Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/48bd969e-ece3-35a1-81ec-b181f4bcee5a.roa
File:                     48bd969e-ece3-35a1-81ec-b181f4bcee5a.roa (raw, json)
Hash identifier:          Dmk/aOmYqm3SrwNaqtqrgEUwwVzVnjABcrZ4hzj+m7w=
Subject key identifier:   91:97:B2:D3:BF:C2:5A:3B:3D:F2:CE:E0:C9:2A:B7:A2:02:7D:1E:8A
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F43285849E7D4DE8A901ED023D1D16180
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/48bd969e-ece3-35a1-81ec-b181f4bcee5a.roa
Signing time:             Mon 19 May 2025 13:54:28 +0000
ROA not before:           Mon 19 May 2025 13:54:28 +0000
ROA not after:            Sun 17 Aug 2025 13:54:28 +0000
asID:                     9541
IP address blocks:        104.245.240.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 22 May 2025 14:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:d4:de:8a:90:1e:d0:23:d1:d1:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: May 19 13:54:28 2025 GMT
            Not After : Aug 17 13:54:28 2025 GMT
        Subject: CN=cedc3fd7-ad7c-45a5-917f-3a1aad6a247e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:21:e9:cc:a9:83:59:b9:92:03:f1:4b:24:
                    25:17:f0:71:bf:4e:18:40:ba:87:60:ea:af:4e:21:
                    81:b0:80:8e:23:68:95:9b:2e:5a:da:40:74:e6:50:
                    09:c8:08:c8:46:40:34:94:ca:6a:d6:97:e1:de:c6:
                    7e:a2:48:9e:01:36:ab:46:53:d0:ca:46:48:20:a9:
                    e1:05:03:6f:13:5c:81:8a:16:d8:4a:85:40:1f:a7:
                    fe:1c:23:7e:33:21:6c:75:6c:e3:19:84:5c:9b:c7:
                    d7:15:d5:2b:05:e0:a8:b5:a0:df:f3:e1:c4:28:06:
                    bb:90:ce:2b:ee:61:2b:12:1f:cd:28:ee:25:fe:eb:
                    f5:50:d5:22:a2:88:c2:61:62:0f:26:c8:88:91:27:
                    e4:43:d7:36:77:4e:c0:87:de:b9:20:a9:7f:e6:35:
                    67:36:0b:7a:52:e6:06:8d:64:e0:04:4c:8b:8f:5f:
                    34:38:fb:c8:db:31:a5:cd:6e:37:39:d7:40:20:d4:
                    3a:b4:f2:fa:c4:c8:3b:05:43:f1:3c:b4:86:8e:54:
                    f3:7f:76:64:fc:3b:98:7e:16:69:bf:ad:ea:bd:ae:
                    09:1f:97:43:e7:a1:02:3e:04:9b:26:48:ee:51:0d:
                    31:e3:34:cc:9f:14:92:7b:e1:af:32:3d:a1:88:a6:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:97:B2:D3:BF:C2:5A:3B:3D:F2:CE:E0:C9:2A:B7:A2:02:7D:1E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/48bd969e-ece3-35a1-81ec-b181f4bcee5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:71:1b:ad:be:af:26:bb:8d:50:a2:f3:fa:5a:74:76:a6:
         ab:1b:2c:d0:37:b7:e7:bb:74:9f:98:23:9f:86:76:00:eb:41:
         36:f6:ac:ed:3a:89:2d:4e:c6:46:0b:c5:b0:98:54:cf:48:27:
         20:ea:3e:87:87:c5:93:12:18:b6:69:ba:a8:24:e8:8c:62:c9:
         83:b0:24:d8:53:4b:2e:6c:b1:f5:06:c5:91:d6:51:40:a7:49:
         df:90:58:8f:8e:57:69:79:22:e3:4d:2e:4b:f9:e8:3b:18:c6:
         0d:76:e9:a0:7f:2b:4d:c9:d3:83:8f:6d:55:96:c2:69:32:57:
         2d:51:dd:0f:ac:29:de:c2:93:0e:1f:55:b2:57:18:c1:9f:46:
         28:81:d4:57:05:57:cd:55:35:12:0b:5b:1f:e7:cf:37:8e:a0:
         b9:fa:7d:98:3b:66:6e:a0:fd:c0:bb:ba:6a:8d:b9:a4:64:bf:
         56:a7:2c:a5:d9:b7:02:39:1e:3c:cc:c7:25:59:8b:f0:56:05:
         98:c6:e5:43:bd:85:39:78:4b:31:b9:2d:ee:9b:9d:a9:ec:c2:
         bc:78:26:af:7b:af:b7:95:94:ef:59:75:3d:aa:99:8a:5f:e2:
         3d:c2:8a:53:d3:9b:65:04:9d:4a:4e:ae:c2:4d:c3:6c:f8:ad:
         76:6f:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----