Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/9cc6af6c-897a-3ec4-8b89-7e007ca0e107.roa
File:                     9cc6af6c-897a-3ec4-8b89-7e007ca0e107.roa (raw, json)
Hash identifier:          bR8NkoTRJjfAEnYLpLX+VBQv6PuPBlZyDF/ymhZqJS8=
Subject key identifier:   77:8D:E1:FE:C4:C3:74:86:AF:7E:1D:B6:0F:6F:7E:F6:7C:EB:04:6B
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584978929608B5E8BB3C3ABB4C80
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/9cc6af6c-897a-3ec4-8b89-7e007ca0e107.roa
Signing time:             Wed 09 Apr 2025 17:26:11 +0000
ROA not before:           Wed 09 Apr 2025 17:26:11 +0000
ROA not after:            Tue 08 Jul 2025 17:26:11 +0000
asID:                     14618
IP address blocks:        206.219.224.0/21 maxlen: 24
Validation:               Failed, certificate revoked on Wed 09 Apr 2025 19:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:92:96:08:b5:e8:bb:3c:3a:bb:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Apr  9 17:26:11 2025 GMT
            Not After : Jul  8 17:26:11 2025 GMT
        Subject: CN=e3d34111-0315-4055-a7f6-df5626e08ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:de:59:8d:e0:a7:87:55:bd:eb:1c:10:c8:
                    72:31:7a:00:a7:b9:e7:87:7d:a8:b0:f5:fa:25:f1:
                    62:09:bd:64:c6:0b:db:bf:7d:90:36:08:a4:be:1b:
                    94:0d:8a:f8:21:46:21:2f:81:34:9b:90:95:62:fb:
                    a7:64:a9:fd:85:ce:9b:a9:81:67:49:dc:33:a5:e9:
                    e5:0c:54:f3:29:6d:59:c5:4e:d5:c5:aa:db:a2:9e:
                    c9:b6:ce:e4:3e:a0:29:7e:5f:04:bc:8f:a2:69:0d:
                    08:3f:9e:8f:45:bc:78:92:e7:b0:45:9d:c9:ac:99:
                    90:94:c9:e0:1b:3f:77:6f:12:fd:cd:9c:75:57:6a:
                    d3:f3:19:ad:65:04:8e:67:15:19:f8:48:c7:ce:02:
                    5b:5a:af:e7:a0:b1:f9:f7:53:97:5c:a4:d8:37:d0:
                    6d:b2:04:01:e2:cf:b6:cd:fe:f9:d9:38:d5:4d:9d:
                    d6:9b:05:88:5b:eb:77:63:c1:71:5d:3b:9d:52:c6:
                    62:2a:26:5b:96:a8:10:1b:4e:eb:19:b3:3a:a2:4a:
                    d2:74:a0:28:03:19:4e:ff:24:69:d2:4a:27:ab:5d:
                    d6:cf:f5:00:33:00:37:2c:9c:36:42:5c:f3:d5:a8:
                    c3:4a:5f:b7:98:96:f3:78:b1:a3:5f:55:f6:c3:b2:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:E1:FE:C4:C3:74:86:AF:7E:1D:B6:0F:6F:7E:F6:7C:EB:04:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/9cc6af6c-897a-3ec4-8b89-7e007ca0e107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:79:4c:4f:ce:47:a5:95:82:a4:a6:07:05:af:78:5e:cc:c7:
         65:08:73:94:01:fb:70:dd:77:bd:10:b1:2c:fd:43:6f:15:d3:
         67:d5:ed:a6:9a:54:c7:df:44:d1:ed:42:f7:50:ea:b5:2a:43:
         ed:7f:25:eb:cb:a1:e8:fc:c6:6a:6a:62:3b:d2:bb:1d:41:e6:
         a0:b4:78:d1:fb:c8:9f:1c:cb:b4:6d:6e:24:58:44:db:28:98:
         45:d8:8c:41:7c:2a:04:8c:3f:93:0a:0d:83:49:ce:d2:95:e6:
         97:b6:2c:95:c2:6b:6b:7a:c5:eb:5e:a1:de:e1:28:0c:f0:5f:
         0c:56:8f:a8:b1:a1:3b:09:7f:90:5e:a3:55:bb:31:b7:5b:49:
         6f:f0:db:ce:24:b5:cc:6c:8b:3d:cf:0d:f6:a7:4c:8c:62:ef:
         27:6a:fa:06:2a:c1:5d:a2:81:18:a9:94:3f:78:37:c9:dd:28:
         a4:c0:fa:af:c8:9d:75:eb:f0:20:9c:8d:9c:71:9c:1d:bc:2d:
         5d:ca:6e:57:b4:f4:0c:6d:aa:90:8d:4b:67:10:5f:8b:e7:80:
         3f:38:82:ac:6e:9b:ee:45:ef:af:97:da:df:44:a9:2f:3f:24:
         81:ab:38:03:8b:9e:0d:92:67:67:30:fa:cf:96:f5:c7:07:db:
         5a:f3:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:31 2025 by rpki-client