Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/b7f05b76-fe69-3d6f-86f1-364428ea9648.roa
File:                     b7f05b76-fe69-3d6f-86f1-364428ea9648.roa (raw, json)
Hash identifier:          5eOoJH5pb0ZIfiWVuuE/R/rjV3L16QWmssd3xEdgpuM=
Subject key identifier:   F5:7A:6E:7E:E2:C1:33:8C:CA:DF:62:B5:F3:62:06:CA:7F:F1:02:C6
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F43285849A0208EE074433DBB16241F80
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/b7f05b76-fe69-3d6f-86f1-364428ea9648.roa
Signing time:             Wed 23 Apr 2025 21:28:46 +0000
ROA not before:           Wed 23 Apr 2025 21:28:46 +0000
ROA not after:            Tue 22 Jul 2025 21:28:46 +0000
asID:                     10384
IP address blocks:        152.87.3.0/24 maxlen: 24
                          152.87.4.0/24 maxlen: 24
                          152.87.8.0/24 maxlen: 24
                          152.87.22.0/24 maxlen: 24
                          152.87.42.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 24 Apr 2025 20:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:20:8e:e0:74:43:3d:bb:16:24:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Apr 23 21:28:46 2025 GMT
            Not After : Jul 22 21:28:46 2025 GMT
        Subject: CN=3378c2ff-19ea-473f-b825-48dca58c27d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:fa:9d:e6:a5:8c:5f:92:00:dd:28:c2:0e:
                    ec:49:14:97:67:67:fd:10:95:13:fa:e5:f8:a0:d0:
                    c8:65:94:7b:84:4f:f6:f6:a2:bd:69:71:23:e3:bf:
                    96:a5:06:d2:4a:5d:ff:84:a0:6d:c9:a1:7e:d3:5c:
                    88:d2:96:73:63:34:3b:c5:4f:26:45:16:7e:d0:57:
                    a1:37:ac:51:11:5c:62:21:0b:0d:34:84:35:05:dc:
                    26:de:ee:9a:da:af:cd:9f:cf:47:63:01:bb:48:ae:
                    4a:5f:85:8b:7a:18:fe:56:21:8c:9d:8f:c2:d9:69:
                    54:1e:23:ff:77:32:0a:e7:78:56:bb:49:f9:cc:87:
                    c1:06:b2:1c:ea:dc:82:2e:1d:77:dc:46:32:5b:fc:
                    d7:0a:d2:b3:41:8c:52:11:79:48:f3:21:67:1a:dc:
                    d2:fc:f0:de:f5:65:13:ac:82:80:99:61:2e:8b:e9:
                    0a:66:95:23:4b:e7:27:15:2e:04:e2:43:8a:7b:5d:
                    b1:0c:0d:ee:99:ca:36:f6:87:a1:82:b8:17:3d:c0:
                    c0:86:3f:d8:db:af:ba:6a:6d:5a:3c:f3:70:f7:08:
                    49:98:d8:3d:03:1c:d3:f2:7c:9b:7c:69:4c:e9:bc:
                    a0:36:c5:3e:06:6c:30:f2:2b:3d:0f:66:2b:12:24:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7A:6E:7E:E2:C1:33:8C:CA:DF:62:B5:F3:62:06:CA:7F:F1:02:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/b7f05b76-fe69-3d6f-86f1-364428ea9648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.87.3.0-152.87.4.255
                  152.87.8.0/24
                  152.87.22.0/24
                  152.87.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ce:21:fb:57:ed:d8:c1:57:53:a6:69:cc:b8:d7:29:33:eb:
         bf:44:34:17:7a:ea:81:49:98:79:05:71:70:ab:3b:17:9c:cf:
         40:4d:f3:2e:2b:6b:36:5b:26:0a:8b:b3:a7:96:65:bf:6b:ef:
         72:49:10:9d:e4:4c:eb:c4:ba:d1:a3:64:e3:88:b7:05:f1:5a:
         4b:f0:6e:07:96:a7:27:66:18:72:69:5b:3a:60:dd:d2:85:e7:
         96:b9:aa:dc:75:66:99:d7:28:e8:7a:b3:79:e5:e9:9b:ba:b7:
         55:53:bb:17:41:4e:cf:58:f8:25:3c:15:82:4f:31:a9:7d:24:
         2b:8c:dc:1c:dc:1e:bf:3e:14:f2:e8:77:c4:94:e7:35:c8:05:
         2f:b5:fa:f0:8b:20:8c:c6:a1:ce:f3:1e:5c:cb:e3:7a:cf:f5:
         a7:9c:4b:8a:6f:46:d2:a5:0b:ab:93:a3:06:a5:63:d0:e9:90:
         c6:69:37:d8:68:57:59:03:21:01:53:e0:8c:67:cb:74:1d:d9:
         f7:b7:4d:99:34:b8:04:2d:71:55:ee:7f:e1:6b:97:98:eb:67:
         3e:49:da:81:a3:55:97:90:2c:e0:dd:d2:08:fa:11:ce:7f:45:
         95:09:d8:86:7f:5c:96:9b:8b:b3:77:59:16:54:a8:3a:be:99:
         f3:fe:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:15:38 2025 by rpki-client