA not after:            Sat 28 Jun 2025 07:11:48 +0000
asID:                     400260
IP address blocks:        192.231.84.0/23 maxlen: 24
                          2602:fcac::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sun 06 Apr 2025 20:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5b:76:d3:38:93:50:3b:b9:d0:f4:d2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
        Validity
            Not Before: Mar 30 07:11:48 2025 GMT
            Not After : Jun 28 07:11:48 2025 GMT
        Subject: CN=4b86f17e-648a-4827-a541-01c1ce19d24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:58:94:23:e6:35:19:cf:98:e1:29:75:da:
                    0b:37:3c:17:7f:20:6b:b4:4e:92:76:20:14:4f:44:
                    02:38:67:eb:86:a2:bf:2f:35:46:9a:e0:67:7f:be:
                    38:98:b1:2c:d9:73:4a:59:84:fb:b0:3c:1d:71:99:
                    5c:6a:25:58:9d:39:0b:3a:7d:42:3d:d7:3d:f4:28:
                    05:4b:a5:25:da:de:03:77:61:d1:49:a2:50:b8:59:
                    f6:50:85:25:a0:7c:50:74:1d:a8:ab:fb:ca:ed:34:
                    1b:50:c1:10:46:52:12:6d:09:00:b9:d6:f6:af:be:
                    9b:29:25:3a:29:c9:b7:10:d9:da:99:b0:30:03:9c:
                    b6:9d:ae:50:52:0e:bd:31:57:d6:a4:24:5c:30:f6:
                    67:5b:41:90:7e:93:eb:3e:cf:d6:13:d3:a8:db:94:
                    dd:ae:19:e5:83:11:ab:e6:a3:70:39:a7:1c:4b:68:
                    ed:f5:07:0e:2a:58:1d:2b:2c:18:ca:d2:c4:d7:52:
                    f0:50:ef:64:40:20:ae:9b:a9:14:73:25:8b:3a:d4:
                    a5:5b:25:08:a5:ee:40:8c:4e:0a:a2:27:bc:aa:8d:
                    b5:92:de:be:07:d6:3e:ee:41:c9:cb:c9:01:e6:35:
                    9d:6b:93:1e:06:39:00:e1:43:4e:c1:5e:c3:b0:70:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:62:89:42:9E:E0:37:B3:4E:C3:53:8F:8E:B5:95:5C:1B:7E:3F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/fb71276a-6caa-3b2f-9870-ea2aef1356c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl

            X509v3 Authority Key Identifier:
                keyid:3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.84.0/23
                IPv6:
                  2602:fcac::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:bf:4b:c8:b6:d5:1e:da:3f:1e:5c:f5:85:1c:eb:79:a1:
         e9:7c:af:bc:97:ee:af:c1:14:51:e4:26:32:52:24:2a:3b:e2:
         0e:8e:1c:fd:b8:3e:8c:5d:ec:67:28:8e:c7:f8:33:4b:f3:83:
         8a:a0:9a:87:54:60:ec:5d:1b:7a:5f:97:f5:6a:2d:a2:22:a8:
         97:f3:d1:b0:51:54:16:53:56:77:20:a3:0e:66:e3:d1:9c:10:
         04:80:04:e1:e7:5b:ec:61:4c:99:43:ce:f3:9f:ad:2d:34:7d:
         e6:9f:c8:0f:fe:a6:8e:a3:03:dd:88:92:69:21:71:f6:bd:07:
         fb:3d:13:fe:bc:be:34:6d:44:a3:b1:5f:46:3a:0a:97:e4:e8:
         93:d2:94:10:9f:87:8e:00:e9:e6:e4:5e:70:00:0e:91:65:30:
         1e:6b:69:8b:ae:69:58:ba:4d:05:10:13:32:c1:c0:24:c9:66:
         c0:e4:7f:12:dd:e2:42:aa:a1:38:6d:ab:8c:f7:95:4c:a8:60:
         7b:26:d4:a6:6f:a9:99:52:35:18:89:c3:50:a1:d1:07:ae:53:
         41:8d:2e:03:1b:de:8c:56:0a:97:a5:c4:c5:e1:11:09:d1:fd:
         bb:43:70:61:71:90:c2:eb:0d:04:82:ca:59:b0:a6:af:c2:27:
         bd:af:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:33 2025 by rpki-client